1 files changed, 10 insertions, 0 deletions

diff --git a/security/Kconfig b/security/Kconfig
index a94ee94cf491..8086e61058e3 100644
--- a/security/Kconfig
+++ b/security/Kconfig
@@ -80,6 +80,16 @@ config SECURITY_CAPABILITIES
           This enables the "default" Linux capabilities functionality.
           If you are unsure how to answer this question, answer Y.
 
+config SECURITY_FILE_CAPABILITIES
+        bool "File POSIX Capabilities (EXPERIMENTAL)"
+        depends on (SECURITY=n || SECURITY_CAPABILITIES!=n) && EXPERIMENTAL
+        default n
+        help
+          This enables filesystem capabilities, allowing you to give
+          binaries a subset of root's powers without using setuid 0.
+
+          If in doubt, answer N.
+
 config SECURITY_ROOTPLUG
         bool "Root Plug Support"
         depends on USB=y && SECURITY