1 files changed, 13 insertions, 0 deletions

diff --git a/security/integrity/evm/Kconfig b/security/integrity/evm/Kconfig
new file mode 100644
index 000000000000..afbb59dd262d
--- /dev/null
+++ b/security/integrity/evm/Kconfig
@@ -0,0 +1,13 @@
+config EVM
+        boolean "EVM support"
+        depends on SECURITY && KEYS && (TRUSTED_KEYS=y || TRUSTED_KEYS=n)
+        select CRYPTO_HMAC
+        select CRYPTO_MD5
+        select CRYPTO_SHA1
+        select ENCRYPTED_KEYS
+        default n
+        help
+          EVM protects a file's security extended attributes against
+          integrity attacks.
+
+          If you are unsure how to answer this question, answer N.