.. | .. |
---|
| 1 | +# SPDX-License-Identifier: GPL-2.0-only |
---|
1 | 2 | config DEFCONFIG_LIST |
---|
2 | 3 | string |
---|
3 | 4 | depends on !UML |
---|
.. | .. |
---|
5 | 6 | default "/lib/modules/$(shell,uname -r)/.config" |
---|
6 | 7 | default "/etc/kernel-config" |
---|
7 | 8 | default "/boot/config-$(shell,uname -r)" |
---|
8 | | - default ARCH_DEFCONFIG |
---|
9 | | - default "arch/$(ARCH)/defconfig" |
---|
| 9 | + default "arch/$(SRCARCH)/configs/$(KBUILD_DEFCONFIG)" |
---|
| 10 | + |
---|
| 11 | +config CC_VERSION_TEXT |
---|
| 12 | + string |
---|
| 13 | + default "$(CC_VERSION_TEXT)" |
---|
| 14 | + help |
---|
| 15 | + This is used in unclear ways: |
---|
| 16 | + |
---|
| 17 | + - Re-run Kconfig when the compiler is updated |
---|
| 18 | + The 'default' property references the environment variable, |
---|
| 19 | + CC_VERSION_TEXT so it is recorded in include/config/auto.conf.cmd. |
---|
| 20 | + When the compiler is updated, Kconfig will be invoked. |
---|
| 21 | + |
---|
| 22 | + - Ensure full rebuild when the compier is updated |
---|
| 23 | + include/linux/kconfig.h contains this option in the comment line so |
---|
| 24 | + fixdep adds include/config/cc/version/text.h into the auto-generated |
---|
| 25 | + dependency. When the compiler is updated, syncconfig will touch it |
---|
| 26 | + and then every file will be rebuilt. |
---|
10 | 27 | |
---|
11 | 28 | config CC_IS_GCC |
---|
12 | | - def_bool $(success,$(CC) --version | head -n 1 | grep -q gcc) |
---|
| 29 | + def_bool $(success,echo "$(CC_VERSION_TEXT)" | grep -q gcc) |
---|
13 | 30 | |
---|
14 | 31 | config GCC_VERSION |
---|
15 | 32 | int |
---|
16 | | - default $(shell,$(srctree)/scripts/gcc-version.sh -p $(CC) | sed 's/^0*//') if CC_IS_GCC |
---|
| 33 | + default $(shell,$(srctree)/scripts/gcc-version.sh $(CC)) if CC_IS_GCC |
---|
17 | 34 | default 0 |
---|
18 | 35 | |
---|
| 36 | +config LD_VERSION |
---|
| 37 | + int |
---|
| 38 | + default $(shell,$(LD) --version | $(srctree)/scripts/ld-version.sh) |
---|
| 39 | + |
---|
19 | 40 | config CC_IS_CLANG |
---|
20 | | - def_bool $(success,$(CC) --version | head -n 1 | grep -q clang) |
---|
| 41 | + def_bool $(success,echo "$(CC_VERSION_TEXT)" | grep -q clang) |
---|
21 | 42 | |
---|
22 | 43 | config LD_IS_LLD |
---|
23 | 44 | def_bool $(success,$(LD) -v | head -n 1 | grep -q LLD) |
---|
.. | .. |
---|
26 | 47 | int |
---|
27 | 48 | default $(shell,$(srctree)/scripts/clang-version.sh $(CC)) |
---|
28 | 49 | |
---|
| 50 | +config AS_IS_GNU |
---|
| 51 | + def_bool $(success,test "$(as-name)" = GNU) |
---|
| 52 | + |
---|
| 53 | +config AS_IS_LLVM |
---|
| 54 | + def_bool $(success,test "$(as-name)" = LLVM) |
---|
| 55 | + |
---|
| 56 | +config AS_VERSION |
---|
| 57 | + int |
---|
| 58 | + # Use clang version if this is the integrated assembler |
---|
| 59 | + default CLANG_VERSION if AS_IS_LLVM |
---|
| 60 | + default $(as-version) |
---|
| 61 | + |
---|
29 | 62 | config LLD_VERSION |
---|
30 | 63 | int |
---|
31 | 64 | default $(shell,$(srctree)/scripts/lld-version.sh $(LD)) |
---|
32 | 65 | |
---|
| 66 | +config CC_CAN_LINK |
---|
| 67 | + bool |
---|
| 68 | + default $(success,$(srctree)/scripts/cc-can-link.sh $(CC) $(CLANG_FLAGS) $(USERCFLAGS) $(USERLDFLAGS) $(m64-flag)) if 64BIT |
---|
| 69 | + default $(success,$(srctree)/scripts/cc-can-link.sh $(CC) $(CLANG_FLAGS) $(USERCFLAGS) $(USERLDFLAGS) $(m32-flag)) |
---|
| 70 | + |
---|
| 71 | +config CC_CAN_LINK_STATIC |
---|
| 72 | + bool |
---|
| 73 | + default $(success,$(srctree)/scripts/cc-can-link.sh $(CC) $(CLANG_FLAGS) $(USERCFLAGS) $(USERLDFLAGS) $(m64-flag) -static) if 64BIT |
---|
| 74 | + default $(success,$(srctree)/scripts/cc-can-link.sh $(CC) $(CLANG_FLAGS) $(USERCFLAGS) $(USERLDFLAGS) $(m32-flag) -static) |
---|
| 75 | + |
---|
33 | 76 | config CC_HAS_ASM_GOTO |
---|
34 | 77 | def_bool $(success,$(srctree)/scripts/gcc-goto.sh $(CC)) |
---|
35 | 78 | |
---|
| 79 | +config CC_HAS_ASM_GOTO_OUTPUT |
---|
| 80 | + depends on CC_HAS_ASM_GOTO |
---|
| 81 | + def_bool $(success,echo 'int foo(int x) { asm goto ("": "=r"(x) ::: bar); return x; bar: return 0; }' | $(CC) -x c - -c -o /dev/null) |
---|
| 82 | + |
---|
| 83 | +config CC_HAS_ASM_GOTO_TIED_OUTPUT |
---|
| 84 | + depends on CC_HAS_ASM_GOTO_OUTPUT |
---|
| 85 | + # Detect buggy gcc and clang, fixed in gcc-11 clang-14. |
---|
| 86 | + def_bool $(success,echo 'int foo(int *x) { asm goto (".long (%l[bar]) - .": "+m"(*x) ::: bar); return *x; bar: return 0; }' | $CC -x c - -c -o /dev/null) |
---|
| 87 | + |
---|
36 | 88 | config TOOLS_SUPPORT_RELR |
---|
37 | 89 | def_bool $(success,env "CC=$(CC)" "LD=$(LD)" "NM=$(NM)" "OBJCOPY=$(OBJCOPY)" $(srctree)/scripts/tools-support-relr.sh) |
---|
| 90 | + |
---|
| 91 | +config CC_HAS_ASM_INLINE |
---|
| 92 | + def_bool $(success,echo 'void foo(void) { asm inline (""); }' | $(CC) -x c - -c -o /dev/null) |
---|
38 | 93 | |
---|
39 | 94 | config CONSTRUCTORS |
---|
40 | 95 | bool |
---|
.. | .. |
---|
43 | 98 | config IRQ_WORK |
---|
44 | 99 | bool |
---|
45 | 100 | |
---|
46 | | -config BUILDTIME_EXTABLE_SORT |
---|
| 101 | +config BUILDTIME_TABLE_SORT |
---|
47 | 102 | bool |
---|
48 | 103 | |
---|
49 | 104 | config THREAD_INFO_IN_TASK |
---|
.. | .. |
---|
88 | 143 | here. If you are a user/distributor, say N here to exclude useless |
---|
89 | 144 | drivers to be distributed. |
---|
90 | 145 | |
---|
| 146 | +config WERROR |
---|
| 147 | + bool "Compile the kernel with warnings as errors" |
---|
| 148 | + default y |
---|
| 149 | + help |
---|
| 150 | + A kernel build should not cause any compiler warnings, and this |
---|
| 151 | + enables the '-Werror' flag to enforce that rule by default. |
---|
| 152 | + |
---|
| 153 | + However, if you have a new (or very old) compiler with odd and |
---|
| 154 | + unusual warnings, or you have some architecture with problems, |
---|
| 155 | + you may need to disable this config option in order to |
---|
| 156 | + successfully build the kernel. |
---|
| 157 | + |
---|
| 158 | + If in doubt, say Y. |
---|
| 159 | + |
---|
| 160 | +config UAPI_HEADER_TEST |
---|
| 161 | + bool "Compile test UAPI headers" |
---|
| 162 | + depends on HEADERS_INSTALL && CC_CAN_LINK |
---|
| 163 | + help |
---|
| 164 | + Compile test headers exported to user-space to ensure they are |
---|
| 165 | + self-contained, i.e. compilable as standalone units. |
---|
| 166 | + |
---|
| 167 | + If you are a developer or tester and want to ensure the exported |
---|
| 168 | + headers are self-contained, say Y here. Otherwise, choose N. |
---|
| 169 | + |
---|
91 | 170 | config LOCALVERSION |
---|
92 | 171 | string "Local version - append to kernel release" |
---|
93 | 172 | help |
---|
.. | .. |
---|
120 | 199 | which is done within the script "scripts/setlocalversion".) |
---|
121 | 200 | |
---|
122 | 201 | config BUILD_SALT |
---|
123 | | - string "Build ID Salt" |
---|
124 | | - default "" |
---|
125 | | - help |
---|
126 | | - The build ID is used to link binaries and their debug info. Setting |
---|
127 | | - this option will use the value in the calculation of the build id. |
---|
128 | | - This is mostly useful for distributions which want to ensure the |
---|
129 | | - build is unique between builds. It's safe to leave the default. |
---|
| 202 | + string "Build ID Salt" |
---|
| 203 | + default "" |
---|
| 204 | + help |
---|
| 205 | + The build ID is used to link binaries and their debug info. Setting |
---|
| 206 | + this option will use the value in the calculation of the build id. |
---|
| 207 | + This is mostly useful for distributions which want to ensure the |
---|
| 208 | + build is unique between builds. It's safe to leave the default. |
---|
130 | 209 | |
---|
131 | 210 | config HAVE_KERNEL_GZIP |
---|
132 | 211 | bool |
---|
.. | .. |
---|
146 | 225 | config HAVE_KERNEL_LZ4 |
---|
147 | 226 | bool |
---|
148 | 227 | |
---|
| 228 | +config HAVE_KERNEL_ZSTD |
---|
| 229 | + bool |
---|
| 230 | + |
---|
149 | 231 | config HAVE_KERNEL_UNCOMPRESSED |
---|
150 | 232 | bool |
---|
151 | 233 | |
---|
152 | 234 | choice |
---|
153 | 235 | prompt "Kernel compression mode" |
---|
154 | 236 | default KERNEL_GZIP |
---|
155 | | - depends on HAVE_KERNEL_GZIP || HAVE_KERNEL_BZIP2 || HAVE_KERNEL_LZMA || HAVE_KERNEL_XZ || HAVE_KERNEL_LZO || HAVE_KERNEL_LZ4 || HAVE_KERNEL_UNCOMPRESSED |
---|
| 237 | + depends on HAVE_KERNEL_GZIP || HAVE_KERNEL_BZIP2 || HAVE_KERNEL_LZMA || HAVE_KERNEL_XZ || HAVE_KERNEL_LZO || HAVE_KERNEL_LZ4 || HAVE_KERNEL_ZSTD || HAVE_KERNEL_UNCOMPRESSED |
---|
156 | 238 | help |
---|
157 | 239 | The linux kernel is a kind of self-extracting executable. |
---|
158 | 240 | Several compression algorithms are available, which differ |
---|
.. | .. |
---|
231 | 313 | is about 8% bigger than LZO. But the decompression speed is |
---|
232 | 314 | faster than LZO. |
---|
233 | 315 | |
---|
| 316 | +config KERNEL_ZSTD |
---|
| 317 | + bool "ZSTD" |
---|
| 318 | + depends on HAVE_KERNEL_ZSTD |
---|
| 319 | + help |
---|
| 320 | + ZSTD is a compression algorithm targeting intermediate compression |
---|
| 321 | + with fast decompression speed. It will compress better than GZIP and |
---|
| 322 | + decompress around the same speed as LZO, but slower than LZ4. You |
---|
| 323 | + will need at least 192 KB RAM or more for booting. The zstd command |
---|
| 324 | + line tool is required for compression. |
---|
| 325 | + |
---|
234 | 326 | config KERNEL_UNCOMPRESSED |
---|
235 | 327 | bool "None" |
---|
236 | 328 | depends on HAVE_KERNEL_UNCOMPRESSED |
---|
.. | .. |
---|
242 | 334 | and jump right at uncompressed kernel image. |
---|
243 | 335 | |
---|
244 | 336 | endchoice |
---|
| 337 | + |
---|
| 338 | +config DEFAULT_INIT |
---|
| 339 | + string "Default init path" |
---|
| 340 | + default "" |
---|
| 341 | + help |
---|
| 342 | + This option determines the default init for the system if no init= |
---|
| 343 | + option is passed on the kernel command line. If the requested path is |
---|
| 344 | + not present, we will still then move on to attempting further |
---|
| 345 | + locations (e.g. /sbin/init, etc). If this is empty, we will just use |
---|
| 346 | + the fallback list when init= is not passed. |
---|
245 | 347 | |
---|
246 | 348 | config DEFAULT_HOSTNAME |
---|
247 | 349 | string "Default hostname" |
---|
.. | .. |
---|
271 | 373 | |
---|
272 | 374 | config SYSVIPC |
---|
273 | 375 | bool "System V IPC" |
---|
274 | | - ---help--- |
---|
| 376 | + help |
---|
275 | 377 | Inter Process Communication is a suite of library functions and |
---|
276 | 378 | system calls which let processes (running programs) synchronize and |
---|
277 | 379 | exchange information. It is generally considered to be a good thing, |
---|
.. | .. |
---|
293 | 395 | config POSIX_MQUEUE |
---|
294 | 396 | bool "POSIX Message Queues" |
---|
295 | 397 | depends on NET |
---|
296 | | - ---help--- |
---|
| 398 | + help |
---|
297 | 399 | POSIX variant of message queues is a part of IPC. In POSIX message |
---|
298 | 400 | queues every message has a priority which decides about succession |
---|
299 | 401 | of receiving it by a process. If you want to compile and run |
---|
.. | .. |
---|
311 | 413 | depends on POSIX_MQUEUE |
---|
312 | 414 | depends on SYSCTL |
---|
313 | 415 | default y |
---|
| 416 | + |
---|
| 417 | +config WATCH_QUEUE |
---|
| 418 | + bool "General notification queue" |
---|
| 419 | + default n |
---|
| 420 | + help |
---|
| 421 | + |
---|
| 422 | + This is a general notification queue for the kernel to pass events to |
---|
| 423 | + userspace by splicing them into pipes. It can be used in conjunction |
---|
| 424 | + with watches for key/keyring change notifications and device |
---|
| 425 | + notifications. |
---|
| 426 | + |
---|
| 427 | + See Documentation/watch_queue.rst |
---|
314 | 428 | |
---|
315 | 429 | config CROSS_MEMORY_ATTACH |
---|
316 | 430 | bool "Enable process_vm_readv/writev syscalls" |
---|
.. | .. |
---|
338 | 452 | help |
---|
339 | 453 | Enable auditing infrastructure that can be used with another |
---|
340 | 454 | kernel subsystem, such as SELinux (which requires this for |
---|
341 | | - logging of avc messages output). Does not do system-call |
---|
342 | | - auditing without CONFIG_AUDITSYSCALL. |
---|
| 455 | + logging of avc messages output). System call auditing is included |
---|
| 456 | + on architectures which support it. |
---|
343 | 457 | |
---|
344 | 458 | config HAVE_ARCH_AUDITSYSCALL |
---|
345 | 459 | bool |
---|
346 | 460 | |
---|
347 | 461 | config AUDITSYSCALL |
---|
348 | | - bool "Enable system-call auditing support" |
---|
| 462 | + def_bool y |
---|
349 | 463 | depends on AUDIT && HAVE_ARCH_AUDITSYSCALL |
---|
350 | | - default y if SECURITY_SELINUX |
---|
351 | | - help |
---|
352 | | - Enable low-overhead system-call auditing infrastructure that |
---|
353 | | - can be used independently or with another kernel subsystem, |
---|
354 | | - such as SELinux. |
---|
355 | | - |
---|
356 | | -config AUDIT_WATCH |
---|
357 | | - def_bool y |
---|
358 | | - depends on AUDITSYSCALL |
---|
359 | | - select FSNOTIFY |
---|
360 | | - |
---|
361 | | -config AUDIT_TREE |
---|
362 | | - def_bool y |
---|
363 | | - depends on AUDITSYSCALL |
---|
364 | 464 | select FSNOTIFY |
---|
365 | 465 | |
---|
366 | 466 | source "kernel/irq/Kconfig" |
---|
.. | .. |
---|
405 | 505 | bool "Full dynticks CPU time accounting" |
---|
406 | 506 | depends on HAVE_CONTEXT_TRACKING |
---|
407 | 507 | depends on HAVE_VIRT_CPU_ACCOUNTING_GEN |
---|
| 508 | + depends on GENERIC_CLOCKEVENTS |
---|
408 | 509 | select VIRT_CPU_ACCOUNTING |
---|
409 | 510 | select CONTEXT_TRACKING |
---|
410 | 511 | help |
---|
.. | .. |
---|
436 | 537 | def_bool y |
---|
437 | 538 | depends on IRQ_TIME_ACCOUNTING || PARAVIRT_TIME_ACCOUNTING |
---|
438 | 539 | depends on SMP |
---|
| 540 | + |
---|
| 541 | +config SCHED_THERMAL_PRESSURE |
---|
| 542 | + bool |
---|
| 543 | + default y if ARM && ARM_CPU_TOPOLOGY |
---|
| 544 | + default y if ARM64 |
---|
| 545 | + depends on SMP |
---|
| 546 | + depends on CPU_FREQ_THERMAL |
---|
| 547 | + help |
---|
| 548 | + Select this option to enable thermal pressure accounting in the |
---|
| 549 | + scheduler. Thermal pressure is the value conveyed to the scheduler |
---|
| 550 | + that reflects the reduction in CPU compute capacity resulted from |
---|
| 551 | + thermal throttling. Thermal throttling occurs when the performance of |
---|
| 552 | + a CPU is capped due to high operating temperatures. |
---|
| 553 | + |
---|
| 554 | + If selected, the scheduler will be able to balance tasks accordingly, |
---|
| 555 | + i.e. put less load on throttled CPUs than on non/less throttled ones. |
---|
| 556 | + |
---|
| 557 | + This requires the architecture to implement |
---|
| 558 | + arch_set_thermal_pressure() and arch_get_thermal_pressure(). |
---|
439 | 559 | |
---|
440 | 560 | config BSD_PROCESS_ACCT |
---|
441 | 561 | bool "BSD Process Accounting" |
---|
.. | .. |
---|
522 | 642 | have cpu.pressure, memory.pressure, and io.pressure files, |
---|
523 | 643 | which aggregate pressure stalls for the grouped tasks only. |
---|
524 | 644 | |
---|
525 | | - For more details see Documentation/accounting/psi.txt. |
---|
| 645 | + For more details see Documentation/accounting/psi.rst. |
---|
526 | 646 | |
---|
527 | 647 | Say N if unsure. |
---|
528 | 648 | |
---|
.. | .. |
---|
568 | 688 | |
---|
569 | 689 | config IKCONFIG |
---|
570 | 690 | tristate "Kernel .config support" |
---|
571 | | - select BUILD_BIN2C |
---|
572 | | - ---help--- |
---|
| 691 | + help |
---|
573 | 692 | This option enables the complete Linux kernel ".config" file |
---|
574 | 693 | contents to be saved in the kernel. It provides documentation |
---|
575 | 694 | of which kernel options are used in a running kernel or in an |
---|
.. | .. |
---|
582 | 701 | config IKCONFIG_PROC |
---|
583 | 702 | bool "Enable access to .config through /proc/config.gz" |
---|
584 | 703 | depends on IKCONFIG && PROC_FS |
---|
585 | | - ---help--- |
---|
| 704 | + help |
---|
586 | 705 | This option enables access to the kernel configuration file |
---|
587 | 706 | through /proc/config.gz. |
---|
588 | 707 | |
---|
.. | .. |
---|
634 | 753 | with more CPUs. Therefore this value is used only when the sum of |
---|
635 | 754 | contributions is greater than the half of the default kernel ring |
---|
636 | 755 | buffer as defined by LOG_BUF_SHIFT. The default values are set |
---|
637 | | - so that more than 64 CPUs are needed to trigger the allocation. |
---|
| 756 | + so that more than 16 CPUs are needed to trigger the allocation. |
---|
638 | 757 | |
---|
639 | 758 | Also this option is ignored when "log_buf_len" kernel parameter is |
---|
640 | 759 | used as it forces an exact (power of two) size of the ring buffer. |
---|
.. | .. |
---|
754 | 873 | config ARCH_WANT_BATCHED_UNMAP_TLB_FLUSH |
---|
755 | 874 | bool |
---|
756 | 875 | |
---|
| 876 | +config CC_HAS_INT128 |
---|
| 877 | + def_bool !$(cc-option,$(m64-flag) -D__SIZEOF_INT128__=0) && 64BIT |
---|
| 878 | + |
---|
757 | 879 | # |
---|
758 | 880 | # For architectures that know their GCC __int128 support is sound |
---|
759 | 881 | # |
---|
.. | .. |
---|
794 | 916 | use with process control subsystems such as Cpusets, CFS, memory |
---|
795 | 917 | controls or device isolation. |
---|
796 | 918 | See |
---|
797 | | - - Documentation/scheduler/sched-design-CFS.txt (CFS) |
---|
798 | | - - Documentation/cgroup-v1/ (features for grouping, isolation |
---|
| 919 | + - Documentation/scheduler/sched-design-CFS.rst (CFS) |
---|
| 920 | + - Documentation/admin-guide/cgroup-v1/ (features for grouping, isolation |
---|
799 | 921 | and resource control) |
---|
800 | 922 | |
---|
801 | 923 | Say N if unsure. |
---|
.. | .. |
---|
803 | 925 | if CGROUPS |
---|
804 | 926 | |
---|
805 | 927 | config PAGE_COUNTER |
---|
806 | | - bool |
---|
| 928 | + bool |
---|
807 | 929 | |
---|
808 | 930 | config MEMCG |
---|
809 | 931 | bool "Memory controller" |
---|
.. | .. |
---|
813 | 935 | Provides control over the memory footprint of tasks in a cgroup. |
---|
814 | 936 | |
---|
815 | 937 | config MEMCG_SWAP |
---|
816 | | - bool "Swap controller" |
---|
| 938 | + bool |
---|
817 | 939 | depends on MEMCG && SWAP |
---|
818 | | - help |
---|
819 | | - Provides control over the swap space consumed by tasks in a cgroup. |
---|
820 | | - |
---|
821 | | -config MEMCG_SWAP_ENABLED |
---|
822 | | - bool "Swap controller enabled by default" |
---|
823 | | - depends on MEMCG_SWAP |
---|
824 | 940 | default y |
---|
825 | | - help |
---|
826 | | - Memory Resource Controller Swap Extension comes with its price in |
---|
827 | | - a bigger memory consumption. General purpose distribution kernels |
---|
828 | | - which want to enable the feature but keep it disabled by default |
---|
829 | | - and let the user enable it by swapaccount=1 boot command line |
---|
830 | | - parameter should have this option unselected. |
---|
831 | | - For those who want to have the feature enabled by default should |
---|
832 | | - select this option (if, for some reason, they need to disable it |
---|
833 | | - then swapaccount=0 does the trick). |
---|
834 | 941 | |
---|
835 | 942 | config MEMCG_KMEM |
---|
836 | 943 | bool |
---|
.. | .. |
---|
841 | 948 | bool "IO controller" |
---|
842 | 949 | depends on BLOCK |
---|
843 | 950 | default n |
---|
844 | | - ---help--- |
---|
| 951 | + help |
---|
845 | 952 | Generic block IO controller cgroup interface. This is the common |
---|
846 | 953 | cgroup interface which should be used by various IO controlling |
---|
847 | 954 | policies. |
---|
.. | .. |
---|
854 | 961 | This option only enables generic Block IO controller infrastructure. |
---|
855 | 962 | One needs to also enable actual IO controlling logic/policy. For |
---|
856 | 963 | enabling proportional weight division of disk bandwidth in CFQ, set |
---|
857 | | - CONFIG_CFQ_GROUP_IOSCHED=y; for enabling throttling policy, set |
---|
| 964 | + CONFIG_BFQ_GROUP_IOSCHED=y; for enabling throttling policy, set |
---|
858 | 965 | CONFIG_BLK_DEV_THROTTLING=y. |
---|
859 | 966 | |
---|
860 | | - See Documentation/cgroup-v1/blkio-controller.txt for more information. |
---|
861 | | - |
---|
862 | | -config DEBUG_BLK_CGROUP |
---|
863 | | - bool "IO controller debugging" |
---|
864 | | - depends on BLK_CGROUP |
---|
865 | | - default n |
---|
866 | | - ---help--- |
---|
867 | | - Enable some debugging help. Currently it exports additional stat |
---|
868 | | - files in a cgroup which can be useful for debugging. |
---|
| 967 | + See Documentation/admin-guide/cgroup-v1/blkio-controller.rst for more information. |
---|
869 | 968 | |
---|
870 | 969 | config CGROUP_WRITEBACK |
---|
871 | 970 | bool |
---|
.. | .. |
---|
895 | 994 | tasks running within the fair group scheduler. Groups with no limit |
---|
896 | 995 | set are considered to be unconstrained and will run with no |
---|
897 | 996 | restriction. |
---|
898 | | - See Documentation/scheduler/sched-bwc.txt for more information. |
---|
| 997 | + See Documentation/scheduler/sched-bwc.rst for more information. |
---|
899 | 998 | |
---|
900 | 999 | config RT_GROUP_SCHED |
---|
901 | 1000 | bool "Group scheduling for SCHED_RR/FIFO" |
---|
902 | 1001 | depends on CGROUP_SCHED |
---|
903 | | - depends on !PREEMPT_RT_FULL |
---|
904 | 1002 | default n |
---|
905 | 1003 | help |
---|
906 | 1004 | This feature lets you explicitly allocate real CPU bandwidth |
---|
907 | 1005 | to task groups. If enabled, it will also make it impossible to |
---|
908 | 1006 | schedule realtime tasks for non-root users until you allocate |
---|
909 | 1007 | realtime bandwidth for them. |
---|
910 | | - See Documentation/scheduler/sched-rt-group.txt for more information. |
---|
| 1008 | + See Documentation/scheduler/sched-rt-group.rst for more information. |
---|
911 | 1009 | |
---|
912 | 1010 | endif #CGROUP_SCHED |
---|
913 | 1011 | |
---|
.. | .. |
---|
945 | 1043 | PIDs controller is designed to stop this from happening. |
---|
946 | 1044 | |
---|
947 | 1045 | It should be noted that organisational operations (such as attaching |
---|
948 | | - to a cgroup hierarchy will *not* be blocked by the PIDs controller), |
---|
| 1046 | + to a cgroup hierarchy) will *not* be blocked by the PIDs controller, |
---|
949 | 1047 | since the PIDs limit only affects a process's ability to fork, not to |
---|
950 | 1048 | attach to a cgroup. |
---|
951 | 1049 | |
---|
.. | .. |
---|
1020 | 1118 | help |
---|
1021 | 1119 | This option extends the perf per-cpu mode to restrict monitoring |
---|
1022 | 1120 | to threads which belong to the cgroup specified and run on the |
---|
1023 | | - designated cpu. |
---|
| 1121 | + designated cpu. Or this can be used to have cgroup ID in samples |
---|
| 1122 | + so that it can monitor performance events among cgroups. |
---|
1024 | 1123 | |
---|
1025 | 1124 | Say N if unsure. |
---|
1026 | 1125 | |
---|
.. | .. |
---|
1074 | 1173 | In this namespace tasks see different info provided with the |
---|
1075 | 1174 | uname() system call |
---|
1076 | 1175 | |
---|
| 1176 | +config TIME_NS |
---|
| 1177 | + bool "TIME namespace" |
---|
| 1178 | + depends on GENERIC_VDSO_TIME_NS |
---|
| 1179 | + default y |
---|
| 1180 | + help |
---|
| 1181 | + In this namespace boottime and monotonic clocks can be set. |
---|
| 1182 | + The time will keep going with the same pace. |
---|
| 1183 | + |
---|
1077 | 1184 | config IPC_NS |
---|
1078 | 1185 | bool "IPC namespace" |
---|
1079 | 1186 | depends on (SYSVIPC || POSIX_MQUEUE) |
---|
.. | .. |
---|
1117 | 1224 | config CHECKPOINT_RESTORE |
---|
1118 | 1225 | bool "Checkpoint/restore support" |
---|
1119 | 1226 | select PROC_CHILDREN |
---|
| 1227 | + select KCMP |
---|
1120 | 1228 | default n |
---|
1121 | 1229 | help |
---|
1122 | 1230 | Enables additional kernel features in a sake of checkpoint/restore. |
---|
.. | .. |
---|
1138 | 1246 | desktop applications. Task group autogeneration is currently based |
---|
1139 | 1247 | upon task session. |
---|
1140 | 1248 | |
---|
1141 | | -config SCHED_TUNE |
---|
1142 | | - bool "Boosting for CFS tasks (EXPERIMENTAL)" |
---|
1143 | | - depends on !UCLAMP_TASK |
---|
1144 | | - depends on SMP |
---|
1145 | | - help |
---|
1146 | | - This option enables support for task classification using a new |
---|
1147 | | - cgroup controller, schedtune. Schedtune allows tasks to be given |
---|
1148 | | - a boost value and marked as latency-sensitive or not. This option |
---|
1149 | | - provides the "schedtune" controller. |
---|
1150 | | - |
---|
1151 | | - This new controller: |
---|
1152 | | - 1. allows only a two layers hierarchy, where the root defines the |
---|
1153 | | - system-wide boost value and its direct childrens define each one a |
---|
1154 | | - different "class of tasks" to be boosted with a different value |
---|
1155 | | - 2. supports up to 16 different task classes, each one which could be |
---|
1156 | | - configured with a different boost value |
---|
1157 | | - |
---|
1158 | | - Latency-sensitive tasks are not subject to energy-aware wakeup |
---|
1159 | | - task placement. The boost value assigned to tasks is used to |
---|
1160 | | - influence task placement and CPU frequency selection (if |
---|
1161 | | - utilization-driven frequency selection is in use). |
---|
1162 | | - |
---|
1163 | | - If unsure, say N. |
---|
| 1249 | +config RT_SOFTINT_OPTIMIZATION |
---|
| 1250 | + bool "Improve RT scheduling during long softint execution" |
---|
| 1251 | + depends on ARM64 |
---|
| 1252 | + depends on SMP |
---|
| 1253 | + default n |
---|
| 1254 | + help |
---|
| 1255 | + Enable an optimization which tries to avoid placing RT tasks on CPUs |
---|
| 1256 | + occupied by nonpreemptible tasks, such as a long softint, or CPUs |
---|
| 1257 | + which may soon block preemptions, such as a CPU running a ksoftirq |
---|
| 1258 | + thread which handles slow softints. |
---|
1164 | 1259 | |
---|
1165 | 1260 | config SYSFS_DEPRECATED |
---|
1166 | 1261 | bool "Enable deprecated sysfs features to support old userspace tools" |
---|
.. | .. |
---|
1233 | 1328 | |
---|
1234 | 1329 | config INITRD_ASYNC |
---|
1235 | 1330 | bool "Initrd async" |
---|
| 1331 | + depends on NO_GKI |
---|
1236 | 1332 | help |
---|
1237 | 1333 | Init ramdisk async, can reduce kernel init time. |
---|
1238 | | - |
---|
1239 | | -config ROCKCHIP_ONE_INITRD |
---|
1240 | | - bool "Detect only one initrd" |
---|
1241 | | - depends on ARCH_ROCKCHIP |
---|
1242 | | - default ARCH_ROCKCHIP |
---|
1243 | | - help |
---|
1244 | | - RK bootloader does not put a correct size to cmdline. |
---|
1245 | | - Directly return when we get a good initrd. |
---|
1246 | 1334 | |
---|
1247 | 1335 | endif |
---|
1248 | 1336 | |
---|
.. | .. |
---|
1255 | 1343 | initcall_nr_threads default is 0, which disable intcall async. |
---|
1256 | 1344 | initcall_nr_threads=-1, auto selected the number of threads. |
---|
1257 | 1345 | |
---|
| 1346 | +config BOOT_CONFIG |
---|
| 1347 | + bool "Boot config support" |
---|
| 1348 | + select BLK_DEV_INITRD |
---|
| 1349 | + help |
---|
| 1350 | + Extra boot config allows system admin to pass a config file as |
---|
| 1351 | + complemental extension of kernel cmdline when booting. |
---|
| 1352 | + The boot config file must be attached at the end of initramfs |
---|
| 1353 | + with checksum, size and magic word. |
---|
| 1354 | + See <file:Documentation/admin-guide/bootconfig.rst> for details. |
---|
| 1355 | + |
---|
| 1356 | + If unsure, say Y. |
---|
| 1357 | + |
---|
1258 | 1358 | choice |
---|
1259 | 1359 | prompt "Compiler optimization level" |
---|
1260 | 1360 | default CC_OPTIMIZE_FOR_PERFORMANCE |
---|
1261 | 1361 | |
---|
1262 | 1362 | config CC_OPTIMIZE_FOR_PERFORMANCE |
---|
1263 | | - bool "Optimize for performance" |
---|
| 1363 | + bool "Optimize for performance (-O2)" |
---|
1264 | 1364 | help |
---|
1265 | 1365 | This is the default optimization level for the kernel, building |
---|
1266 | 1366 | with the "-O2" compiler flag for best performance and most |
---|
1267 | 1367 | helpful compile-time warnings. |
---|
1268 | 1368 | |
---|
1269 | | -config CC_OPTIMIZE_FOR_SIZE |
---|
1270 | | - bool "Optimize for size" |
---|
| 1369 | +config CC_OPTIMIZE_FOR_PERFORMANCE_O3 |
---|
| 1370 | + bool "Optimize more for performance (-O3)" |
---|
| 1371 | + depends on ARC |
---|
1271 | 1372 | help |
---|
1272 | | - Enabling this option will pass "-Os" instead of "-O2" to |
---|
1273 | | - your compiler resulting in a smaller kernel. |
---|
| 1373 | + Choosing this option will pass "-O3" to your compiler to optimize |
---|
| 1374 | + the kernel yet more for performance. |
---|
1274 | 1375 | |
---|
1275 | | - If unsure, say N. |
---|
| 1376 | +config CC_OPTIMIZE_FOR_SIZE |
---|
| 1377 | + bool "Optimize for size (-Os)" |
---|
| 1378 | + help |
---|
| 1379 | + Choosing this option will pass "-Os" to your compiler resulting |
---|
| 1380 | + in a smaller kernel. |
---|
1276 | 1381 | |
---|
1277 | 1382 | endchoice |
---|
1278 | 1383 | |
---|
.. | .. |
---|
1290 | 1395 | bool "Dead code and data elimination (EXPERIMENTAL)" |
---|
1291 | 1396 | depends on HAVE_LD_DEAD_CODE_DATA_ELIMINATION |
---|
1292 | 1397 | depends on EXPERT |
---|
1293 | | - depends on !(FUNCTION_TRACER && CC_IS_GCC && GCC_VERSION < 40800) |
---|
1294 | 1398 | depends on $(cc-option,-ffunction-sections -fdata-sections) |
---|
1295 | 1399 | depends on $(ld-option,--gc-sections) |
---|
1296 | 1400 | help |
---|
.. | .. |
---|
1304 | 1408 | silently broken kernel if the required annotations are not |
---|
1305 | 1409 | present. This option is not well tested yet, so use at your |
---|
1306 | 1410 | own risk. |
---|
| 1411 | + |
---|
| 1412 | +config LD_ORPHAN_WARN |
---|
| 1413 | + def_bool y |
---|
| 1414 | + depends on ARCH_WANT_LD_ORPHAN_WARN |
---|
| 1415 | + depends on !LD_IS_LLD || LLD_VERSION >= 110000 |
---|
| 1416 | + depends on $(ld-option,--orphan-handling=warn) |
---|
1307 | 1417 | |
---|
1308 | 1418 | config SYSCTL |
---|
1309 | 1419 | bool |
---|
.. | .. |
---|
1344 | 1454 | select DEBUG_KERNEL |
---|
1345 | 1455 | help |
---|
1346 | 1456 | This option allows certain base kernel options and settings |
---|
1347 | | - to be disabled or tweaked. This is for specialized |
---|
1348 | | - environments which can tolerate a "non-standard" kernel. |
---|
1349 | | - Only use this if you really know what you are doing. |
---|
| 1457 | + to be disabled or tweaked. This is for specialized |
---|
| 1458 | + environments which can tolerate a "non-standard" kernel. |
---|
| 1459 | + Only use this if you really know what you are doing. |
---|
1350 | 1460 | |
---|
1351 | 1461 | config UID16 |
---|
1352 | 1462 | bool "Enable 16-bit UID system calls" if EXPERT |
---|
.. | .. |
---|
1372 | 1482 | config SGETMASK_SYSCALL |
---|
1373 | 1483 | bool "sgetmask/ssetmask syscalls support" if EXPERT |
---|
1374 | 1484 | def_bool PARISC || M68K || PPC || MIPS || X86 || SPARC || MICROBLAZE || SUPERH |
---|
1375 | | - ---help--- |
---|
| 1485 | + help |
---|
1376 | 1486 | sys_sgetmask and sys_ssetmask are obsolete system calls |
---|
1377 | 1487 | no longer supported in libc but still enabled by default in some |
---|
1378 | 1488 | architectures. |
---|
.. | .. |
---|
1382 | 1492 | config SYSFS_SYSCALL |
---|
1383 | 1493 | bool "Sysfs syscall support" if EXPERT |
---|
1384 | 1494 | default y |
---|
1385 | | - ---help--- |
---|
| 1495 | + help |
---|
1386 | 1496 | sys_sysfs is an obsolete system call no longer supported in libc. |
---|
1387 | 1497 | Note that disabling this option is more secure but might break |
---|
1388 | 1498 | compatibility with some systems. |
---|
1389 | 1499 | |
---|
1390 | 1500 | If unsure say Y here. |
---|
1391 | | - |
---|
1392 | | -config SYSCTL_SYSCALL |
---|
1393 | | - bool "Sysctl syscall support" if EXPERT |
---|
1394 | | - depends on PROC_SYSCTL |
---|
1395 | | - default n |
---|
1396 | | - select SYSCTL |
---|
1397 | | - ---help--- |
---|
1398 | | - sys_sysctl uses binary paths that have been found challenging |
---|
1399 | | - to properly maintain and use. The interface in /proc/sys |
---|
1400 | | - using paths with ascii names is now the primary path to this |
---|
1401 | | - information. |
---|
1402 | | - |
---|
1403 | | - Almost nothing using the binary sysctl interface so if you are |
---|
1404 | | - trying to save some space it is probably safe to disable this, |
---|
1405 | | - making your kernel marginally smaller. |
---|
1406 | | - |
---|
1407 | | - If unsure say N here. |
---|
1408 | 1501 | |
---|
1409 | 1502 | config FHANDLE |
---|
1410 | 1503 | bool "open by fhandle syscalls" if EXPERT |
---|
.. | .. |
---|
1456 | 1549 | bool "BUG() support" if EXPERT |
---|
1457 | 1550 | default y |
---|
1458 | 1551 | help |
---|
1459 | | - Disabling this option eliminates support for BUG and WARN, reducing |
---|
1460 | | - the size of your kernel image and potentially quietly ignoring |
---|
1461 | | - numerous fatal conditions. You should only consider disabling this |
---|
1462 | | - option for embedded systems with no facilities for reporting errors. |
---|
1463 | | - Just say Y. |
---|
| 1552 | + Disabling this option eliminates support for BUG and WARN, reducing |
---|
| 1553 | + the size of your kernel image and potentially quietly ignoring |
---|
| 1554 | + numerous fatal conditions. You should only consider disabling this |
---|
| 1555 | + option for embedded systems with no facilities for reporting errors. |
---|
| 1556 | + Just say Y. |
---|
1464 | 1557 | |
---|
1465 | 1558 | config ELF_CORE |
---|
1466 | 1559 | depends on COREDUMP |
---|
.. | .. |
---|
1476 | 1569 | select I8253_LOCK |
---|
1477 | 1570 | default y |
---|
1478 | 1571 | help |
---|
1479 | | - This option allows to disable the internal PC-Speaker |
---|
1480 | | - support, saving some memory. |
---|
| 1572 | + This option allows to disable the internal PC-Speaker |
---|
| 1573 | + support, saving some memory. |
---|
1481 | 1574 | |
---|
1482 | 1575 | config BASE_FULL |
---|
1483 | 1576 | default y |
---|
.. | .. |
---|
1562 | 1655 | by some high performance threaded applications. Disabling |
---|
1563 | 1656 | this option saves about 7k. |
---|
1564 | 1657 | |
---|
| 1658 | +config IO_URING |
---|
| 1659 | + bool "Enable IO uring support" if EXPERT |
---|
| 1660 | + select IO_WQ |
---|
| 1661 | + default y |
---|
| 1662 | + help |
---|
| 1663 | + This option enables support for the io_uring interface, enabling |
---|
| 1664 | + applications to submit and complete IO through submission and |
---|
| 1665 | + completion rings that are shared between the kernel and application. |
---|
| 1666 | + |
---|
1565 | 1667 | config ADVISE_SYSCALLS |
---|
1566 | 1668 | bool "Enable madvise/fadvise syscalls" if EXPERT |
---|
1567 | 1669 | default y |
---|
.. | .. |
---|
1571 | 1673 | usage, improving performance. If building an embedded system where no |
---|
1572 | 1674 | applications use these syscalls, you can disable this option to save |
---|
1573 | 1675 | space. |
---|
| 1676 | + |
---|
| 1677 | +config HAVE_ARCH_USERFAULTFD_WP |
---|
| 1678 | + bool |
---|
| 1679 | + help |
---|
| 1680 | + Arch has userfaultfd write protection support |
---|
| 1681 | + |
---|
| 1682 | +config HAVE_ARCH_USERFAULTFD_MINOR |
---|
| 1683 | + bool |
---|
| 1684 | + help |
---|
| 1685 | + Arch has userfaultfd minor fault support |
---|
1574 | 1686 | |
---|
1575 | 1687 | config MEMBARRIER |
---|
1576 | 1688 | bool "Enable membarrier() system call" if EXPERT |
---|
.. | .. |
---|
1585 | 1697 | If unsure, say Y. |
---|
1586 | 1698 | |
---|
1587 | 1699 | config KALLSYMS |
---|
1588 | | - bool "Load all symbols for debugging/ksymoops" if EXPERT |
---|
1589 | | - default y |
---|
1590 | | - help |
---|
1591 | | - Say Y here to let the kernel print out symbolic crash information and |
---|
1592 | | - symbolic stack backtraces. This increases the size of the kernel |
---|
1593 | | - somewhat, as all symbols have to be loaded into the kernel image. |
---|
| 1700 | + bool "Load all symbols for debugging/ksymoops" if EXPERT |
---|
| 1701 | + default y |
---|
| 1702 | + help |
---|
| 1703 | + Say Y here to let the kernel print out symbolic crash information and |
---|
| 1704 | + symbolic stack backtraces. This increases the size of the kernel |
---|
| 1705 | + somewhat, as all symbols have to be loaded into the kernel image. |
---|
1594 | 1706 | |
---|
1595 | 1707 | config KALLSYMS_ALL |
---|
1596 | 1708 | bool "Include all symbols in kallsyms" |
---|
1597 | 1709 | depends on DEBUG_KERNEL && KALLSYMS |
---|
1598 | 1710 | help |
---|
1599 | | - Normally kallsyms only contains the symbols of functions for nicer |
---|
1600 | | - OOPS messages and backtraces (i.e., symbols from the text and inittext |
---|
1601 | | - sections). This is sufficient for most cases. And only in very rare |
---|
1602 | | - cases (e.g., when a debugger is used) all symbols are required (e.g., |
---|
1603 | | - names of variables from the data sections, etc). |
---|
| 1711 | + Normally kallsyms only contains the symbols of functions for nicer |
---|
| 1712 | + OOPS messages and backtraces (i.e., symbols from the text and inittext |
---|
| 1713 | + sections). This is sufficient for most cases. And only in very rare |
---|
| 1714 | + cases (e.g., when a debugger is used) all symbols are required (e.g., |
---|
| 1715 | + names of variables from the data sections, etc). |
---|
1604 | 1716 | |
---|
1605 | | - This option makes sure that all symbols are loaded into the kernel |
---|
1606 | | - image (i.e., symbols from all sections) in cost of increased kernel |
---|
1607 | | - size (depending on the kernel configuration, it may be 300KiB or |
---|
1608 | | - something like this). |
---|
| 1717 | + This option makes sure that all symbols are loaded into the kernel |
---|
| 1718 | + image (i.e., symbols from all sections) in cost of increased kernel |
---|
| 1719 | + size (depending on the kernel configuration, it may be 300KiB or |
---|
| 1720 | + something like this). |
---|
1609 | 1721 | |
---|
1610 | | - Say N unless you really need all symbols. |
---|
| 1722 | + Say N unless you really need all symbols. |
---|
1611 | 1723 | |
---|
1612 | 1724 | config KALLSYMS_ABSOLUTE_PERCPU |
---|
1613 | 1725 | bool |
---|
.. | .. |
---|
1635 | 1747 | # end of the "standard kernel features (expert users)" menu |
---|
1636 | 1748 | |
---|
1637 | 1749 | # syscall, maps, verifier |
---|
| 1750 | + |
---|
| 1751 | +config BPF_LSM |
---|
| 1752 | + bool "LSM Instrumentation with BPF" |
---|
| 1753 | + depends on BPF_EVENTS |
---|
| 1754 | + depends on BPF_SYSCALL |
---|
| 1755 | + depends on SECURITY |
---|
| 1756 | + depends on BPF_JIT |
---|
| 1757 | + help |
---|
| 1758 | + Enables instrumentation of the security hooks with eBPF programs for |
---|
| 1759 | + implementing dynamic MAC and Audit Policies. |
---|
| 1760 | + |
---|
| 1761 | + If you are unsure how to answer this question, answer N. |
---|
| 1762 | + |
---|
1638 | 1763 | config BPF_SYSCALL |
---|
1639 | 1764 | bool "Enable bpf() system call" |
---|
1640 | 1765 | select BPF |
---|
1641 | 1766 | select IRQ_WORK |
---|
| 1767 | + select TASKS_TRACE_RCU |
---|
1642 | 1768 | default n |
---|
1643 | 1769 | help |
---|
1644 | 1770 | Enable the bpf() system call that allows to manipulate eBPF |
---|
1645 | 1771 | programs and maps via file descriptors. |
---|
| 1772 | + |
---|
| 1773 | +config ARCH_WANT_DEFAULT_BPF_JIT |
---|
| 1774 | + bool |
---|
1646 | 1775 | |
---|
1647 | 1776 | config BPF_JIT_ALWAYS_ON |
---|
1648 | 1777 | bool "Permanently enable BPF JIT and remove BPF interpreter" |
---|
.. | .. |
---|
1650 | 1779 | help |
---|
1651 | 1780 | Enables BPF JIT and removes BPF interpreter to avoid |
---|
1652 | 1781 | speculative execution of BPF instructions by the interpreter |
---|
| 1782 | + |
---|
| 1783 | +config BPF_JIT_DEFAULT_ON |
---|
| 1784 | + def_bool ARCH_WANT_DEFAULT_BPF_JIT || BPF_JIT_ALWAYS_ON |
---|
| 1785 | + depends on HAVE_EBPF_JIT && BPF_JIT |
---|
1653 | 1786 | |
---|
1654 | 1787 | config BPF_UNPRIV_DEFAULT_OFF |
---|
1655 | 1788 | bool "Disable unprivileged BPF by default" |
---|
.. | .. |
---|
1660 | 1793 | still reenable it by setting it to 0 later on, or permanently |
---|
1661 | 1794 | disable it by setting it to 1 (from which no other transition to |
---|
1662 | 1795 | 0 is possible anymore). |
---|
| 1796 | + |
---|
| 1797 | +source "kernel/bpf/preload/Kconfig" |
---|
1663 | 1798 | |
---|
1664 | 1799 | config USERFAULTFD |
---|
1665 | 1800 | bool "Enable userfaultfd() system call" |
---|
.. | .. |
---|
1673 | 1808 | |
---|
1674 | 1809 | config ARCH_HAS_MEMBARRIER_SYNC_CORE |
---|
1675 | 1810 | bool |
---|
| 1811 | + |
---|
| 1812 | +config KCMP |
---|
| 1813 | + bool "Enable kcmp() system call" if EXPERT |
---|
| 1814 | + help |
---|
| 1815 | + Enable the kernel resource comparison system call. It provides |
---|
| 1816 | + user-space with the ability to compare two processes to see if they |
---|
| 1817 | + share a common resource, such as a file descriptor or even virtual |
---|
| 1818 | + memory space. |
---|
| 1819 | + |
---|
| 1820 | + If unsure, say N. |
---|
1676 | 1821 | |
---|
1677 | 1822 | config RSEQ |
---|
1678 | 1823 | bool "Enable rseq() system call" if EXPERT |
---|
.. | .. |
---|
1760 | 1905 | depends on PERF_EVENTS && DEBUG_KERNEL && !PPC |
---|
1761 | 1906 | select PERF_USE_VMALLOC |
---|
1762 | 1907 | help |
---|
1763 | | - Use vmalloc memory to back perf mmap() buffers. |
---|
| 1908 | + Use vmalloc memory to back perf mmap() buffers. |
---|
1764 | 1909 | |
---|
1765 | | - Mostly useful for debugging the vmalloc code on platforms |
---|
1766 | | - that don't require it. |
---|
| 1910 | + Mostly useful for debugging the vmalloc code on platforms |
---|
| 1911 | + that don't require it. |
---|
1767 | 1912 | |
---|
1768 | | - Say N if unsure. |
---|
| 1913 | + Say N if unsure. |
---|
1769 | 1914 | |
---|
1770 | 1915 | endmenu |
---|
1771 | 1916 | |
---|
.. | .. |
---|
1787 | 1932 | default y |
---|
1788 | 1933 | bool "Enable SLUB debugging support" if EXPERT |
---|
1789 | 1934 | depends on SLUB && SYSFS |
---|
1790 | | - select SLUB_SYSFS |
---|
1791 | 1935 | help |
---|
1792 | 1936 | SLUB has extensive debug support features. Disabling these can |
---|
1793 | 1937 | result in significant savings in code size. This also disables |
---|
.. | .. |
---|
1828 | 1972 | |
---|
1829 | 1973 | config SLAB |
---|
1830 | 1974 | bool "SLAB" |
---|
1831 | | - depends on !PREEMPT_RT_FULL |
---|
1832 | 1975 | select HAVE_HARDENED_USERCOPY_ALLOCATOR |
---|
1833 | 1976 | help |
---|
1834 | 1977 | The regular slab allocator that is established and known to work |
---|
.. | .. |
---|
1849 | 1992 | config SLOB |
---|
1850 | 1993 | depends on EXPERT |
---|
1851 | 1994 | bool "SLOB (Simple Allocator)" |
---|
1852 | | - depends on !PREEMPT_RT_FULL |
---|
1853 | 1995 | help |
---|
1854 | 1996 | SLOB replaces the stock allocator with a drastically simpler |
---|
1855 | 1997 | allocator. SLOB is generally more space efficient but |
---|
.. | .. |
---|
1872 | 2014 | command line. |
---|
1873 | 2015 | |
---|
1874 | 2016 | config SLAB_FREELIST_RANDOM |
---|
1875 | | - default n |
---|
| 2017 | + bool "Randomize slab freelist" |
---|
1876 | 2018 | depends on SLAB || SLUB |
---|
1877 | | - bool "SLAB freelist randomization" |
---|
1878 | 2019 | help |
---|
1879 | 2020 | Randomizes the freelist order used on creating new pages. This |
---|
1880 | 2021 | security feature reduces the predictability of the kernel slab |
---|
.. | .. |
---|
1882 | 2023 | |
---|
1883 | 2024 | config SLAB_FREELIST_HARDENED |
---|
1884 | 2025 | bool "Harden slab freelist metadata" |
---|
1885 | | - depends on SLUB |
---|
| 2026 | + depends on SLAB || SLUB |
---|
1886 | 2027 | help |
---|
1887 | 2028 | Many kernel heap attacks try to target slab cache metadata and |
---|
1888 | 2029 | other infrastructure. This options makes minor performance |
---|
1889 | | - sacrifies to harden the kernel slab allocator against common |
---|
1890 | | - freelist exploit methods. |
---|
| 2030 | + sacrifices to harden the kernel slab allocator against common |
---|
| 2031 | + freelist exploit methods. Some slab implementations have more |
---|
| 2032 | + sanity-checking than others. This option is most effective with |
---|
| 2033 | + CONFIG_SLUB. |
---|
| 2034 | + |
---|
| 2035 | +config SHUFFLE_PAGE_ALLOCATOR |
---|
| 2036 | + bool "Page allocator randomization" |
---|
| 2037 | + default SLAB_FREELIST_RANDOM && ACPI_NUMA |
---|
| 2038 | + help |
---|
| 2039 | + Randomization of the page allocator improves the average |
---|
| 2040 | + utilization of a direct-mapped memory-side-cache. See section |
---|
| 2041 | + 5.2.27 Heterogeneous Memory Attribute Table (HMAT) in the ACPI |
---|
| 2042 | + 6.2a specification for an example of how a platform advertises |
---|
| 2043 | + the presence of a memory-side-cache. There are also incidental |
---|
| 2044 | + security benefits as it reduces the predictability of page |
---|
| 2045 | + allocations to compliment SLAB_FREELIST_RANDOM, but the |
---|
| 2046 | + default granularity of shuffling on the "MAX_ORDER - 1" i.e, |
---|
| 2047 | + 10th order of pages is selected based on cache utilization |
---|
| 2048 | + benefits on x86. |
---|
| 2049 | + |
---|
| 2050 | + While the randomization improves cache utilization it may |
---|
| 2051 | + negatively impact workloads on platforms without a cache. For |
---|
| 2052 | + this reason, by default, the randomization is enabled only |
---|
| 2053 | + after runtime detection of a direct-mapped memory-side-cache. |
---|
| 2054 | + Otherwise, the randomization may be force enabled with the |
---|
| 2055 | + 'page_alloc.shuffle' kernel command line parameter. |
---|
| 2056 | + |
---|
| 2057 | + Say Y if unsure. |
---|
1891 | 2058 | |
---|
1892 | 2059 | config SLUB_CPU_PARTIAL |
---|
1893 | 2060 | default y |
---|
1894 | | - depends on SLUB && SMP && !PREEMPT_RT_FULL |
---|
| 2061 | + depends on SLUB && SMP |
---|
1895 | 2062 | bool "SLUB per cpu partial cache" |
---|
1896 | 2063 | help |
---|
1897 | | - Per cpu partial caches accellerate objects allocation and freeing |
---|
| 2064 | + Per cpu partial caches accelerate objects allocation and freeing |
---|
1898 | 2065 | that is local to a processor at the price of more indeterminism |
---|
1899 | 2066 | in the latency of the free. On overflow these caches will be cleared |
---|
1900 | 2067 | which requires the taking of locks that may cause latency spikes. |
---|
.. | .. |
---|
1920 | 2087 | userspace. Since that isn't generally a problem on no-MMU systems, |
---|
1921 | 2088 | it is normally safe to say Y here. |
---|
1922 | 2089 | |
---|
1923 | | - See Documentation/nommu-mmap.txt for more information. |
---|
| 2090 | + See Documentation/admin-guide/mm/nommu-mmap.rst for more information. |
---|
1924 | 2091 | |
---|
1925 | 2092 | config SYSTEM_DATA_VERIFICATION |
---|
1926 | 2093 | def_bool n |
---|
.. | .. |
---|
1964 | 2131 | int |
---|
1965 | 2132 | default 0 if BASE_FULL |
---|
1966 | 2133 | default 1 if !BASE_FULL |
---|
| 2134 | + |
---|
| 2135 | +config MODULE_SIG_FORMAT |
---|
| 2136 | + def_bool n |
---|
| 2137 | + select SYSTEM_DATA_VERIFICATION |
---|
1967 | 2138 | |
---|
1968 | 2139 | menuconfig MODULES |
---|
1969 | 2140 | bool "Enable loadable module support" |
---|
.. | .. |
---|
2024 | 2195 | make them incompatible with the kernel you are running. If |
---|
2025 | 2196 | unsure, say N. |
---|
2026 | 2197 | |
---|
| 2198 | +config ASM_MODVERSIONS |
---|
| 2199 | + bool |
---|
| 2200 | + default HAVE_ASM_MODVERSIONS && MODVERSIONS |
---|
| 2201 | + help |
---|
| 2202 | + This enables module versioning for exported symbols also from |
---|
| 2203 | + assembly. This can be enabled only when the target architecture |
---|
| 2204 | + supports it. |
---|
| 2205 | + |
---|
2027 | 2206 | config MODULE_REL_CRCS |
---|
2028 | 2207 | bool |
---|
2029 | 2208 | depends on MODVERSIONS |
---|
.. | .. |
---|
2039 | 2218 | the version). With this option, such a "srcversion" field |
---|
2040 | 2219 | will be created for all modules. If unsure, say N. |
---|
2041 | 2220 | |
---|
| 2221 | +config MODULE_SCMVERSION |
---|
| 2222 | + bool "SCM version for modules" |
---|
| 2223 | + depends on LOCALVERSION_AUTO |
---|
| 2224 | + help |
---|
| 2225 | + This enables the module attribute "scmversion" which can be used |
---|
| 2226 | + by developers to identify the SCM version of a given module, e.g. |
---|
| 2227 | + git sha1 or hg sha1. The SCM version can be queried by modinfo or |
---|
| 2228 | + via the sysfs node: /sys/modules/MODULENAME/scmversion. This is |
---|
| 2229 | + useful when the kernel or kernel modules are updated separately |
---|
| 2230 | + since that causes the vermagic of the kernel and the module to |
---|
| 2231 | + differ. |
---|
| 2232 | + |
---|
| 2233 | + If unsure, say N. |
---|
| 2234 | + |
---|
2042 | 2235 | config MODULE_SIG |
---|
2043 | 2236 | bool "Module signature verification" |
---|
2044 | | - depends on MODULES |
---|
2045 | | - select SYSTEM_DATA_VERIFICATION |
---|
| 2237 | + select MODULE_SIG_FORMAT |
---|
2046 | 2238 | help |
---|
2047 | 2239 | Check modules for valid signatures upon load: the signature |
---|
2048 | 2240 | is simply appended to the module. For more information see |
---|
.. | .. |
---|
2051 | 2243 | Note that this option adds the OpenSSL development packages as a |
---|
2052 | 2244 | kernel build dependency so that the signing tool can use its crypto |
---|
2053 | 2245 | library. |
---|
| 2246 | + |
---|
| 2247 | + You should enable this option if you wish to use either |
---|
| 2248 | + CONFIG_SECURITY_LOCKDOWN_LSM or lockdown functionality imposed via |
---|
| 2249 | + another LSM - otherwise unsigned modules will be loadable regardless |
---|
| 2250 | + of the lockdown policy. |
---|
2054 | 2251 | |
---|
2055 | 2252 | !!!WARNING!!! If you enable this option, you MUST make sure that the |
---|
2056 | 2253 | module DOES NOT get stripped after being signed. This includes the |
---|
.. | .. |
---|
2118 | 2315 | |
---|
2119 | 2316 | config MODULE_COMPRESS |
---|
2120 | 2317 | bool "Compress modules on installation" |
---|
2121 | | - depends on MODULES |
---|
2122 | 2318 | help |
---|
2123 | 2319 | |
---|
2124 | 2320 | Compresses kernel modules when 'make modules_install' is run; gzip or |
---|
.. | .. |
---|
2154 | 2350 | |
---|
2155 | 2351 | endchoice |
---|
2156 | 2352 | |
---|
| 2353 | +config MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS |
---|
| 2354 | + bool "Allow loading of modules with missing namespace imports" |
---|
| 2355 | + help |
---|
| 2356 | + Symbols exported with EXPORT_SYMBOL_NS*() are considered exported in |
---|
| 2357 | + a namespace. A module that makes use of a symbol exported with such a |
---|
| 2358 | + namespace is required to import the namespace via MODULE_IMPORT_NS(). |
---|
| 2359 | + There is no technical reason to enforce correct namespace imports, |
---|
| 2360 | + but it creates consistency between symbols defining namespaces and |
---|
| 2361 | + users importing namespaces they make use of. This option relaxes this |
---|
| 2362 | + requirement and lifts the enforcement when loading a module. |
---|
| 2363 | + |
---|
| 2364 | + If unsure, say N. |
---|
| 2365 | + |
---|
| 2366 | +config UNUSED_SYMBOLS |
---|
| 2367 | + bool "Enable unused/obsolete exported symbols" |
---|
| 2368 | + default y if X86 |
---|
| 2369 | + help |
---|
| 2370 | + Unused but exported symbols make the kernel needlessly bigger. For |
---|
| 2371 | + that reason most of these unused exports will soon be removed. This |
---|
| 2372 | + option is provided temporarily to provide a transition period in case |
---|
| 2373 | + some external kernel module needs one of these symbols anyway. If you |
---|
| 2374 | + encounter such a case in your module, consider if you are actually |
---|
| 2375 | + using the right API. (rationale: since nobody in the kernel is using |
---|
| 2376 | + this in a module, there is a pretty good chance it's actually the |
---|
| 2377 | + wrong interface to use). If you really need the symbol, please send a |
---|
| 2378 | + mail to the linux kernel mailing list mentioning the symbol and why |
---|
| 2379 | + you really need it, and what the merge plan to the mainline kernel for |
---|
| 2380 | + your module is. |
---|
| 2381 | + |
---|
2157 | 2382 | config TRIM_UNUSED_KSYMS |
---|
2158 | 2383 | bool "Trim unused exported kernel symbols" |
---|
2159 | | - depends on MODULES && !UNUSED_SYMBOLS |
---|
| 2384 | + depends on !UNUSED_SYMBOLS |
---|
2160 | 2385 | help |
---|
2161 | 2386 | The kernel and some modules make many symbols available for |
---|
2162 | 2387 | other modules to use via EXPORT_SYMBOL() and variants. Depending |
---|
.. | .. |
---|
2217 | 2442 | |
---|
2218 | 2443 | source "kernel/Kconfig.locks" |
---|
2219 | 2444 | |
---|
| 2445 | +config ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE |
---|
| 2446 | + bool |
---|
| 2447 | + |
---|
2220 | 2448 | config ARCH_HAS_SYNC_CORE_BEFORE_USERMODE |
---|
2221 | 2449 | bool |
---|
2222 | 2450 | |
---|
.. | .. |
---|
2230 | 2458 | config ARCH_HAS_SYSCALL_WRAPPER |
---|
2231 | 2459 | def_bool n |
---|
2232 | 2460 | |
---|
| 2461 | +if !ROCKCHIP_MINI_KERNEL |
---|
2233 | 2462 | source "init/Kconfig.gki" |
---|
| 2463 | +endif |
---|