config BR2_PACKAGE_APPARMOR
	bool "apparmor"
	depends on BR2_USE_MMU # fork()
	depends on BR2_INSTALL_LIBSTDCPP
	depends on BR2_TOOLCHAIN_HAS_SYNC_4 # libapparmor
	depends on BR2_TOOLCHAIN_HAS_THREADS # libapparmor
	depends on BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_16 # libapparmor
	select BR2_PACKAGE_LIBAPPARMOR
	help
	  AppArmor is an effective and easy-to-use Linux application
	  security system. AppArmor proactively protects the operating
	  system and applications from external or internal threats,
	  even zero-day attacks, by enforcing good behavior and
	  preventing even unknown application flaws from being
	  exploited.

	  This package builds the parser (which can load profiles).

	  http://wiki.apparmor.net

if BR2_PACKAGE_APPARMOR

config BR2_PACKAGE_APPARMOR_BINUTILS
	bool "binutils"
	help
	  A set of utilities (written in C):
	    aa-enabled    aa-exec

comment "utils need python3"
	depends on !BR2_PACKAGE_PYTHON3

config BR2_PACKAGE_APPARMOR_UTILS
	bool "utils"
	depends on BR2_PACKAGE_PYTHON3
	select BR2_PACKAGE_BUSYBOX_SHOW_OTHERS # net-tools
	select BR2_PACKAGE_NET_TOOLS # runtime (aa-unconfined)
	select BR2_PACKAGE_PYTHON3_READLINE
	help
	  A set of utilities (written in python):
	    aa-audit          aa-disable      aa-logprof
	    aa-autodep        aa-easyprof     aa-mergeprof
	    aa-cleanprof      aa-enforce      aa-status
	    aa-complain       aa-genprof      aa-unconfined

if BR2_PACKAGE_APPARMOR_UTILS

comment "utils (extras) need bash and perl, and busybox or gawk"
	depends on !BR2_PACKAGE_BASH || !BR2_PACKAGE_PERL \
		|| !(BR2_PACKAGE_BUSYBOX || BR2_PACKAGE_GAWK)

config BR2_PACKAGE_APPARMOR_UTILS_EXTRA
	bool "utils (extras)"
	depends on BR2_PACKAGE_BASH
	depends on BR2_PACKAGE_PERL
	depends on BR2_PACKAGE_BUSYBOX || BR2_PACKAGE_GAWK
	help
	  An extra set of utilities (written in a mixture of sh,
	  bash, perl, and awk):
	    aa-decode          (bash + perl)
	    aa-notify          (perl)
	    aa-remove-unknown  (sh + awk)

endif # BR2_PACKAGE_APPARMOR_UTILS

config BR2_PACKAGE_APPARMOR_PROFILES
	bool "profiles"
	help
	  Installs server-class profiles for a wide range of
	  usual programs and daemons.

endif # BR2_PACKAGE_APPARMOR

comment "apparmor needs a toolchain w/ headers >= 3.16, threads, C++"
	depends on BR2_USE_MMU
	depends on BR2_TOOLCHAIN_HAS_SYNC_4
	depends on !BR2_INSTALL_LIBSTDCPP || !BR2_TOOLCHAIN_HAS_THREADS \
		|| !BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_16