xnu-1504.9.37.tar.gz

[apple/xnu.git] / security / conf / MASTER.i386

diff --git a/security/conf/MASTER.i386 b/security/conf/MASTER.i386
index 01b3a55d28ff511350ad398402247f563ca245f6..524008c7b9c6b2bc510551044a047ad2b63e2742 100644 (file)
--- a/security/conf/MASTER.i386
+++ b/security/conf/MASTER.i386
@@ -1,24 +1,30 @@
 ######################################################################
 #
-#  RELEASE     = [ intel mach libkerncpp config_dtrace ]
+#  RELEASE     = [ intel mach libkerncpp config_dtrace audit ]
 #  PROFILE     = [ RELEASE profile ]
 #  DEBUG       = [ RELEASE debug ]
 #
-#  EMBEDDED    = [ intel mach libkerncpp ]
+#
+#  EMBEDDED    = [ intel mach libkerncpp audit ]
 #  DEVELOPMENT = [ EMBEDDED config_dtrace ]
 #
 ######################################################################
 
+machine                "i386"                                  # <intel>
+cpu            "i386"                                  # <intel>
+
 #
-# Note: MAC options must be set in both bsd/conf and security/conf MASTER files
+# Note: MAC/AUDIT options must be set in all the bsd/conf, osfmk/conf, and 
+# security/conf MASTER files.
 #
 options                CONFIG_MACF                     # Mandatory Access Control Framework
 options                CONFIG_MACF_SOCKET_SUBSET       # MACF subset of socket support
+options                CONFIG_FSE
 #options       CONFIG_MACF_SOCKET
 #options       CONFIG_MACF_NET
 #options       CONFIG_MACF_ALWAYS_LABEL_MBUF
 #options       CONFIG_MACF_DEBUG
 #options       CONFIG_MACF_MACH
+options                CONFIG_AUDIT                    # kernel auditing
 
-machine                "i386"                                  # <intel>
-cpu            "i386"                                  # <intel>
+options     NO_NESTED_PMAP                  # <no_nested_pmap>