config SECURITY_CTCONTROL_BUILTIN
       bool "CTControl builtin support"
       select SECURITY_CTCONTROL
       default y
       help
         This selects ctcontrol builtin.
	 Once this option is selected, the ctcontrol LSM module will
	 be enabled and you can use it's functionality.

         If you are unsure how to answer this question, answer N.

config SECURITY_CTCONTROL_MODULE
       bool "CTControl module Support(Develop Only)"
       depends on !SECURITY_CTCONTROL_BUILTIN
       help
         This selects chinatelecon control module.
	 This option is totally for develop purpose, YOU MUST KNOWN
	 WHAT YOU ARE DOING!!!

         If you are unsure how to answer this question, answer N.

config SECURITY_CTCONTROL
       tristate "CTControl support"
       depends on SECURITY_CTCONTROL_BUILTIN || SECURITY_CTCONTROL_MODULE
       default y if SECURITY_CTCONTROL_BUILTIN
       select SECURITY_CTCONTROL_BOOTPARAM if SECURITY_CTCONTROL_BUILTIN
       help
         This selects ctcontrol.

         If you are unsure how to answer this question, answer N.

config SECURITY_CTCONTROL_BOOTPARAM
       bool "CTControl boot parameter"
       depends on SECURITY_CTCONTROL=y
       default y
       help
         This option adds parameter 'ctcontrol', which allows ctcontrol
         to be disabled at boot.  If this option is selected, ctcontrol
         functionality can be disabled with ctcontrol=0 on the kernel
         command line.

         If you are unsure how to answer this question, answer N.

config SECURITY_CTCONTROL_BOOTPARAM_VALUE
       int "CTControl boot parameter default value"
       depends on SECURITY_CTCONTROL_BOOTPARAM
       range 0 1
       default 0
       help
         This option sets the default value for the kernel parameter
         'ctcontrol', which allows ctcontrol to be disabled at boot.  If the
         option is set to 0 (zero), the ctcontrol kernel parameter will
         default to 0, disabling ctcontrol at boot.  If the option is
         set to 1 (one), the ctcontrol kernel parameter will default to 1,
         enabling ctcontrol at boot.

         If you are unsure how to answer this question, answer 1.
