X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=security%2Fselinux%2FKconfig;h=ea459b9aba148cb9a5640e5d76940c9e1a92dfad;hb=6a77f38946aaee1cd85eeec6cf4229b204c15071;hp=5a4a7988a7a75fb13d574f6c993f8996d3a24dbc;hpb=87fc8d1bb10cd459024a742c6a10961fefcef18f;p=linux-2.6.git

diff --git a/security/selinux/Kconfig b/security/selinux/Kconfig
index 5a4a7988a..ea459b9ab 100644
--- a/security/selinux/Kconfig
+++ b/security/selinux/Kconfig
@@ -34,7 +34,7 @@ config SECURITY_SELINUX_BOOTPARAM_VALUE
 	  'selinux', which allows SELinux to be disabled at boot.  If this
 	  option is set to 0 (zero), the SELinux kernel parameter will
 	  default to 0, disabling SELinux at bootup.  If this option is
-	  set to 1 (one), the SELinux kernel paramater will default to 1,
+	  set to 1 (one), the SELinux kernel parameter will default to 1,
 	  enabling SELinux at bootup.
 
 	  If you are unsure how to answer this question, answer 1.
@@ -67,6 +67,15 @@ config SECURITY_SELINUX_DEVELOP
 	  can interactively toggle the kernel between enforcing mode and
 	  permissive mode (if permitted by the policy) via /selinux/enforce.
 
+config SECURITY_SELINUX_AVC_STATS
+	bool "NSA SELinux AVC Statistics"
+	depends on SECURITY_SELINUX
+	default y
+	help
+	  This option collects access vector cache statistics to
+	  /selinux/avc/cache_stats, which may be monitored via
+	  tools such as avcstat.
+
 config SECURITY_SELINUX_MLS
 	bool "NSA SELinux MLS policy (EXPERIMENTAL)"
 	depends on SECURITY_SELINUX && EXPERIMENTAL