.. | .. |
---|
| 1 | +# SPDX-License-Identifier: GPL-2.0-only |
---|
1 | 2 | config DEFCONFIG_LIST |
---|
2 | 3 | string |
---|
3 | 4 | depends on !UML |
---|
.. | .. |
---|
5 | 6 | default "/lib/modules/$(shell,uname -r)/.config" |
---|
6 | 7 | default "/etc/kernel-config" |
---|
7 | 8 | default "/boot/config-$(shell,uname -r)" |
---|
8 | | - default ARCH_DEFCONFIG |
---|
9 | | - default "arch/$(ARCH)/defconfig" |
---|
| 9 | + default "arch/$(SRCARCH)/configs/$(KBUILD_DEFCONFIG)" |
---|
| 10 | + |
---|
| 11 | +config CC_VERSION_TEXT |
---|
| 12 | + string |
---|
| 13 | + default "$(CC_VERSION_TEXT)" |
---|
| 14 | + help |
---|
| 15 | + This is used in unclear ways: |
---|
| 16 | + |
---|
| 17 | + - Re-run Kconfig when the compiler is updated |
---|
| 18 | + The 'default' property references the environment variable, |
---|
| 19 | + CC_VERSION_TEXT so it is recorded in include/config/auto.conf.cmd. |
---|
| 20 | + When the compiler is updated, Kconfig will be invoked. |
---|
| 21 | + |
---|
| 22 | + - Ensure full rebuild when the compier is updated |
---|
| 23 | + include/linux/kconfig.h contains this option in the comment line so |
---|
| 24 | + fixdep adds include/config/cc/version/text.h into the auto-generated |
---|
| 25 | + dependency. When the compiler is updated, syncconfig will touch it |
---|
| 26 | + and then every file will be rebuilt. |
---|
10 | 27 | |
---|
11 | 28 | config CC_IS_GCC |
---|
12 | | - def_bool $(success,$(CC) --version | head -n 1 | grep -q gcc) |
---|
| 29 | + def_bool $(success,echo "$(CC_VERSION_TEXT)" | grep -q gcc) |
---|
13 | 30 | |
---|
14 | 31 | config GCC_VERSION |
---|
15 | 32 | int |
---|
16 | | - default $(shell,$(srctree)/scripts/gcc-version.sh -p $(CC) | sed 's/^0*//') if CC_IS_GCC |
---|
| 33 | + default $(shell,$(srctree)/scripts/gcc-version.sh $(CC)) if CC_IS_GCC |
---|
17 | 34 | default 0 |
---|
18 | 35 | |
---|
| 36 | +config LD_VERSION |
---|
| 37 | + int |
---|
| 38 | + default $(shell,$(LD) --version | $(srctree)/scripts/ld-version.sh) |
---|
| 39 | + |
---|
19 | 40 | config CC_IS_CLANG |
---|
20 | | - def_bool $(success,$(CC) --version | head -n 1 | grep -q clang) |
---|
| 41 | + def_bool $(success,echo "$(CC_VERSION_TEXT)" | grep -q clang) |
---|
21 | 42 | |
---|
22 | 43 | config LD_IS_LLD |
---|
23 | 44 | def_bool $(success,$(LD) -v | head -n 1 | grep -q LLD) |
---|
.. | .. |
---|
30 | 51 | int |
---|
31 | 52 | default $(shell,$(srctree)/scripts/lld-version.sh $(LD)) |
---|
32 | 53 | |
---|
| 54 | +config CC_CAN_LINK |
---|
| 55 | + bool |
---|
| 56 | + default $(success,$(srctree)/scripts/cc-can-link.sh $(CC) $(CLANG_FLAGS) $(USERCFLAGS) $(USERLDFLAGS) $(m64-flag)) if 64BIT |
---|
| 57 | + default $(success,$(srctree)/scripts/cc-can-link.sh $(CC) $(CLANG_FLAGS) $(USERCFLAGS) $(USERLDFLAGS) $(m32-flag)) |
---|
| 58 | + |
---|
| 59 | +config CC_CAN_LINK_STATIC |
---|
| 60 | + bool |
---|
| 61 | + default $(success,$(srctree)/scripts/cc-can-link.sh $(CC) $(CLANG_FLAGS) $(USERCFLAGS) $(USERLDFLAGS) $(m64-flag) -static) if 64BIT |
---|
| 62 | + default $(success,$(srctree)/scripts/cc-can-link.sh $(CC) $(CLANG_FLAGS) $(USERCFLAGS) $(USERLDFLAGS) $(m32-flag) -static) |
---|
| 63 | + |
---|
33 | 64 | config CC_HAS_ASM_GOTO |
---|
34 | 65 | def_bool $(success,$(srctree)/scripts/gcc-goto.sh $(CC)) |
---|
35 | 66 | |
---|
| 67 | +config CC_HAS_ASM_GOTO_OUTPUT |
---|
| 68 | + depends on CC_HAS_ASM_GOTO |
---|
| 69 | + def_bool $(success,echo 'int foo(int x) { asm goto ("": "=r"(x) ::: bar); return x; bar: return 0; }' | $(CC) -x c - -c -o /dev/null) |
---|
| 70 | + |
---|
| 71 | +config CC_HAS_ASM_GOTO_TIED_OUTPUT |
---|
| 72 | + depends on CC_HAS_ASM_GOTO_OUTPUT |
---|
| 73 | + # Detect buggy gcc and clang, fixed in gcc-11 clang-14. |
---|
| 74 | + def_bool $(success,echo 'int foo(int *x) { asm goto (".long (%l[bar]) - .": "+m"(*x) ::: bar); return *x; bar: return 0; }' | $CC -x c - -c -o /dev/null) |
---|
| 75 | + |
---|
36 | 76 | config TOOLS_SUPPORT_RELR |
---|
37 | 77 | def_bool $(success,env "CC=$(CC)" "LD=$(LD)" "NM=$(NM)" "OBJCOPY=$(OBJCOPY)" $(srctree)/scripts/tools-support-relr.sh) |
---|
| 78 | + |
---|
| 79 | +config CC_HAS_ASM_INLINE |
---|
| 80 | + def_bool $(success,echo 'void foo(void) { asm inline (""); }' | $(CC) -x c - -c -o /dev/null) |
---|
38 | 81 | |
---|
39 | 82 | config CONSTRUCTORS |
---|
40 | 83 | bool |
---|
.. | .. |
---|
43 | 86 | config IRQ_WORK |
---|
44 | 87 | bool |
---|
45 | 88 | |
---|
46 | | -config BUILDTIME_EXTABLE_SORT |
---|
| 89 | +config BUILDTIME_TABLE_SORT |
---|
47 | 90 | bool |
---|
48 | 91 | |
---|
49 | 92 | config THREAD_INFO_IN_TASK |
---|
.. | .. |
---|
88 | 131 | here. If you are a user/distributor, say N here to exclude useless |
---|
89 | 132 | drivers to be distributed. |
---|
90 | 133 | |
---|
| 134 | +config WERROR |
---|
| 135 | + bool "Compile the kernel with warnings as errors" |
---|
| 136 | + default y |
---|
| 137 | + help |
---|
| 138 | + A kernel build should not cause any compiler warnings, and this |
---|
| 139 | + enables the '-Werror' flag to enforce that rule by default. |
---|
| 140 | + |
---|
| 141 | + However, if you have a new (or very old) compiler with odd and |
---|
| 142 | + unusual warnings, or you have some architecture with problems, |
---|
| 143 | + you may need to disable this config option in order to |
---|
| 144 | + successfully build the kernel. |
---|
| 145 | + |
---|
| 146 | + If in doubt, say Y. |
---|
| 147 | + |
---|
| 148 | +config UAPI_HEADER_TEST |
---|
| 149 | + bool "Compile test UAPI headers" |
---|
| 150 | + depends on HEADERS_INSTALL && CC_CAN_LINK |
---|
| 151 | + help |
---|
| 152 | + Compile test headers exported to user-space to ensure they are |
---|
| 153 | + self-contained, i.e. compilable as standalone units. |
---|
| 154 | + |
---|
| 155 | + If you are a developer or tester and want to ensure the exported |
---|
| 156 | + headers are self-contained, say Y here. Otherwise, choose N. |
---|
| 157 | + |
---|
91 | 158 | config LOCALVERSION |
---|
92 | 159 | string "Local version - append to kernel release" |
---|
93 | 160 | help |
---|
.. | .. |
---|
120 | 187 | which is done within the script "scripts/setlocalversion".) |
---|
121 | 188 | |
---|
122 | 189 | config BUILD_SALT |
---|
123 | | - string "Build ID Salt" |
---|
124 | | - default "" |
---|
125 | | - help |
---|
126 | | - The build ID is used to link binaries and their debug info. Setting |
---|
127 | | - this option will use the value in the calculation of the build id. |
---|
128 | | - This is mostly useful for distributions which want to ensure the |
---|
129 | | - build is unique between builds. It's safe to leave the default. |
---|
| 190 | + string "Build ID Salt" |
---|
| 191 | + default "" |
---|
| 192 | + help |
---|
| 193 | + The build ID is used to link binaries and their debug info. Setting |
---|
| 194 | + this option will use the value in the calculation of the build id. |
---|
| 195 | + This is mostly useful for distributions which want to ensure the |
---|
| 196 | + build is unique between builds. It's safe to leave the default. |
---|
130 | 197 | |
---|
131 | 198 | config HAVE_KERNEL_GZIP |
---|
132 | 199 | bool |
---|
.. | .. |
---|
146 | 213 | config HAVE_KERNEL_LZ4 |
---|
147 | 214 | bool |
---|
148 | 215 | |
---|
| 216 | +config HAVE_KERNEL_ZSTD |
---|
| 217 | + bool |
---|
| 218 | + |
---|
149 | 219 | config HAVE_KERNEL_UNCOMPRESSED |
---|
150 | 220 | bool |
---|
151 | 221 | |
---|
152 | 222 | choice |
---|
153 | 223 | prompt "Kernel compression mode" |
---|
154 | 224 | default KERNEL_GZIP |
---|
155 | | - depends on HAVE_KERNEL_GZIP || HAVE_KERNEL_BZIP2 || HAVE_KERNEL_LZMA || HAVE_KERNEL_XZ || HAVE_KERNEL_LZO || HAVE_KERNEL_LZ4 || HAVE_KERNEL_UNCOMPRESSED |
---|
| 225 | + depends on HAVE_KERNEL_GZIP || HAVE_KERNEL_BZIP2 || HAVE_KERNEL_LZMA || HAVE_KERNEL_XZ || HAVE_KERNEL_LZO || HAVE_KERNEL_LZ4 || HAVE_KERNEL_ZSTD || HAVE_KERNEL_UNCOMPRESSED |
---|
156 | 226 | help |
---|
157 | 227 | The linux kernel is a kind of self-extracting executable. |
---|
158 | 228 | Several compression algorithms are available, which differ |
---|
.. | .. |
---|
231 | 301 | is about 8% bigger than LZO. But the decompression speed is |
---|
232 | 302 | faster than LZO. |
---|
233 | 303 | |
---|
| 304 | +config KERNEL_ZSTD |
---|
| 305 | + bool "ZSTD" |
---|
| 306 | + depends on HAVE_KERNEL_ZSTD |
---|
| 307 | + help |
---|
| 308 | + ZSTD is a compression algorithm targeting intermediate compression |
---|
| 309 | + with fast decompression speed. It will compress better than GZIP and |
---|
| 310 | + decompress around the same speed as LZO, but slower than LZ4. You |
---|
| 311 | + will need at least 192 KB RAM or more for booting. The zstd command |
---|
| 312 | + line tool is required for compression. |
---|
| 313 | + |
---|
234 | 314 | config KERNEL_UNCOMPRESSED |
---|
235 | 315 | bool "None" |
---|
236 | 316 | depends on HAVE_KERNEL_UNCOMPRESSED |
---|
.. | .. |
---|
242 | 322 | and jump right at uncompressed kernel image. |
---|
243 | 323 | |
---|
244 | 324 | endchoice |
---|
| 325 | + |
---|
| 326 | +config DEFAULT_INIT |
---|
| 327 | + string "Default init path" |
---|
| 328 | + default "" |
---|
| 329 | + help |
---|
| 330 | + This option determines the default init for the system if no init= |
---|
| 331 | + option is passed on the kernel command line. If the requested path is |
---|
| 332 | + not present, we will still then move on to attempting further |
---|
| 333 | + locations (e.g. /sbin/init, etc). If this is empty, we will just use |
---|
| 334 | + the fallback list when init= is not passed. |
---|
245 | 335 | |
---|
246 | 336 | config DEFAULT_HOSTNAME |
---|
247 | 337 | string "Default hostname" |
---|
.. | .. |
---|
271 | 361 | |
---|
272 | 362 | config SYSVIPC |
---|
273 | 363 | bool "System V IPC" |
---|
274 | | - ---help--- |
---|
| 364 | + help |
---|
275 | 365 | Inter Process Communication is a suite of library functions and |
---|
276 | 366 | system calls which let processes (running programs) synchronize and |
---|
277 | 367 | exchange information. It is generally considered to be a good thing, |
---|
.. | .. |
---|
293 | 383 | config POSIX_MQUEUE |
---|
294 | 384 | bool "POSIX Message Queues" |
---|
295 | 385 | depends on NET |
---|
296 | | - ---help--- |
---|
| 386 | + help |
---|
297 | 387 | POSIX variant of message queues is a part of IPC. In POSIX message |
---|
298 | 388 | queues every message has a priority which decides about succession |
---|
299 | 389 | of receiving it by a process. If you want to compile and run |
---|
.. | .. |
---|
311 | 401 | depends on POSIX_MQUEUE |
---|
312 | 402 | depends on SYSCTL |
---|
313 | 403 | default y |
---|
| 404 | + |
---|
| 405 | +config WATCH_QUEUE |
---|
| 406 | + bool "General notification queue" |
---|
| 407 | + default n |
---|
| 408 | + help |
---|
| 409 | + |
---|
| 410 | + This is a general notification queue for the kernel to pass events to |
---|
| 411 | + userspace by splicing them into pipes. It can be used in conjunction |
---|
| 412 | + with watches for key/keyring change notifications and device |
---|
| 413 | + notifications. |
---|
| 414 | + |
---|
| 415 | + See Documentation/watch_queue.rst |
---|
314 | 416 | |
---|
315 | 417 | config CROSS_MEMORY_ATTACH |
---|
316 | 418 | bool "Enable process_vm_readv/writev syscalls" |
---|
.. | .. |
---|
338 | 440 | help |
---|
339 | 441 | Enable auditing infrastructure that can be used with another |
---|
340 | 442 | kernel subsystem, such as SELinux (which requires this for |
---|
341 | | - logging of avc messages output). Does not do system-call |
---|
342 | | - auditing without CONFIG_AUDITSYSCALL. |
---|
| 443 | + logging of avc messages output). System call auditing is included |
---|
| 444 | + on architectures which support it. |
---|
343 | 445 | |
---|
344 | 446 | config HAVE_ARCH_AUDITSYSCALL |
---|
345 | 447 | bool |
---|
346 | 448 | |
---|
347 | 449 | config AUDITSYSCALL |
---|
348 | | - bool "Enable system-call auditing support" |
---|
| 450 | + def_bool y |
---|
349 | 451 | depends on AUDIT && HAVE_ARCH_AUDITSYSCALL |
---|
350 | | - default y if SECURITY_SELINUX |
---|
351 | | - help |
---|
352 | | - Enable low-overhead system-call auditing infrastructure that |
---|
353 | | - can be used independently or with another kernel subsystem, |
---|
354 | | - such as SELinux. |
---|
355 | | - |
---|
356 | | -config AUDIT_WATCH |
---|
357 | | - def_bool y |
---|
358 | | - depends on AUDITSYSCALL |
---|
359 | | - select FSNOTIFY |
---|
360 | | - |
---|
361 | | -config AUDIT_TREE |
---|
362 | | - def_bool y |
---|
363 | | - depends on AUDITSYSCALL |
---|
364 | 452 | select FSNOTIFY |
---|
365 | 453 | |
---|
366 | 454 | source "kernel/irq/Kconfig" |
---|
.. | .. |
---|
405 | 493 | bool "Full dynticks CPU time accounting" |
---|
406 | 494 | depends on HAVE_CONTEXT_TRACKING |
---|
407 | 495 | depends on HAVE_VIRT_CPU_ACCOUNTING_GEN |
---|
| 496 | + depends on GENERIC_CLOCKEVENTS |
---|
408 | 497 | select VIRT_CPU_ACCOUNTING |
---|
409 | 498 | select CONTEXT_TRACKING |
---|
410 | 499 | help |
---|
.. | .. |
---|
436 | 525 | def_bool y |
---|
437 | 526 | depends on IRQ_TIME_ACCOUNTING || PARAVIRT_TIME_ACCOUNTING |
---|
438 | 527 | depends on SMP |
---|
| 528 | + |
---|
| 529 | +config SCHED_THERMAL_PRESSURE |
---|
| 530 | + bool |
---|
| 531 | + default y if ARM && ARM_CPU_TOPOLOGY |
---|
| 532 | + default y if ARM64 |
---|
| 533 | + depends on SMP |
---|
| 534 | + depends on CPU_FREQ_THERMAL |
---|
| 535 | + help |
---|
| 536 | + Select this option to enable thermal pressure accounting in the |
---|
| 537 | + scheduler. Thermal pressure is the value conveyed to the scheduler |
---|
| 538 | + that reflects the reduction in CPU compute capacity resulted from |
---|
| 539 | + thermal throttling. Thermal throttling occurs when the performance of |
---|
| 540 | + a CPU is capped due to high operating temperatures. |
---|
| 541 | + |
---|
| 542 | + If selected, the scheduler will be able to balance tasks accordingly, |
---|
| 543 | + i.e. put less load on throttled CPUs than on non/less throttled ones. |
---|
| 544 | + |
---|
| 545 | + This requires the architecture to implement |
---|
| 546 | + arch_set_thermal_pressure() and arch_get_thermal_pressure(). |
---|
439 | 547 | |
---|
440 | 548 | config BSD_PROCESS_ACCT |
---|
441 | 549 | bool "BSD Process Accounting" |
---|
.. | .. |
---|
522 | 630 | have cpu.pressure, memory.pressure, and io.pressure files, |
---|
523 | 631 | which aggregate pressure stalls for the grouped tasks only. |
---|
524 | 632 | |
---|
525 | | - For more details see Documentation/accounting/psi.txt. |
---|
| 633 | + For more details see Documentation/accounting/psi.rst. |
---|
526 | 634 | |
---|
527 | 635 | Say N if unsure. |
---|
528 | 636 | |
---|
.. | .. |
---|
568 | 676 | |
---|
569 | 677 | config IKCONFIG |
---|
570 | 678 | tristate "Kernel .config support" |
---|
571 | | - select BUILD_BIN2C |
---|
572 | | - ---help--- |
---|
| 679 | + help |
---|
573 | 680 | This option enables the complete Linux kernel ".config" file |
---|
574 | 681 | contents to be saved in the kernel. It provides documentation |
---|
575 | 682 | of which kernel options are used in a running kernel or in an |
---|
.. | .. |
---|
582 | 689 | config IKCONFIG_PROC |
---|
583 | 690 | bool "Enable access to .config through /proc/config.gz" |
---|
584 | 691 | depends on IKCONFIG && PROC_FS |
---|
585 | | - ---help--- |
---|
| 692 | + help |
---|
586 | 693 | This option enables access to the kernel configuration file |
---|
587 | 694 | through /proc/config.gz. |
---|
588 | 695 | |
---|
.. | .. |
---|
634 | 741 | with more CPUs. Therefore this value is used only when the sum of |
---|
635 | 742 | contributions is greater than the half of the default kernel ring |
---|
636 | 743 | buffer as defined by LOG_BUF_SHIFT. The default values are set |
---|
637 | | - so that more than 64 CPUs are needed to trigger the allocation. |
---|
| 744 | + so that more than 16 CPUs are needed to trigger the allocation. |
---|
638 | 745 | |
---|
639 | 746 | Also this option is ignored when "log_buf_len" kernel parameter is |
---|
640 | 747 | used as it forces an exact (power of two) size of the ring buffer. |
---|
.. | .. |
---|
754 | 861 | config ARCH_WANT_BATCHED_UNMAP_TLB_FLUSH |
---|
755 | 862 | bool |
---|
756 | 863 | |
---|
| 864 | +config CC_HAS_INT128 |
---|
| 865 | + def_bool !$(cc-option,$(m64-flag) -D__SIZEOF_INT128__=0) && 64BIT |
---|
| 866 | + |
---|
757 | 867 | # |
---|
758 | 868 | # For architectures that know their GCC __int128 support is sound |
---|
759 | 869 | # |
---|
.. | .. |
---|
794 | 904 | use with process control subsystems such as Cpusets, CFS, memory |
---|
795 | 905 | controls or device isolation. |
---|
796 | 906 | See |
---|
797 | | - - Documentation/scheduler/sched-design-CFS.txt (CFS) |
---|
798 | | - - Documentation/cgroup-v1/ (features for grouping, isolation |
---|
| 907 | + - Documentation/scheduler/sched-design-CFS.rst (CFS) |
---|
| 908 | + - Documentation/admin-guide/cgroup-v1/ (features for grouping, isolation |
---|
799 | 909 | and resource control) |
---|
800 | 910 | |
---|
801 | 911 | Say N if unsure. |
---|
.. | .. |
---|
803 | 913 | if CGROUPS |
---|
804 | 914 | |
---|
805 | 915 | config PAGE_COUNTER |
---|
806 | | - bool |
---|
| 916 | + bool |
---|
807 | 917 | |
---|
808 | 918 | config MEMCG |
---|
809 | 919 | bool "Memory controller" |
---|
.. | .. |
---|
813 | 923 | Provides control over the memory footprint of tasks in a cgroup. |
---|
814 | 924 | |
---|
815 | 925 | config MEMCG_SWAP |
---|
816 | | - bool "Swap controller" |
---|
| 926 | + bool |
---|
817 | 927 | depends on MEMCG && SWAP |
---|
818 | | - help |
---|
819 | | - Provides control over the swap space consumed by tasks in a cgroup. |
---|
820 | | - |
---|
821 | | -config MEMCG_SWAP_ENABLED |
---|
822 | | - bool "Swap controller enabled by default" |
---|
823 | | - depends on MEMCG_SWAP |
---|
824 | 928 | default y |
---|
825 | | - help |
---|
826 | | - Memory Resource Controller Swap Extension comes with its price in |
---|
827 | | - a bigger memory consumption. General purpose distribution kernels |
---|
828 | | - which want to enable the feature but keep it disabled by default |
---|
829 | | - and let the user enable it by swapaccount=1 boot command line |
---|
830 | | - parameter should have this option unselected. |
---|
831 | | - For those who want to have the feature enabled by default should |
---|
832 | | - select this option (if, for some reason, they need to disable it |
---|
833 | | - then swapaccount=0 does the trick). |
---|
834 | 929 | |
---|
835 | 930 | config MEMCG_KMEM |
---|
836 | 931 | bool |
---|
.. | .. |
---|
841 | 936 | bool "IO controller" |
---|
842 | 937 | depends on BLOCK |
---|
843 | 938 | default n |
---|
844 | | - ---help--- |
---|
| 939 | + help |
---|
845 | 940 | Generic block IO controller cgroup interface. This is the common |
---|
846 | 941 | cgroup interface which should be used by various IO controlling |
---|
847 | 942 | policies. |
---|
.. | .. |
---|
854 | 949 | This option only enables generic Block IO controller infrastructure. |
---|
855 | 950 | One needs to also enable actual IO controlling logic/policy. For |
---|
856 | 951 | enabling proportional weight division of disk bandwidth in CFQ, set |
---|
857 | | - CONFIG_CFQ_GROUP_IOSCHED=y; for enabling throttling policy, set |
---|
| 952 | + CONFIG_BFQ_GROUP_IOSCHED=y; for enabling throttling policy, set |
---|
858 | 953 | CONFIG_BLK_DEV_THROTTLING=y. |
---|
859 | 954 | |
---|
860 | | - See Documentation/cgroup-v1/blkio-controller.txt for more information. |
---|
861 | | - |
---|
862 | | -config DEBUG_BLK_CGROUP |
---|
863 | | - bool "IO controller debugging" |
---|
864 | | - depends on BLK_CGROUP |
---|
865 | | - default n |
---|
866 | | - ---help--- |
---|
867 | | - Enable some debugging help. Currently it exports additional stat |
---|
868 | | - files in a cgroup which can be useful for debugging. |
---|
| 955 | + See Documentation/admin-guide/cgroup-v1/blkio-controller.rst for more information. |
---|
869 | 956 | |
---|
870 | 957 | config CGROUP_WRITEBACK |
---|
871 | 958 | bool |
---|
.. | .. |
---|
895 | 982 | tasks running within the fair group scheduler. Groups with no limit |
---|
896 | 983 | set are considered to be unconstrained and will run with no |
---|
897 | 984 | restriction. |
---|
898 | | - See Documentation/scheduler/sched-bwc.txt for more information. |
---|
| 985 | + See Documentation/scheduler/sched-bwc.rst for more information. |
---|
899 | 986 | |
---|
900 | 987 | config RT_GROUP_SCHED |
---|
901 | 988 | bool "Group scheduling for SCHED_RR/FIFO" |
---|
.. | .. |
---|
906 | 993 | to task groups. If enabled, it will also make it impossible to |
---|
907 | 994 | schedule realtime tasks for non-root users until you allocate |
---|
908 | 995 | realtime bandwidth for them. |
---|
909 | | - See Documentation/scheduler/sched-rt-group.txt for more information. |
---|
| 996 | + See Documentation/scheduler/sched-rt-group.rst for more information. |
---|
910 | 997 | |
---|
911 | 998 | endif #CGROUP_SCHED |
---|
912 | 999 | |
---|
.. | .. |
---|
944 | 1031 | PIDs controller is designed to stop this from happening. |
---|
945 | 1032 | |
---|
946 | 1033 | It should be noted that organisational operations (such as attaching |
---|
947 | | - to a cgroup hierarchy will *not* be blocked by the PIDs controller), |
---|
| 1034 | + to a cgroup hierarchy) will *not* be blocked by the PIDs controller, |
---|
948 | 1035 | since the PIDs limit only affects a process's ability to fork, not to |
---|
949 | 1036 | attach to a cgroup. |
---|
950 | 1037 | |
---|
.. | .. |
---|
1019 | 1106 | help |
---|
1020 | 1107 | This option extends the perf per-cpu mode to restrict monitoring |
---|
1021 | 1108 | to threads which belong to the cgroup specified and run on the |
---|
1022 | | - designated cpu. |
---|
| 1109 | + designated cpu. Or this can be used to have cgroup ID in samples |
---|
| 1110 | + so that it can monitor performance events among cgroups. |
---|
1023 | 1111 | |
---|
1024 | 1112 | Say N if unsure. |
---|
1025 | 1113 | |
---|
.. | .. |
---|
1073 | 1161 | In this namespace tasks see different info provided with the |
---|
1074 | 1162 | uname() system call |
---|
1075 | 1163 | |
---|
| 1164 | +config TIME_NS |
---|
| 1165 | + bool "TIME namespace" |
---|
| 1166 | + depends on GENERIC_VDSO_TIME_NS |
---|
| 1167 | + default y |
---|
| 1168 | + help |
---|
| 1169 | + In this namespace boottime and monotonic clocks can be set. |
---|
| 1170 | + The time will keep going with the same pace. |
---|
| 1171 | + |
---|
1076 | 1172 | config IPC_NS |
---|
1077 | 1173 | bool "IPC namespace" |
---|
1078 | 1174 | depends on (SYSVIPC || POSIX_MQUEUE) |
---|
.. | .. |
---|
1116 | 1212 | config CHECKPOINT_RESTORE |
---|
1117 | 1213 | bool "Checkpoint/restore support" |
---|
1118 | 1214 | select PROC_CHILDREN |
---|
| 1215 | + select KCMP |
---|
1119 | 1216 | default n |
---|
1120 | 1217 | help |
---|
1121 | 1218 | Enables additional kernel features in a sake of checkpoint/restore. |
---|
.. | .. |
---|
1137 | 1234 | desktop applications. Task group autogeneration is currently based |
---|
1138 | 1235 | upon task session. |
---|
1139 | 1236 | |
---|
1140 | | -config SCHED_TUNE |
---|
1141 | | - bool "Boosting for CFS tasks (EXPERIMENTAL)" |
---|
1142 | | - depends on !UCLAMP_TASK |
---|
1143 | | - depends on SMP |
---|
1144 | | - help |
---|
1145 | | - This option enables support for task classification using a new |
---|
1146 | | - cgroup controller, schedtune. Schedtune allows tasks to be given |
---|
1147 | | - a boost value and marked as latency-sensitive or not. This option |
---|
1148 | | - provides the "schedtune" controller. |
---|
1149 | | - |
---|
1150 | | - This new controller: |
---|
1151 | | - 1. allows only a two layers hierarchy, where the root defines the |
---|
1152 | | - system-wide boost value and its direct childrens define each one a |
---|
1153 | | - different "class of tasks" to be boosted with a different value |
---|
1154 | | - 2. supports up to 16 different task classes, each one which could be |
---|
1155 | | - configured with a different boost value |
---|
1156 | | - |
---|
1157 | | - Latency-sensitive tasks are not subject to energy-aware wakeup |
---|
1158 | | - task placement. The boost value assigned to tasks is used to |
---|
1159 | | - influence task placement and CPU frequency selection (if |
---|
1160 | | - utilization-driven frequency selection is in use). |
---|
1161 | | - |
---|
1162 | | - If unsure, say N. |
---|
| 1237 | +config RT_SOFTINT_OPTIMIZATION |
---|
| 1238 | + bool "Improve RT scheduling during long softint execution" |
---|
| 1239 | + depends on ARM64 |
---|
| 1240 | + depends on SMP |
---|
| 1241 | + default n |
---|
| 1242 | + help |
---|
| 1243 | + Enable an optimization which tries to avoid placing RT tasks on CPUs |
---|
| 1244 | + occupied by nonpreemptible tasks, such as a long softint, or CPUs |
---|
| 1245 | + which may soon block preemptions, such as a CPU running a ksoftirq |
---|
| 1246 | + thread which handles slow softints. |
---|
1163 | 1247 | |
---|
1164 | 1248 | config SYSFS_DEPRECATED |
---|
1165 | 1249 | bool "Enable deprecated sysfs features to support old userspace tools" |
---|
.. | .. |
---|
1232 | 1316 | |
---|
1233 | 1317 | config INITRD_ASYNC |
---|
1234 | 1318 | bool "Initrd async" |
---|
| 1319 | + depends on NO_GKI |
---|
1235 | 1320 | help |
---|
1236 | 1321 | Init ramdisk async, can reduce kernel init time. |
---|
1237 | | - |
---|
1238 | | -config ROCKCHIP_ONE_INITRD |
---|
1239 | | - bool "Detect only one initrd" |
---|
1240 | | - depends on ARCH_ROCKCHIP |
---|
1241 | | - default ARCH_ROCKCHIP |
---|
1242 | | - help |
---|
1243 | | - RK bootloader does not put a correct size to cmdline. |
---|
1244 | | - Directly return when we get a good initrd. |
---|
1245 | 1322 | |
---|
1246 | 1323 | endif |
---|
1247 | 1324 | |
---|
.. | .. |
---|
1254 | 1331 | initcall_nr_threads default is 0, which disable intcall async. |
---|
1255 | 1332 | initcall_nr_threads=-1, auto selected the number of threads. |
---|
1256 | 1333 | |
---|
| 1334 | +config BOOT_CONFIG |
---|
| 1335 | + bool "Boot config support" |
---|
| 1336 | + select BLK_DEV_INITRD |
---|
| 1337 | + help |
---|
| 1338 | + Extra boot config allows system admin to pass a config file as |
---|
| 1339 | + complemental extension of kernel cmdline when booting. |
---|
| 1340 | + The boot config file must be attached at the end of initramfs |
---|
| 1341 | + with checksum, size and magic word. |
---|
| 1342 | + See <file:Documentation/admin-guide/bootconfig.rst> for details. |
---|
| 1343 | + |
---|
| 1344 | + If unsure, say Y. |
---|
| 1345 | + |
---|
1257 | 1346 | choice |
---|
1258 | 1347 | prompt "Compiler optimization level" |
---|
1259 | 1348 | default CC_OPTIMIZE_FOR_PERFORMANCE |
---|
1260 | 1349 | |
---|
1261 | 1350 | config CC_OPTIMIZE_FOR_PERFORMANCE |
---|
1262 | | - bool "Optimize for performance" |
---|
| 1351 | + bool "Optimize for performance (-O2)" |
---|
1263 | 1352 | help |
---|
1264 | 1353 | This is the default optimization level for the kernel, building |
---|
1265 | 1354 | with the "-O2" compiler flag for best performance and most |
---|
1266 | 1355 | helpful compile-time warnings. |
---|
1267 | 1356 | |
---|
1268 | | -config CC_OPTIMIZE_FOR_SIZE |
---|
1269 | | - bool "Optimize for size" |
---|
| 1357 | +config CC_OPTIMIZE_FOR_PERFORMANCE_O3 |
---|
| 1358 | + bool "Optimize more for performance (-O3)" |
---|
| 1359 | + depends on ARC |
---|
1270 | 1360 | help |
---|
1271 | | - Enabling this option will pass "-Os" instead of "-O2" to |
---|
1272 | | - your compiler resulting in a smaller kernel. |
---|
| 1361 | + Choosing this option will pass "-O3" to your compiler to optimize |
---|
| 1362 | + the kernel yet more for performance. |
---|
1273 | 1363 | |
---|
1274 | | - If unsure, say N. |
---|
| 1364 | +config CC_OPTIMIZE_FOR_SIZE |
---|
| 1365 | + bool "Optimize for size (-Os)" |
---|
| 1366 | + help |
---|
| 1367 | + Choosing this option will pass "-Os" to your compiler resulting |
---|
| 1368 | + in a smaller kernel. |
---|
1275 | 1369 | |
---|
1276 | 1370 | endchoice |
---|
1277 | 1371 | |
---|
.. | .. |
---|
1289 | 1383 | bool "Dead code and data elimination (EXPERIMENTAL)" |
---|
1290 | 1384 | depends on HAVE_LD_DEAD_CODE_DATA_ELIMINATION |
---|
1291 | 1385 | depends on EXPERT |
---|
1292 | | - depends on !(FUNCTION_TRACER && CC_IS_GCC && GCC_VERSION < 40800) |
---|
1293 | 1386 | depends on $(cc-option,-ffunction-sections -fdata-sections) |
---|
1294 | 1387 | depends on $(ld-option,--gc-sections) |
---|
1295 | 1388 | help |
---|
.. | .. |
---|
1303 | 1396 | silently broken kernel if the required annotations are not |
---|
1304 | 1397 | present. This option is not well tested yet, so use at your |
---|
1305 | 1398 | own risk. |
---|
| 1399 | + |
---|
| 1400 | +config LD_ORPHAN_WARN |
---|
| 1401 | + def_bool y |
---|
| 1402 | + depends on ARCH_WANT_LD_ORPHAN_WARN |
---|
| 1403 | + depends on !LD_IS_LLD || LLD_VERSION >= 110000 |
---|
| 1404 | + depends on $(ld-option,--orphan-handling=warn) |
---|
1306 | 1405 | |
---|
1307 | 1406 | config SYSCTL |
---|
1308 | 1407 | bool |
---|
.. | .. |
---|
1343 | 1442 | select DEBUG_KERNEL |
---|
1344 | 1443 | help |
---|
1345 | 1444 | This option allows certain base kernel options and settings |
---|
1346 | | - to be disabled or tweaked. This is for specialized |
---|
1347 | | - environments which can tolerate a "non-standard" kernel. |
---|
1348 | | - Only use this if you really know what you are doing. |
---|
| 1445 | + to be disabled or tweaked. This is for specialized |
---|
| 1446 | + environments which can tolerate a "non-standard" kernel. |
---|
| 1447 | + Only use this if you really know what you are doing. |
---|
1349 | 1448 | |
---|
1350 | 1449 | config UID16 |
---|
1351 | 1450 | bool "Enable 16-bit UID system calls" if EXPERT |
---|
.. | .. |
---|
1371 | 1470 | config SGETMASK_SYSCALL |
---|
1372 | 1471 | bool "sgetmask/ssetmask syscalls support" if EXPERT |
---|
1373 | 1472 | def_bool PARISC || M68K || PPC || MIPS || X86 || SPARC || MICROBLAZE || SUPERH |
---|
1374 | | - ---help--- |
---|
| 1473 | + help |
---|
1375 | 1474 | sys_sgetmask and sys_ssetmask are obsolete system calls |
---|
1376 | 1475 | no longer supported in libc but still enabled by default in some |
---|
1377 | 1476 | architectures. |
---|
.. | .. |
---|
1381 | 1480 | config SYSFS_SYSCALL |
---|
1382 | 1481 | bool "Sysfs syscall support" if EXPERT |
---|
1383 | 1482 | default y |
---|
1384 | | - ---help--- |
---|
| 1483 | + help |
---|
1385 | 1484 | sys_sysfs is an obsolete system call no longer supported in libc. |
---|
1386 | 1485 | Note that disabling this option is more secure but might break |
---|
1387 | 1486 | compatibility with some systems. |
---|
1388 | 1487 | |
---|
1389 | 1488 | If unsure say Y here. |
---|
1390 | | - |
---|
1391 | | -config SYSCTL_SYSCALL |
---|
1392 | | - bool "Sysctl syscall support" if EXPERT |
---|
1393 | | - depends on PROC_SYSCTL |
---|
1394 | | - default n |
---|
1395 | | - select SYSCTL |
---|
1396 | | - ---help--- |
---|
1397 | | - sys_sysctl uses binary paths that have been found challenging |
---|
1398 | | - to properly maintain and use. The interface in /proc/sys |
---|
1399 | | - using paths with ascii names is now the primary path to this |
---|
1400 | | - information. |
---|
1401 | | - |
---|
1402 | | - Almost nothing using the binary sysctl interface so if you are |
---|
1403 | | - trying to save some space it is probably safe to disable this, |
---|
1404 | | - making your kernel marginally smaller. |
---|
1405 | | - |
---|
1406 | | - If unsure say N here. |
---|
1407 | 1489 | |
---|
1408 | 1490 | config FHANDLE |
---|
1409 | 1491 | bool "open by fhandle syscalls" if EXPERT |
---|
.. | .. |
---|
1455 | 1537 | bool "BUG() support" if EXPERT |
---|
1456 | 1538 | default y |
---|
1457 | 1539 | help |
---|
1458 | | - Disabling this option eliminates support for BUG and WARN, reducing |
---|
1459 | | - the size of your kernel image and potentially quietly ignoring |
---|
1460 | | - numerous fatal conditions. You should only consider disabling this |
---|
1461 | | - option for embedded systems with no facilities for reporting errors. |
---|
1462 | | - Just say Y. |
---|
| 1540 | + Disabling this option eliminates support for BUG and WARN, reducing |
---|
| 1541 | + the size of your kernel image and potentially quietly ignoring |
---|
| 1542 | + numerous fatal conditions. You should only consider disabling this |
---|
| 1543 | + option for embedded systems with no facilities for reporting errors. |
---|
| 1544 | + Just say Y. |
---|
1463 | 1545 | |
---|
1464 | 1546 | config ELF_CORE |
---|
1465 | 1547 | depends on COREDUMP |
---|
.. | .. |
---|
1475 | 1557 | select I8253_LOCK |
---|
1476 | 1558 | default y |
---|
1477 | 1559 | help |
---|
1478 | | - This option allows to disable the internal PC-Speaker |
---|
1479 | | - support, saving some memory. |
---|
| 1560 | + This option allows to disable the internal PC-Speaker |
---|
| 1561 | + support, saving some memory. |
---|
1480 | 1562 | |
---|
1481 | 1563 | config BASE_FULL |
---|
1482 | 1564 | default y |
---|
.. | .. |
---|
1561 | 1643 | by some high performance threaded applications. Disabling |
---|
1562 | 1644 | this option saves about 7k. |
---|
1563 | 1645 | |
---|
| 1646 | +config IO_URING |
---|
| 1647 | + bool "Enable IO uring support" if EXPERT |
---|
| 1648 | + select IO_WQ |
---|
| 1649 | + default y |
---|
| 1650 | + help |
---|
| 1651 | + This option enables support for the io_uring interface, enabling |
---|
| 1652 | + applications to submit and complete IO through submission and |
---|
| 1653 | + completion rings that are shared between the kernel and application. |
---|
| 1654 | + |
---|
1564 | 1655 | config ADVISE_SYSCALLS |
---|
1565 | 1656 | bool "Enable madvise/fadvise syscalls" if EXPERT |
---|
1566 | 1657 | default y |
---|
.. | .. |
---|
1570 | 1661 | usage, improving performance. If building an embedded system where no |
---|
1571 | 1662 | applications use these syscalls, you can disable this option to save |
---|
1572 | 1663 | space. |
---|
| 1664 | + |
---|
| 1665 | +config HAVE_ARCH_USERFAULTFD_WP |
---|
| 1666 | + bool |
---|
| 1667 | + help |
---|
| 1668 | + Arch has userfaultfd write protection support |
---|
| 1669 | + |
---|
| 1670 | +config HAVE_ARCH_USERFAULTFD_MINOR |
---|
| 1671 | + bool |
---|
| 1672 | + help |
---|
| 1673 | + Arch has userfaultfd minor fault support |
---|
1573 | 1674 | |
---|
1574 | 1675 | config MEMBARRIER |
---|
1575 | 1676 | bool "Enable membarrier() system call" if EXPERT |
---|
.. | .. |
---|
1584 | 1685 | If unsure, say Y. |
---|
1585 | 1686 | |
---|
1586 | 1687 | config KALLSYMS |
---|
1587 | | - bool "Load all symbols for debugging/ksymoops" if EXPERT |
---|
1588 | | - default y |
---|
1589 | | - help |
---|
1590 | | - Say Y here to let the kernel print out symbolic crash information and |
---|
1591 | | - symbolic stack backtraces. This increases the size of the kernel |
---|
1592 | | - somewhat, as all symbols have to be loaded into the kernel image. |
---|
| 1688 | + bool "Load all symbols for debugging/ksymoops" if EXPERT |
---|
| 1689 | + default y |
---|
| 1690 | + help |
---|
| 1691 | + Say Y here to let the kernel print out symbolic crash information and |
---|
| 1692 | + symbolic stack backtraces. This increases the size of the kernel |
---|
| 1693 | + somewhat, as all symbols have to be loaded into the kernel image. |
---|
1593 | 1694 | |
---|
1594 | 1695 | config KALLSYMS_ALL |
---|
1595 | 1696 | bool "Include all symbols in kallsyms" |
---|
1596 | 1697 | depends on DEBUG_KERNEL && KALLSYMS |
---|
1597 | 1698 | help |
---|
1598 | | - Normally kallsyms only contains the symbols of functions for nicer |
---|
1599 | | - OOPS messages and backtraces (i.e., symbols from the text and inittext |
---|
1600 | | - sections). This is sufficient for most cases. And only in very rare |
---|
1601 | | - cases (e.g., when a debugger is used) all symbols are required (e.g., |
---|
1602 | | - names of variables from the data sections, etc). |
---|
| 1699 | + Normally kallsyms only contains the symbols of functions for nicer |
---|
| 1700 | + OOPS messages and backtraces (i.e., symbols from the text and inittext |
---|
| 1701 | + sections). This is sufficient for most cases. And only in very rare |
---|
| 1702 | + cases (e.g., when a debugger is used) all symbols are required (e.g., |
---|
| 1703 | + names of variables from the data sections, etc). |
---|
1603 | 1704 | |
---|
1604 | | - This option makes sure that all symbols are loaded into the kernel |
---|
1605 | | - image (i.e., symbols from all sections) in cost of increased kernel |
---|
1606 | | - size (depending on the kernel configuration, it may be 300KiB or |
---|
1607 | | - something like this). |
---|
| 1705 | + This option makes sure that all symbols are loaded into the kernel |
---|
| 1706 | + image (i.e., symbols from all sections) in cost of increased kernel |
---|
| 1707 | + size (depending on the kernel configuration, it may be 300KiB or |
---|
| 1708 | + something like this). |
---|
1608 | 1709 | |
---|
1609 | | - Say N unless you really need all symbols. |
---|
| 1710 | + Say N unless you really need all symbols. |
---|
1610 | 1711 | |
---|
1611 | 1712 | config KALLSYMS_ABSOLUTE_PERCPU |
---|
1612 | 1713 | bool |
---|
.. | .. |
---|
1634 | 1735 | # end of the "standard kernel features (expert users)" menu |
---|
1635 | 1736 | |
---|
1636 | 1737 | # syscall, maps, verifier |
---|
| 1738 | + |
---|
| 1739 | +config BPF_LSM |
---|
| 1740 | + bool "LSM Instrumentation with BPF" |
---|
| 1741 | + depends on BPF_EVENTS |
---|
| 1742 | + depends on BPF_SYSCALL |
---|
| 1743 | + depends on SECURITY |
---|
| 1744 | + depends on BPF_JIT |
---|
| 1745 | + help |
---|
| 1746 | + Enables instrumentation of the security hooks with eBPF programs for |
---|
| 1747 | + implementing dynamic MAC and Audit Policies. |
---|
| 1748 | + |
---|
| 1749 | + If you are unsure how to answer this question, answer N. |
---|
| 1750 | + |
---|
1637 | 1751 | config BPF_SYSCALL |
---|
1638 | 1752 | bool "Enable bpf() system call" |
---|
1639 | 1753 | select BPF |
---|
1640 | 1754 | select IRQ_WORK |
---|
| 1755 | + select TASKS_TRACE_RCU |
---|
1641 | 1756 | default n |
---|
1642 | 1757 | help |
---|
1643 | 1758 | Enable the bpf() system call that allows to manipulate eBPF |
---|
1644 | 1759 | programs and maps via file descriptors. |
---|
| 1760 | + |
---|
| 1761 | +config ARCH_WANT_DEFAULT_BPF_JIT |
---|
| 1762 | + bool |
---|
1645 | 1763 | |
---|
1646 | 1764 | config BPF_JIT_ALWAYS_ON |
---|
1647 | 1765 | bool "Permanently enable BPF JIT and remove BPF interpreter" |
---|
.. | .. |
---|
1649 | 1767 | help |
---|
1650 | 1768 | Enables BPF JIT and removes BPF interpreter to avoid |
---|
1651 | 1769 | speculative execution of BPF instructions by the interpreter |
---|
| 1770 | + |
---|
| 1771 | +config BPF_JIT_DEFAULT_ON |
---|
| 1772 | + def_bool ARCH_WANT_DEFAULT_BPF_JIT || BPF_JIT_ALWAYS_ON |
---|
| 1773 | + depends on HAVE_EBPF_JIT && BPF_JIT |
---|
1652 | 1774 | |
---|
1653 | 1775 | config BPF_UNPRIV_DEFAULT_OFF |
---|
1654 | 1776 | bool "Disable unprivileged BPF by default" |
---|
.. | .. |
---|
1659 | 1781 | still reenable it by setting it to 0 later on, or permanently |
---|
1660 | 1782 | disable it by setting it to 1 (from which no other transition to |
---|
1661 | 1783 | 0 is possible anymore). |
---|
| 1784 | + |
---|
| 1785 | +source "kernel/bpf/preload/Kconfig" |
---|
1662 | 1786 | |
---|
1663 | 1787 | config USERFAULTFD |
---|
1664 | 1788 | bool "Enable userfaultfd() system call" |
---|
.. | .. |
---|
1672 | 1796 | |
---|
1673 | 1797 | config ARCH_HAS_MEMBARRIER_SYNC_CORE |
---|
1674 | 1798 | bool |
---|
| 1799 | + |
---|
| 1800 | +config KCMP |
---|
| 1801 | + bool "Enable kcmp() system call" if EXPERT |
---|
| 1802 | + help |
---|
| 1803 | + Enable the kernel resource comparison system call. It provides |
---|
| 1804 | + user-space with the ability to compare two processes to see if they |
---|
| 1805 | + share a common resource, such as a file descriptor or even virtual |
---|
| 1806 | + memory space. |
---|
| 1807 | + |
---|
| 1808 | + If unsure, say N. |
---|
1675 | 1809 | |
---|
1676 | 1810 | config RSEQ |
---|
1677 | 1811 | bool "Enable rseq() system call" if EXPERT |
---|
.. | .. |
---|
1759 | 1893 | depends on PERF_EVENTS && DEBUG_KERNEL && !PPC |
---|
1760 | 1894 | select PERF_USE_VMALLOC |
---|
1761 | 1895 | help |
---|
1762 | | - Use vmalloc memory to back perf mmap() buffers. |
---|
| 1896 | + Use vmalloc memory to back perf mmap() buffers. |
---|
1763 | 1897 | |
---|
1764 | | - Mostly useful for debugging the vmalloc code on platforms |
---|
1765 | | - that don't require it. |
---|
| 1898 | + Mostly useful for debugging the vmalloc code on platforms |
---|
| 1899 | + that don't require it. |
---|
1766 | 1900 | |
---|
1767 | | - Say N if unsure. |
---|
| 1901 | + Say N if unsure. |
---|
1768 | 1902 | |
---|
1769 | 1903 | endmenu |
---|
1770 | 1904 | |
---|
.. | .. |
---|
1786 | 1920 | default y |
---|
1787 | 1921 | bool "Enable SLUB debugging support" if EXPERT |
---|
1788 | 1922 | depends on SLUB && SYSFS |
---|
1789 | | - select SLUB_SYSFS |
---|
1790 | 1923 | help |
---|
1791 | 1924 | SLUB has extensive debug support features. Disabling these can |
---|
1792 | 1925 | result in significant savings in code size. This also disables |
---|
.. | .. |
---|
1869 | 2002 | command line. |
---|
1870 | 2003 | |
---|
1871 | 2004 | config SLAB_FREELIST_RANDOM |
---|
1872 | | - default n |
---|
| 2005 | + bool "Randomize slab freelist" |
---|
1873 | 2006 | depends on SLAB || SLUB |
---|
1874 | | - bool "SLAB freelist randomization" |
---|
1875 | 2007 | help |
---|
1876 | 2008 | Randomizes the freelist order used on creating new pages. This |
---|
1877 | 2009 | security feature reduces the predictability of the kernel slab |
---|
.. | .. |
---|
1879 | 2011 | |
---|
1880 | 2012 | config SLAB_FREELIST_HARDENED |
---|
1881 | 2013 | bool "Harden slab freelist metadata" |
---|
1882 | | - depends on SLUB |
---|
| 2014 | + depends on SLAB || SLUB |
---|
1883 | 2015 | help |
---|
1884 | 2016 | Many kernel heap attacks try to target slab cache metadata and |
---|
1885 | 2017 | other infrastructure. This options makes minor performance |
---|
1886 | | - sacrifies to harden the kernel slab allocator against common |
---|
1887 | | - freelist exploit methods. |
---|
| 2018 | + sacrifices to harden the kernel slab allocator against common |
---|
| 2019 | + freelist exploit methods. Some slab implementations have more |
---|
| 2020 | + sanity-checking than others. This option is most effective with |
---|
| 2021 | + CONFIG_SLUB. |
---|
| 2022 | + |
---|
| 2023 | +config SHUFFLE_PAGE_ALLOCATOR |
---|
| 2024 | + bool "Page allocator randomization" |
---|
| 2025 | + default SLAB_FREELIST_RANDOM && ACPI_NUMA |
---|
| 2026 | + help |
---|
| 2027 | + Randomization of the page allocator improves the average |
---|
| 2028 | + utilization of a direct-mapped memory-side-cache. See section |
---|
| 2029 | + 5.2.27 Heterogeneous Memory Attribute Table (HMAT) in the ACPI |
---|
| 2030 | + 6.2a specification for an example of how a platform advertises |
---|
| 2031 | + the presence of a memory-side-cache. There are also incidental |
---|
| 2032 | + security benefits as it reduces the predictability of page |
---|
| 2033 | + allocations to compliment SLAB_FREELIST_RANDOM, but the |
---|
| 2034 | + default granularity of shuffling on the "MAX_ORDER - 1" i.e, |
---|
| 2035 | + 10th order of pages is selected based on cache utilization |
---|
| 2036 | + benefits on x86. |
---|
| 2037 | + |
---|
| 2038 | + While the randomization improves cache utilization it may |
---|
| 2039 | + negatively impact workloads on platforms without a cache. For |
---|
| 2040 | + this reason, by default, the randomization is enabled only |
---|
| 2041 | + after runtime detection of a direct-mapped memory-side-cache. |
---|
| 2042 | + Otherwise, the randomization may be force enabled with the |
---|
| 2043 | + 'page_alloc.shuffle' kernel command line parameter. |
---|
| 2044 | + |
---|
| 2045 | + Say Y if unsure. |
---|
1888 | 2046 | |
---|
1889 | 2047 | config SLUB_CPU_PARTIAL |
---|
1890 | 2048 | default y |
---|
1891 | 2049 | depends on SLUB && SMP |
---|
1892 | 2050 | bool "SLUB per cpu partial cache" |
---|
1893 | 2051 | help |
---|
1894 | | - Per cpu partial caches accellerate objects allocation and freeing |
---|
| 2052 | + Per cpu partial caches accelerate objects allocation and freeing |
---|
1895 | 2053 | that is local to a processor at the price of more indeterminism |
---|
1896 | 2054 | in the latency of the free. On overflow these caches will be cleared |
---|
1897 | 2055 | which requires the taking of locks that may cause latency spikes. |
---|
.. | .. |
---|
1917 | 2075 | userspace. Since that isn't generally a problem on no-MMU systems, |
---|
1918 | 2076 | it is normally safe to say Y here. |
---|
1919 | 2077 | |
---|
1920 | | - See Documentation/nommu-mmap.txt for more information. |
---|
| 2078 | + See Documentation/admin-guide/mm/nommu-mmap.rst for more information. |
---|
1921 | 2079 | |
---|
1922 | 2080 | config SYSTEM_DATA_VERIFICATION |
---|
1923 | 2081 | def_bool n |
---|
.. | .. |
---|
1961 | 2119 | int |
---|
1962 | 2120 | default 0 if BASE_FULL |
---|
1963 | 2121 | default 1 if !BASE_FULL |
---|
| 2122 | + |
---|
| 2123 | +config MODULE_SIG_FORMAT |
---|
| 2124 | + def_bool n |
---|
| 2125 | + select SYSTEM_DATA_VERIFICATION |
---|
1964 | 2126 | |
---|
1965 | 2127 | menuconfig MODULES |
---|
1966 | 2128 | bool "Enable loadable module support" |
---|
.. | .. |
---|
2021 | 2183 | make them incompatible with the kernel you are running. If |
---|
2022 | 2184 | unsure, say N. |
---|
2023 | 2185 | |
---|
| 2186 | +config ASM_MODVERSIONS |
---|
| 2187 | + bool |
---|
| 2188 | + default HAVE_ASM_MODVERSIONS && MODVERSIONS |
---|
| 2189 | + help |
---|
| 2190 | + This enables module versioning for exported symbols also from |
---|
| 2191 | + assembly. This can be enabled only when the target architecture |
---|
| 2192 | + supports it. |
---|
| 2193 | + |
---|
2024 | 2194 | config MODULE_REL_CRCS |
---|
2025 | 2195 | bool |
---|
2026 | 2196 | depends on MODVERSIONS |
---|
.. | .. |
---|
2036 | 2206 | the version). With this option, such a "srcversion" field |
---|
2037 | 2207 | will be created for all modules. If unsure, say N. |
---|
2038 | 2208 | |
---|
| 2209 | +config MODULE_SCMVERSION |
---|
| 2210 | + bool "SCM version for modules" |
---|
| 2211 | + depends on LOCALVERSION_AUTO |
---|
| 2212 | + help |
---|
| 2213 | + This enables the module attribute "scmversion" which can be used |
---|
| 2214 | + by developers to identify the SCM version of a given module, e.g. |
---|
| 2215 | + git sha1 or hg sha1. The SCM version can be queried by modinfo or |
---|
| 2216 | + via the sysfs node: /sys/modules/MODULENAME/scmversion. This is |
---|
| 2217 | + useful when the kernel or kernel modules are updated separately |
---|
| 2218 | + since that causes the vermagic of the kernel and the module to |
---|
| 2219 | + differ. |
---|
| 2220 | + |
---|
| 2221 | + If unsure, say N. |
---|
| 2222 | + |
---|
2039 | 2223 | config MODULE_SIG |
---|
2040 | 2224 | bool "Module signature verification" |
---|
2041 | | - depends on MODULES |
---|
2042 | | - select SYSTEM_DATA_VERIFICATION |
---|
| 2225 | + select MODULE_SIG_FORMAT |
---|
2043 | 2226 | help |
---|
2044 | 2227 | Check modules for valid signatures upon load: the signature |
---|
2045 | 2228 | is simply appended to the module. For more information see |
---|
.. | .. |
---|
2048 | 2231 | Note that this option adds the OpenSSL development packages as a |
---|
2049 | 2232 | kernel build dependency so that the signing tool can use its crypto |
---|
2050 | 2233 | library. |
---|
| 2234 | + |
---|
| 2235 | + You should enable this option if you wish to use either |
---|
| 2236 | + CONFIG_SECURITY_LOCKDOWN_LSM or lockdown functionality imposed via |
---|
| 2237 | + another LSM - otherwise unsigned modules will be loadable regardless |
---|
| 2238 | + of the lockdown policy. |
---|
2051 | 2239 | |
---|
2052 | 2240 | !!!WARNING!!! If you enable this option, you MUST make sure that the |
---|
2053 | 2241 | module DOES NOT get stripped after being signed. This includes the |
---|
.. | .. |
---|
2115 | 2303 | |
---|
2116 | 2304 | config MODULE_COMPRESS |
---|
2117 | 2305 | bool "Compress modules on installation" |
---|
2118 | | - depends on MODULES |
---|
2119 | 2306 | help |
---|
2120 | 2307 | |
---|
2121 | 2308 | Compresses kernel modules when 'make modules_install' is run; gzip or |
---|
.. | .. |
---|
2151 | 2338 | |
---|
2152 | 2339 | endchoice |
---|
2153 | 2340 | |
---|
| 2341 | +config MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS |
---|
| 2342 | + bool "Allow loading of modules with missing namespace imports" |
---|
| 2343 | + help |
---|
| 2344 | + Symbols exported with EXPORT_SYMBOL_NS*() are considered exported in |
---|
| 2345 | + a namespace. A module that makes use of a symbol exported with such a |
---|
| 2346 | + namespace is required to import the namespace via MODULE_IMPORT_NS(). |
---|
| 2347 | + There is no technical reason to enforce correct namespace imports, |
---|
| 2348 | + but it creates consistency between symbols defining namespaces and |
---|
| 2349 | + users importing namespaces they make use of. This option relaxes this |
---|
| 2350 | + requirement and lifts the enforcement when loading a module. |
---|
| 2351 | + |
---|
| 2352 | + If unsure, say N. |
---|
| 2353 | + |
---|
| 2354 | +config UNUSED_SYMBOLS |
---|
| 2355 | + bool "Enable unused/obsolete exported symbols" |
---|
| 2356 | + default y if X86 |
---|
| 2357 | + help |
---|
| 2358 | + Unused but exported symbols make the kernel needlessly bigger. For |
---|
| 2359 | + that reason most of these unused exports will soon be removed. This |
---|
| 2360 | + option is provided temporarily to provide a transition period in case |
---|
| 2361 | + some external kernel module needs one of these symbols anyway. If you |
---|
| 2362 | + encounter such a case in your module, consider if you are actually |
---|
| 2363 | + using the right API. (rationale: since nobody in the kernel is using |
---|
| 2364 | + this in a module, there is a pretty good chance it's actually the |
---|
| 2365 | + wrong interface to use). If you really need the symbol, please send a |
---|
| 2366 | + mail to the linux kernel mailing list mentioning the symbol and why |
---|
| 2367 | + you really need it, and what the merge plan to the mainline kernel for |
---|
| 2368 | + your module is. |
---|
| 2369 | + |
---|
2154 | 2370 | config TRIM_UNUSED_KSYMS |
---|
2155 | 2371 | bool "Trim unused exported kernel symbols" |
---|
2156 | | - depends on MODULES && !UNUSED_SYMBOLS |
---|
| 2372 | + depends on !UNUSED_SYMBOLS |
---|
2157 | 2373 | help |
---|
2158 | 2374 | The kernel and some modules make many symbols available for |
---|
2159 | 2375 | other modules to use via EXPORT_SYMBOL() and variants. Depending |
---|
.. | .. |
---|
2214 | 2430 | |
---|
2215 | 2431 | source "kernel/Kconfig.locks" |
---|
2216 | 2432 | |
---|
| 2433 | +config ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE |
---|
| 2434 | + bool |
---|
| 2435 | + |
---|
2217 | 2436 | config ARCH_HAS_SYNC_CORE_BEFORE_USERMODE |
---|
2218 | 2437 | bool |
---|
2219 | 2438 | |
---|
.. | .. |
---|
2227 | 2446 | config ARCH_HAS_SYSCALL_WRAPPER |
---|
2228 | 2447 | def_bool n |
---|
2229 | 2448 | |
---|
| 2449 | +if !ROCKCHIP_MINI_KERNEL |
---|
2230 | 2450 | source "init/Kconfig.gki" |
---|
| 2451 | +endif |
---|