kernel: Add option to make using filesystem ACL support the default

This adds a configuration options that allows to make filesystem ACL support
the default in the kernel, except for old nfs.

Signed-off-by: Daniel Dickinson <openwrt@daniel.thecshore.com>

4 files changed, 95 insertions, 1 deletions

diff --git a/config/Config-kernel.in b/config/Config-kernel.in
index b05ff23694..8b3989dbea 100644
--- a/config/Config-kernel.in
+++ b/config/Config-kernel.in
@@ -630,3 +630,88 @@ if KERNEL_IP_PNP
 		def_bool y
 
 endif
+
+config USE_FS_ACL_ATTR
+	bool "Use filesystem ACL and attr support by default"
+	default n
+	help
+	  Make using ACLs (e.g. POSIX ACL, NFSv4 ACL) the default
+	  for kernel and packages, except tmpfs, flash filesystems,
+	  and old NFS.  Also enable userspace extended attribute support
+	  by default.  (OpenWrt already has an expection it will be
+	  present in the kernel).
+
+config KERNEL_FS_POSIX_ACL
+	bool "Enable POSIX ACL support"
+	default y if USE_FS_ACL_ATTR
+
+config KERNEL_BTRFS_FS_POSIX_ACL
+	bool "Enable POSIX ACL for BtrFS Filesystems"
+	select KERNEL_FS_POSIX_ACL
+	default y if USE_FS_ACL_ATTR
+
+config KERNEL_EXT4_FS_POSIX_ACL
+	bool "Enable POSIX ACL for Ext4 Filesystems"
+	select KERNEL_FS_POSIX_ACL
+	default y if USE_FS_ACL_ATTR
+
+config KERNEL_F2FS_FS_POSIX_ACL
+	bool "Enable POSIX ACL for F2FS Filesystems"
+	select KERNEL_FS_POSIX_ACL
+	default n
+
+config KERNEL_JFFS2_FS_POSIX_ACL
+	bool "Enable POSIX ACL for JFFS2 Filesystems"
+	select KERNEL_FS_POSIX_ACL
+	default n
+
+config KERNEL_TMPFS_POSIX_ACL
+	bool "Enable POSIX ACL for TMPFS Filesystems"
+	select KERNEL_FS_POSIX_ACL
+	default n
+
+config KERNEL_CIFS_ACL
+	bool "Enable CIFS ACLs"
+	select KERNEL_FS_POSIX_ACL
+	default y if USE_FS_ACL_ATTR
+
+config KERNEL_HFS_FS_POSIX_ACL
+	bool "Enable POSIX ACL for HFS Filesystems"
+	select KERNEL_FS_POSIX_ACL
+	default y if USE_FS_ACL_ATTR
+
+config KERNEL_HFSPLUG_FS_POSIX_ACL
+	bool "Enable POSIX ACL for HFS+ Filesystems"
+	select KERNEL_FS_POSIX_ACL
+	default y if USE_FS_ACL_ATTR
+
+config KERNEL_NFS_ACL_SUPPORT
+	bool "Enable ACLs for NFS"
+	default y if USE_FS_ACL_ATTR
+
+config KERNEL_NFS_V3_ACL_SUPPORT
+	bool "Enable ACLs for NFSv3"
+	default n
+
+config KERNEL_NFSD_V2_ACL_SUPPORT
+	bool "Enable ACLs for NFSDv2"
+	default n
+
+config KERNEL_NFSD_V3_ACL_SUPPORT
+	bool "Enable ACLs for NFSDv3"
+	default n
+
+config KERNEL_REISER_FS_POSIX_ACL
+	bool "Enable POSIX ACLs for ReiserFS"
+	select KERNEL_FS_POSIX_ACL
+	default y if USE_FS_ACL_ATTR
+
+config KERNEL_XFS_POSIX_ACL
+	bool "Enable POSIX ACLs for XFS"
+	select KERNEL_FS_POSIX_ACL
+	default y if USE_FS_ACL_ATTR
+
+config KERNEL_JFS_POSIX_ACL
+	bool "Enable POSIX ACLs for JFS"
+	select KERNEL_FS_POSIX_ACL
+	default y if USE_FS_ACL_ATTR
diff --git a/target/linux/generic/config-3.18 b/target/linux/generic/config-3.18
index a2c81c2b29..9b9b4ca945 100644
--- a/target/linux/generic/config-3.18
+++ b/target/linux/generic/config-3.18
@@ -528,6 +528,7 @@ CONFIG_BROKEN_ON_SMP=y
 # CONFIG_BTRFS_ASSERT is not set
 # CONFIG_BTRFS_DEBUG is not set
 # CONFIG_BTRFS_FS is not set
+# CONFIG_BTRFS_FS_POSIX_ACL is not set
 # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set
 # CONFIG_BT_ATH3K is not set
 # CONFIG_BT_BNEP is not set
@@ -1009,6 +1010,7 @@ CONFIG_EXTRA_TARGETS=""
 # CONFIG_EXYNOS_VIDEO is not set
 # CONFIG_EZX_PCAP is not set
 # CONFIG_F2FS_FS is not set
+# CONFIG_F2FS_FS_POSIX_ACL is not set
 # CONFIG_FAIR_GROUP_SCHED is not set
 # CONFIG_FANOTIFY is not set
 CONFIG_FAT_DEFAULT_CODEPAGE=437
@@ -1217,6 +1219,7 @@ CONFIG_HAVE_KRETPROBES=y
 # CONFIG_HFSPLUS_FS is not set
 # CONFIG_HFSPLUS_FS_POSIX_ACL is not set
 # CONFIG_HFS_FS is not set
+# CONFIG_HFS_FS_POSIX_ACL is not set
 # CONFIG_HIBERNATION is not set
 # CONFIG_HID is not set
 # CONFIG_HIDRAW is not set
@@ -3043,7 +3046,7 @@ CONFIG_RCU_FANOUT_LEAF=16
 # CONFIG_REISERFS_FS is not set
 # CONFIG_REISERFS_FS_POSIX_ACL is not set
 # CONFIG_REISERFS_FS_SECURITY is not set
-# CONFIG_REISERFS_FS_XATTR is not set
+# CONFIG_REISERFS_FS_XATTR
 # CONFIG_REISERFS_PROC_INFO is not set
 # CONFIG_RELAY is not set
 # CONFIG_RESET_CONTROLLER is not set
diff --git a/target/linux/generic/config-4.1 b/target/linux/generic/config-4.1
index fa95759a9c..045096f291 100644
--- a/target/linux/generic/config-4.1
+++ b/target/linux/generic/config-4.1
@@ -550,6 +550,7 @@ CONFIG_BROKEN_ON_SMP=y
 # CONFIG_BTRFS_ASSERT is not set
 # CONFIG_BTRFS_DEBUG is not set
 # CONFIG_BTRFS_FS is not set
+# CONFIG_BTRFS_FS_POSIX_ACL is not set
 # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set
 # CONFIG_BT_ATH3K is not set
 # CONFIG_BT_BNEP is not set
@@ -1045,6 +1046,7 @@ CONFIG_EXTRA_TARGETS=""
 # CONFIG_EXYNOS_VIDEO is not set
 # CONFIG_EZX_PCAP is not set
 # CONFIG_F2FS_FS is not set
+# CONFIG_F2FS_FS_POSIX_ACL is not set
 # CONFIG_F2FS_IO_TRACE is not set
 # CONFIG_FAIR_GROUP_SCHED is not set
 # CONFIG_FANOTIFY is not set
@@ -1258,6 +1260,7 @@ CONFIG_HAVE_KRETPROBES=y
 # CONFIG_HFSPLUS_FS is not set
 # CONFIG_HFSPLUS_FS_POSIX_ACL is not set
 # CONFIG_HFS_FS is not set
+# CONFIG_HFS_FS_POSIX_ACL is not set
 # CONFIG_HIBERNATION is not set
 # CONFIG_HID is not set
 # CONFIG_HIDRAW is not set
diff --git a/target/linux/generic/config-4.4 b/target/linux/generic/config-4.4
index 54c4062459..dfd8b130d7 100644
--- a/target/linux/generic/config-4.4
+++ b/target/linux/generic/config-4.4
@@ -526,6 +526,7 @@ CONFIG_BROKEN_ON_SMP=y
 # CONFIG_BTRFS_ASSERT is not set
 # CONFIG_BTRFS_DEBUG is not set
 # CONFIG_BTRFS_FS is not set
+# CONFIG_BTRFS_FS_POSIX_ACL is not set
 # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set
 # CONFIG_BT_ATH3K is not set
 # CONFIG_BT_BNEP is not set
@@ -1036,6 +1037,7 @@ CONFIG_EXTRA_TARGETS=""
 # CONFIG_EZX_PCAP is not set
 # CONFIG_F2FS_FS is not set
 # CONFIG_F2FS_FS_ENCRYPTION is not set
+# CONFIG_F2FS_FS_POSIX_ACL is not set
 # CONFIG_F2FS_IO_TRACE is not set
 # CONFIG_FAIR_GROUP_SCHED is not set
 # CONFIG_FANOTIFY is not set
@@ -1264,6 +1266,7 @@ CONFIG_HAVE_KRETPROBES=y
 # CONFIG_HFSPLUS_FS is not set
 # CONFIG_HFSPLUS_FS_POSIX_ACL is not set
 # CONFIG_HFS_FS is not set
+# CONFIG_HFS_FS_POSIX_ACL is not set
 # CONFIG_HI8435 is not set
 # CONFIG_HIBERNATION is not set
 # CONFIG_HID is not set