forked from Qortal/Brooklyn
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
80 lines
2.4 KiB
80 lines
2.4 KiB
# SPDX-License-Identifier: GPL-2.0-only |
|
config SUNRPC |
|
tristate |
|
depends on MULTIUSER |
|
|
|
config SUNRPC_GSS |
|
tristate |
|
select OID_REGISTRY |
|
depends on MULTIUSER |
|
|
|
config SUNRPC_BACKCHANNEL |
|
bool |
|
depends on SUNRPC |
|
|
|
config SUNRPC_SWAP |
|
bool |
|
depends on SUNRPC |
|
|
|
config RPCSEC_GSS_KRB5 |
|
tristate "Secure RPC: Kerberos V mechanism" |
|
depends on SUNRPC && CRYPTO |
|
depends on CRYPTO_MD5 && CRYPTO_DES && CRYPTO_CBC && CRYPTO_CTS |
|
depends on CRYPTO_ECB && CRYPTO_HMAC && CRYPTO_SHA1 && CRYPTO_AES |
|
default y |
|
select SUNRPC_GSS |
|
help |
|
Choose Y here to enable Secure RPC using the Kerberos version 5 |
|
GSS-API mechanism (RFC 1964). |
|
|
|
Secure RPC calls with Kerberos require an auxiliary user-space |
|
daemon which may be found in the Linux nfs-utils package |
|
available from http://linux-nfs.org/. In addition, user-space |
|
Kerberos support should be installed. |
|
|
|
If unsure, say Y. |
|
|
|
config SUNRPC_DISABLE_INSECURE_ENCTYPES |
|
bool "Secure RPC: Disable insecure Kerberos encryption types" |
|
depends on RPCSEC_GSS_KRB5 |
|
default n |
|
help |
|
Choose Y here to disable the use of deprecated encryption types |
|
with the Kerberos version 5 GSS-API mechanism (RFC 1964). The |
|
deprecated encryption types include DES-CBC-MD5, DES-CBC-CRC, |
|
and DES-CBC-MD4. These types were deprecated by RFC 6649 because |
|
they were found to be insecure. |
|
|
|
N is the default because many sites have deployed KDCs and |
|
keytabs that contain only these deprecated encryption types. |
|
Choosing Y prevents the use of known-insecure encryption types |
|
but might result in compatibility problems. |
|
|
|
config SUNRPC_DEBUG |
|
bool "RPC: Enable dprintk debugging" |
|
depends on SUNRPC && SYSCTL |
|
select DEBUG_FS |
|
help |
|
This option enables a sysctl-based debugging interface |
|
that is be used by the 'rpcdebug' utility to turn on or off |
|
logging of different aspects of the kernel RPC activity. |
|
|
|
Disabling this option will make your kernel slightly smaller, |
|
but makes troubleshooting NFS issues significantly harder. |
|
|
|
If unsure, say Y. |
|
|
|
config SUNRPC_XPRT_RDMA |
|
tristate "RPC-over-RDMA transport" |
|
depends on SUNRPC && INFINIBAND && INFINIBAND_ADDR_TRANS |
|
default SUNRPC && INFINIBAND |
|
select SG_POOL |
|
help |
|
This option allows the NFS client and server to use RDMA |
|
transports (InfiniBand, iWARP, or RoCE). |
|
|
|
To compile this support as a module, choose M. The module |
|
will be called rpcrdma.ko. |
|
|
|
If unsure, or you know there is no RDMA capability on your |
|
hardware platform, say N.
|
|
|