X-Git-Url: http://pileus.org/git/?a=blobdiff_plain;f=init%2FKconfig;h=5ad8b775f2ac26f79497773d107d8faae123d24b;hb=633b45454503489209b0d9a45f9e3cd1b852c614;hp=a075765d5fbe4b85ca033708f454de38c3ea3798;hpb=0a300be6d5be8f66cd96609334710c268d0bfdce;p=~andy%2Flinux

diff --git a/init/Kconfig b/init/Kconfig
index a075765d5fb..5ad8b775f2a 100644
--- a/init/Kconfig
+++ b/init/Kconfig
@@ -372,6 +372,20 @@ config AUDIT_TREE
 	depends on AUDITSYSCALL
 	select FSNOTIFY
 
+config AUDIT_LOGINUID_IMMUTABLE
+	bool "Make audit loginuid immutable"
+	depends on AUDIT
+	help
+	  The config option toggles if a task setting it's loginuid requires
+	  CAP_SYS_AUDITCONTROL or if that task should require no special permissions
+	  but should instead only allow setting its loginuid if it was never
+	  previously set.  On systems which use systemd or a similar central
+	  process to restart login services this should be set to true.  On older
+	  systems in which an admin would typically have to directly stop and
+	  start processes this should be set to false.  Setting this to true allows
+	  one to drop potentially dangerous capabilites from the login tasks,
+	  but may not be backwards compatible with older init systems.
+
 source "kernel/irq/Kconfig"
 
 menu "RCU Subsystem"