config SECURITY_KIC
	bool "Kylin Integrity Control"
	depends on SECURITY && SECURITYFS && AUDITSYSCALL
	default n
	help
		Kylin Integrity Control module. It's used to control the
		access of differnt levels: system objects、user objects
		and network objects are labeled with different levels.
		It can prevent the system from being attacked.

		If you are unsure how to answer this question, answer N.

config SECURITY_KIC_STATUS_BOOTPARAM
	bool "Kylin Integrity Control boot parameter"
	depends on SECURITY_KIC
	default n
	help
		This option adds a kernel parameter 'kic_status', which allows
		to change KIC status at boot. If this option is selected, KIC
		status can be changed with kic_status= on the kernel command
		line. The purpose of this option is to allow a single
		kernel image to be distributed with KIC built in, but not
		necessarily enabled.

		If you are unsure how to answer this question, answer N.

config SECURITY_KIC_STATUS_DEFAULT
	int "Kylin Integrity Control default status"
	depends on SECURITY_KIC
	range 0 2
	default 2
	help
		This option sets the default value for the KIC status.
