config SECURITY_ELFVERIFY
       bool "elfverify support"
       depends on SECURITY
       depends on NET
       select SECURITYFS
       select SECURITY_PATH
       select SECURITY_NETWORK
       default y
       help
        This selects an elf verify for process invaking and volume mount/umount.
config SECURITY_ELFVERIFY_DISABLE_ACL_ELF
       bool "disable elfverify"
       depends on SECURITY_ELFVERIFY
       default n
       help
        This will disable elf verify
config SECURITY_ELFVERIFY_DISABLE_ACL_NETWORK
       bool "disable network acl"
       depends on SECURITY_ELFVERIFY
       default n
       help
        This will disable network acl
config SECURITY_ELFVERIFY_GUARD_INTEGRITY
       bool "enable integrity guard"
       depends on SECURITY_ELFVERIFY
       default y
       help
        This will enable integrity guard
config SECURITY_ELFVERIFY_SYSFS_DEVELOPER_MODE
       bool "userspace interface to set developer mode"
       depends on SECURITY_ELFVERIFY
       default y
       help
        This will enable userspace interface to set developer mode
config SECURITY_ELFVERIFY_SYSFS_GUARD_INTEGRITY_STATUS
       bool "userspace interface to set guard integrity status"
       depends on SECURITY_ELFVERIFY
       default y
       help
        This will enable userspace interface to set guard integrity status
