1 files changed, 13 insertions, 0 deletions

diff --git a/security/yama/Kconfig b/security/yama/Kconfig
new file mode 100644
index 000000000000..51d6709d8bbd
--- /dev/null
+++ b/security/yama/Kconfig
@@ -0,0 +1,13 @@
+config SECURITY_YAMA
+        bool "Yama support"
+        depends on SECURITY
+        select SECURITYFS
+        select SECURITY_PATH
+        default n
+        help
+          This selects Yama, which extends DAC support with additional
+          system-wide security settings beyond regular Linux discretionary
+          access controls. Currently available is ptrace scope restriction.
+          Further information can be found in Documentation/security/Yama.txt.
+
+          If you are unsure how to answer this question, answer N.