7af9cd3ac5
Add support for configuring security context support to allow building for non-SELinux targets. Remove some obsolete patches. Signed-off-by: Will Newton <will.newton@gmail.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
80 lines
2.2 KiB
Plaintext
80 lines
2.2 KiB
Plaintext
config BR2_PACKAGE_IPSEC_TOOLS
|
|
bool "ipsec-tools"
|
|
select BR2_PACKAGE_OPENSSL
|
|
select BR2_PACKAGE_FLEX
|
|
select BR2_PACKAGE_FLEX_LIBFL
|
|
help
|
|
This package is required to support IPSec for Linux 2.6+
|
|
|
|
config BR2_PACKAGE_IPSEC_TOOLS_ADMINPORT
|
|
default y
|
|
depends on BR2_PACKAGE_IPSEC_TOOLS
|
|
bool "Enable racoonctl(8)."
|
|
help
|
|
Lets racoon to listen to racoon admin port, which is to
|
|
be contacted by racoonctl(8).
|
|
|
|
config BR2_PACKAGE_IPSEC_TOOLS_NATT
|
|
depends on BR2_PACKAGE_IPSEC_TOOLS
|
|
bool "Enable NAT-Traversal"
|
|
help
|
|
This needs kernel support, which is available on Linux. On
|
|
NetBSD, NAT-Traversal kernel support has not been integrated
|
|
yet, you can get it from here:
|
|
|
|
http://ipsec-tools.sourceforge.net/netbsd_nat-t.diff If you
|
|
|
|
live in a country where software patents are legal, using
|
|
NAT-Traversal might infringe a patent.
|
|
|
|
|
|
config BR2_PACKAGE_IPSEC_TOOLS_FRAG
|
|
depends on BR2_PACKAGE_IPSEC_TOOLS
|
|
bool "Enable IKE fragmentation."
|
|
help
|
|
Enable IKE fragmentation, which is a workaround for
|
|
broken routers that drop fragmented packets
|
|
|
|
config BR2_PACKAGE_IPSEC_TOOLS_STATS
|
|
default y
|
|
depends on BR2_PACKAGE_IPSEC_TOOLS
|
|
bool "Enable statistics logging function."
|
|
|
|
config BR2_PACKAGE_IPSEC_TOOLS_IPV6
|
|
default y
|
|
depends on BR2_PACKAGE_IPSEC_TOOLS && BR2_INET_IPV6
|
|
bool "Enable IPv6 support"
|
|
help
|
|
This option has no effect if uClibc has been compiled without
|
|
IPv6 support.
|
|
|
|
config BR2_PACKAGE_IPSEC_TOOLS_READLINE
|
|
depends on BR2_PACKAGE_IPSEC_TOOLS
|
|
select BR2_PACKAGE_READLINE
|
|
bool "Enable readline input support if available."
|
|
|
|
config BR2_PACKAGE_IPSEC_TOOLS_LIBS
|
|
bool "Install IPSec libraries under staging_dir/lib"
|
|
default y
|
|
depends on BR2_PACKAGE_IPSEC_TOOLS
|
|
help
|
|
Install libipsec.a and libracoon.a under staging_dir/lib for further
|
|
development on a host machine.
|
|
|
|
choice
|
|
prompt "Security context"
|
|
default BR2_PACKAGE_IPSEC_SECCTX_DISABLE
|
|
help
|
|
Selects whether or not to enable security context support.
|
|
|
|
config BR2_PACKAGE_IPSEC_SECCTX_DISABLE
|
|
bool "Disable security context support"
|
|
|
|
config BR2_PACKAGE_IPSEC_SECCTX_ENABLE
|
|
bool "Enable SELinux security context support"
|
|
|
|
config BR2_PACKAGE_IPSEC_SECCTX_KERNEL
|
|
bool "Enable kernel security context"
|
|
|
|
endchoice
|