[RFC PATCH 10/10] common/Kconfig: updating Kconfig for domain roles

["Daniel P. Smith" <dpsmith@xxxxxxxxxxxxxxxxxxxx>]

This adjusts the Kconfig system for the reorganizing of XSM by the introduction
of domain roles.

Signed-off-by: Daniel P. Smith <dpsmith@xxxxxxxxxxxxxxxxxxxx>
---
 xen/common/Kconfig | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/xen/common/Kconfig b/xen/common/Kconfig
index 3064bf6b89..560ad274c4 100644
--- a/xen/common/Kconfig
+++ b/xen/common/Kconfig
@@ -199,11 +199,12 @@ config XENOPROF
 
          If unsure, say Y.
 
-config XSM
-       bool "Xen Security Modules support"
-       default ARM
+menu "Xen Security Modules"
+
+config XSM_POLICY
+       bool "XSM policy support"
        ---help---
-         Enables the security framework known as Xen Security Modules which
+         Enables loadable policy support for Xen Security Modules which
          allows administrators fine-grained control over a Xen domain and
          its capabilities by defining permissible interactions between domains,
          the hypervisor itself, and related resources such as memory and
@@ -214,7 +215,7 @@ config XSM
 config XSM_FLASK
        def_bool y
        prompt "FLux Advanced Security Kernel support"
-       depends on XSM
+       depends on XSM_POLICY
        ---help---
          Enables FLASK (FLux Advanced Security Kernel) as the access control
          mechanism used by the XSM framework.  This provides a mandatory access
@@ -254,7 +255,6 @@ config XSM_FLASK_POLICY
 config XSM_SILO
        def_bool y
        prompt "SILO support"
-       depends on XSM
        ---help---
          Enables SILO as the access control mechanism used by the XSM 
framework.
          This is not the default module, add boot parameter xsm=silo to choose
@@ -278,6 +278,8 @@ choice
                bool "SILO" if XSM_SILO
 endchoice
 
+endmenu
+
 config LATE_HWDOM
        bool "Dedicated hardware domain"
        default n
-- 
2.20.1