bool 'RSBAC proc support' CONFIG_RSBAC_PROC
bool 'Inherit as default' CONFIG_RSBAC_DEF_INHERIT
bool 'Check on init' CONFIG_RSBAC_INIT_CHECK
bool 'Disable RSBAC writing to disk' CONFIG_RSBAC_NO_WRITE
if [ "$CONFIG_RSBAC_NO_WRITE" = "n" ]; then
    bool '  Allow attribute writing on MSDOS filesystems' CONFIG_RSBAC_MSDOS_WRITE
    int '  RSBAC auto write to disk interval in seconds' CONFIG_RSBAC_AUTO_WRITE 2
fi
comment ' '
bool 'RSBAC Maintenance Kernel' CONFIG_RSBAC_MAINT
if [ "$CONFIG_RSBAC_MAINT" = "n" ]; then
  comment ' '
  bool 'RSBAC support for MAC policy' CONFIG_RSBAC_MAC
  if [ "$CONFIG_RSBAC_MAC" = "y" ]; then
    bool '  MAC Role Protection' CONFIG_RSBAC_MAC_ROLE_PROT
    bool '  MAC protection for AUTH module' CONFIG_RSBAC_MAC_AUTH_PROT
    bool '  Light MAC edition' CONFIG_RSBAC_MAC_LIGHT    
  fi
  bool 'RSBAC support for FC policy' CONFIG_RSBAC_FC
  if [ "$CONFIG_RSBAC_FC" = "y" ]; then
    bool '  FC Role Protection' CONFIG_RSBAC_FC_ROLE_PROT
    bool '  FC protection for AUTH module' CONFIG_RSBAC_FC_AUTH_PROT
  fi
  bool 'RSBAC support for SIM policy' CONFIG_RSBAC_SIM
  if [ "$CONFIG_RSBAC_SIM" = "y" ]; then
    bool '  SIM Role Protection' CONFIG_RSBAC_SIM_ROLE_PROT
    bool '  SIM protection for AUTH module' CONFIG_RSBAC_SIM_AUTH_PROT
  fi
  bool 'RSBAC support for PM policy' CONFIG_RSBAC_PM
  if [ "$CONFIG_RSBAC_PM" = "y" ]; then
    bool '  PM Role Protection' CONFIG_RSBAC_PM_ROLE_PROT
    bool '  PM protection for AUTH module' CONFIG_RSBAC_PM_AUTH_PROT
  fi
  bool 'RSBAC support for MS policy' CONFIG_RSBAC_MS
  if [ "$CONFIG_RSBAC_MS" = "y" ]; then
    bool '  Also check read-open and read-write-open' CONFIG_RSBAC_MS_READ
    bool '  Also do socket scan' CONFIG_RSBAC_MS_SOCK
    bool '  MS Role Protection' CONFIG_RSBAC_MS_ROLE_PROT
    bool '  MS protection for AUTH module' CONFIG_RSBAC_MS_AUTH_PROT
  fi
  bool 'RSBAC support for FF policy' CONFIG_RSBAC_FF
  if [ "$CONFIG_RSBAC_FF" = "y" ]; then
    bool '  FF Role Protection' CONFIG_RSBAC_FF_ROLE_PROT
    bool '  FF protection for AUTH module' CONFIG_RSBAC_FF_AUTH_PROT
  fi
  bool 'RSBAC support for RC policy' CONFIG_RSBAC_RC
  if [ "$CONFIG_RSBAC_RC" = "y" ]; then
    int ' Number of supported RC roles (3-64)' CONFIG_RSBAC_RC_NR_ROLES 32
    bool '  RC Role Protection' CONFIG_RSBAC_RC_ROLE_PROT
    if [ "$CONFIG_RSBAC_RC_ROLE_PROT" = "y" ]; then
      int '    RC intermediate role' CONFIG_RSBAC_RC_INTER_ROLE 0
    fi
    bool '  RC protection for AUTH module' CONFIG_RSBAC_RC_AUTH_PROT
  fi
  bool 'RSBAC support for AUTH policy' CONFIG_RSBAC_AUTH
  if [ "$CONFIG_RSBAC_AUTH" = "y" ]; then
    bool '  AUTH module and attribute protection' CONFIG_RSBAC_AUTH_AUTH_PROT
  fi
  bool 'Support for Registration of decision modules (REG)' CONFIG_RSBAC_REG
  if [ "$CONFIG_RSBAC_REG" = "y" ]; then
    int '  REG supported number of modules' CONFIG_RSBAC_REG_NR 2
    bool '  Build REG sample modules' CONFIG_RSBAC_REG_SAMPLES
  fi
  bool 'RSBAC support for ACL policy' CONFIG_RSBAC_ACL
  if [ "$CONFIG_RSBAC_ACL" = "y" ]; then
    bool '  Allow masking out of SUPERVISOR right' CONFIG_RSBAC_ACL_SUPER_FILTER
    bool '  ACL protection for AUTH module' CONFIG_RSBAC_ACL_AUTH_PROT
  fi
  comment ' '
  bool 'RSBAC policies switchable' CONFIG_RSBAC_SWITCH
#  bool 'Use RSBAC maintained process owner' CONFIG_RSBAC_USE_RSBAC_OWNER
  bool 'Support secure_delete' CONFIG_RSBAC_SECDEL
  bool 'No decision on net mounts' CONFIG_RSBAC_NO_DECISION_ON_NETMOUNT
  bool 'RSBAC net support' CONFIG_RSBAC_NET
  bool 'RSBAC check sys_syslog' CONFIG_RSBAC_SYSLOG
  bool 'Normal user MODIFY_PERM access to ST_ioports (X support)' CONFIG_RSBAC_USER_MOD_IOPERM
  bool 'Individual file/dir/dev object logging' CONFIG_RSBAC_IND_LOG
  bool 'Individual user logging' CONFIG_RSBAC_IND_USER_LOG
  bool 'Individual program logging' CONFIG_RSBAC_IND_PROG_LOG
  bool 'Log full path' CONFIG_RSBAC_LOG_FULL_PATH
  if [ "$CONFIG_RSBAC_LOG_FULL_PATH" = "y" ]; then
    int '  Maximum path length (256 - 1999)' CONFIG_RSBAC_MAX_PATH_LEN 1024
  fi
  bool 'RSBAC own logging facility' CONFIG_RSBAC_RMSG
  if [ "$CONFIG_RSBAC_RMSG" = "y" ]; then
    bool '  Do not log to syslog' CONFIG_RSBAC_RMSG_EXCL
  fi
  if [ "$CONFIG_RSBAC_PROC" = "y" ]; then
    bool 'RSBAC extra statistics' CONFIG_RSBAC_XSTATS
  fi
fi

if [ "$CONFIG_RSBAC_MAINT" = "y" ]; then
#  bool 'Maintenance support for PM policy data' CONFIG_RSBAC_PM_MAINT
  bool '  Maintenance support for RC policy data' CONFIG_RSBAC_RC_MAINT
  if [ "$CONFIG_RSBAC_RC_MAINT" = "y" ]; then
    int '   Number of supported RC roles (3-64)' CONFIG_RSBAC_RC_NR_ROLES 32
  fi
  bool '  Maintenance support for AUTH policy file capabilities' CONFIG_RSBAC_AUTH_MAINT
  bool '  Maintenance support for ACL policy data' CONFIG_RSBAC_ACL_MAINT
fi
