| .. | .. |
|---|
| 1 | +# SPDX-License-Identifier: GPL-2.0-only |
|---|
| 1 | 2 | config DEFCONFIG_LIST |
|---|
| 2 | 3 | string |
|---|
| 3 | 4 | depends on !UML |
|---|
| .. | .. |
|---|
| 5 | 6 | default "/lib/modules/$(shell,uname -r)/.config" |
|---|
| 6 | 7 | default "/etc/kernel-config" |
|---|
| 7 | 8 | default "/boot/config-$(shell,uname -r)" |
|---|
| 8 | | - default ARCH_DEFCONFIG |
|---|
| 9 | | - default "arch/$(ARCH)/defconfig" |
|---|
| 9 | + default "arch/$(SRCARCH)/configs/$(KBUILD_DEFCONFIG)" |
|---|
| 10 | + |
|---|
| 11 | +config CC_VERSION_TEXT |
|---|
| 12 | + string |
|---|
| 13 | + default "$(CC_VERSION_TEXT)" |
|---|
| 14 | + help |
|---|
| 15 | + This is used in unclear ways: |
|---|
| 16 | + |
|---|
| 17 | + - Re-run Kconfig when the compiler is updated |
|---|
| 18 | + The 'default' property references the environment variable, |
|---|
| 19 | + CC_VERSION_TEXT so it is recorded in include/config/auto.conf.cmd. |
|---|
| 20 | + When the compiler is updated, Kconfig will be invoked. |
|---|
| 21 | + |
|---|
| 22 | + - Ensure full rebuild when the compier is updated |
|---|
| 23 | + include/linux/kconfig.h contains this option in the comment line so |
|---|
| 24 | + fixdep adds include/config/cc/version/text.h into the auto-generated |
|---|
| 25 | + dependency. When the compiler is updated, syncconfig will touch it |
|---|
| 26 | + and then every file will be rebuilt. |
|---|
| 10 | 27 | |
|---|
| 11 | 28 | config CC_IS_GCC |
|---|
| 12 | | - def_bool $(success,$(CC) --version | head -n 1 | grep -q gcc) |
|---|
| 29 | + def_bool $(success,echo "$(CC_VERSION_TEXT)" | grep -q gcc) |
|---|
| 13 | 30 | |
|---|
| 14 | 31 | config GCC_VERSION |
|---|
| 15 | 32 | int |
|---|
| 16 | | - default $(shell,$(srctree)/scripts/gcc-version.sh -p $(CC) | sed 's/^0*//') if CC_IS_GCC |
|---|
| 33 | + default $(shell,$(srctree)/scripts/gcc-version.sh $(CC)) if CC_IS_GCC |
|---|
| 17 | 34 | default 0 |
|---|
| 18 | 35 | |
|---|
| 36 | +config LD_VERSION |
|---|
| 37 | + int |
|---|
| 38 | + default $(shell,$(LD) --version | $(srctree)/scripts/ld-version.sh) |
|---|
| 39 | + |
|---|
| 19 | 40 | config CC_IS_CLANG |
|---|
| 20 | | - def_bool $(success,$(CC) --version | head -n 1 | grep -q clang) |
|---|
| 41 | + def_bool $(success,echo "$(CC_VERSION_TEXT)" | grep -q clang) |
|---|
| 21 | 42 | |
|---|
| 22 | 43 | config LD_IS_LLD |
|---|
| 23 | 44 | def_bool $(success,$(LD) -v | head -n 1 | grep -q LLD) |
|---|
| .. | .. |
|---|
| 26 | 47 | int |
|---|
| 27 | 48 | default $(shell,$(srctree)/scripts/clang-version.sh $(CC)) |
|---|
| 28 | 49 | |
|---|
| 50 | +config AS_IS_GNU |
|---|
| 51 | + def_bool $(success,test "$(as-name)" = GNU) |
|---|
| 52 | + |
|---|
| 53 | +config AS_IS_LLVM |
|---|
| 54 | + def_bool $(success,test "$(as-name)" = LLVM) |
|---|
| 55 | + |
|---|
| 56 | +config AS_VERSION |
|---|
| 57 | + int |
|---|
| 58 | + # Use clang version if this is the integrated assembler |
|---|
| 59 | + default CLANG_VERSION if AS_IS_LLVM |
|---|
| 60 | + default $(as-version) |
|---|
| 61 | + |
|---|
| 29 | 62 | config LLD_VERSION |
|---|
| 30 | 63 | int |
|---|
| 31 | 64 | default $(shell,$(srctree)/scripts/lld-version.sh $(LD)) |
|---|
| 32 | 65 | |
|---|
| 66 | +config CC_CAN_LINK |
|---|
| 67 | + bool |
|---|
| 68 | + default $(success,$(srctree)/scripts/cc-can-link.sh $(CC) $(CLANG_FLAGS) $(USERCFLAGS) $(USERLDFLAGS) $(m64-flag)) if 64BIT |
|---|
| 69 | + default $(success,$(srctree)/scripts/cc-can-link.sh $(CC) $(CLANG_FLAGS) $(USERCFLAGS) $(USERLDFLAGS) $(m32-flag)) |
|---|
| 70 | + |
|---|
| 71 | +config CC_CAN_LINK_STATIC |
|---|
| 72 | + bool |
|---|
| 73 | + default $(success,$(srctree)/scripts/cc-can-link.sh $(CC) $(CLANG_FLAGS) $(USERCFLAGS) $(USERLDFLAGS) $(m64-flag) -static) if 64BIT |
|---|
| 74 | + default $(success,$(srctree)/scripts/cc-can-link.sh $(CC) $(CLANG_FLAGS) $(USERCFLAGS) $(USERLDFLAGS) $(m32-flag) -static) |
|---|
| 75 | + |
|---|
| 33 | 76 | config CC_HAS_ASM_GOTO |
|---|
| 34 | 77 | def_bool $(success,$(srctree)/scripts/gcc-goto.sh $(CC)) |
|---|
| 35 | 78 | |
|---|
| 79 | +config CC_HAS_ASM_GOTO_OUTPUT |
|---|
| 80 | + depends on CC_HAS_ASM_GOTO |
|---|
| 81 | + def_bool $(success,echo 'int foo(int x) { asm goto ("": "=r"(x) ::: bar); return x; bar: return 0; }' | $(CC) -x c - -c -o /dev/null) |
|---|
| 82 | + |
|---|
| 83 | +config CC_HAS_ASM_GOTO_TIED_OUTPUT |
|---|
| 84 | + depends on CC_HAS_ASM_GOTO_OUTPUT |
|---|
| 85 | + # Detect buggy gcc and clang, fixed in gcc-11 clang-14. |
|---|
| 86 | + def_bool $(success,echo 'int foo(int *x) { asm goto (".long (%l[bar]) - .": "+m"(*x) ::: bar); return *x; bar: return 0; }' | $CC -x c - -c -o /dev/null) |
|---|
| 87 | + |
|---|
| 36 | 88 | config TOOLS_SUPPORT_RELR |
|---|
| 37 | 89 | def_bool $(success,env "CC=$(CC)" "LD=$(LD)" "NM=$(NM)" "OBJCOPY=$(OBJCOPY)" $(srctree)/scripts/tools-support-relr.sh) |
|---|
| 90 | + |
|---|
| 91 | +config CC_HAS_ASM_INLINE |
|---|
| 92 | + def_bool $(success,echo 'void foo(void) { asm inline (""); }' | $(CC) -x c - -c -o /dev/null) |
|---|
| 38 | 93 | |
|---|
| 39 | 94 | config CONSTRUCTORS |
|---|
| 40 | 95 | bool |
|---|
| .. | .. |
|---|
| 43 | 98 | config IRQ_WORK |
|---|
| 44 | 99 | bool |
|---|
| 45 | 100 | |
|---|
| 46 | | -config BUILDTIME_EXTABLE_SORT |
|---|
| 101 | +config BUILDTIME_TABLE_SORT |
|---|
| 47 | 102 | bool |
|---|
| 48 | 103 | |
|---|
| 49 | 104 | config THREAD_INFO_IN_TASK |
|---|
| .. | .. |
|---|
| 88 | 143 | here. If you are a user/distributor, say N here to exclude useless |
|---|
| 89 | 144 | drivers to be distributed. |
|---|
| 90 | 145 | |
|---|
| 146 | +config WERROR |
|---|
| 147 | + bool "Compile the kernel with warnings as errors" |
|---|
| 148 | + default y |
|---|
| 149 | + help |
|---|
| 150 | + A kernel build should not cause any compiler warnings, and this |
|---|
| 151 | + enables the '-Werror' flag to enforce that rule by default. |
|---|
| 152 | + |
|---|
| 153 | + However, if you have a new (or very old) compiler with odd and |
|---|
| 154 | + unusual warnings, or you have some architecture with problems, |
|---|
| 155 | + you may need to disable this config option in order to |
|---|
| 156 | + successfully build the kernel. |
|---|
| 157 | + |
|---|
| 158 | + If in doubt, say Y. |
|---|
| 159 | + |
|---|
| 160 | +config UAPI_HEADER_TEST |
|---|
| 161 | + bool "Compile test UAPI headers" |
|---|
| 162 | + depends on HEADERS_INSTALL && CC_CAN_LINK |
|---|
| 163 | + help |
|---|
| 164 | + Compile test headers exported to user-space to ensure they are |
|---|
| 165 | + self-contained, i.e. compilable as standalone units. |
|---|
| 166 | + |
|---|
| 167 | + If you are a developer or tester and want to ensure the exported |
|---|
| 168 | + headers are self-contained, say Y here. Otherwise, choose N. |
|---|
| 169 | + |
|---|
| 91 | 170 | config LOCALVERSION |
|---|
| 92 | 171 | string "Local version - append to kernel release" |
|---|
| 93 | 172 | help |
|---|
| .. | .. |
|---|
| 120 | 199 | which is done within the script "scripts/setlocalversion".) |
|---|
| 121 | 200 | |
|---|
| 122 | 201 | config BUILD_SALT |
|---|
| 123 | | - string "Build ID Salt" |
|---|
| 124 | | - default "" |
|---|
| 125 | | - help |
|---|
| 126 | | - The build ID is used to link binaries and their debug info. Setting |
|---|
| 127 | | - this option will use the value in the calculation of the build id. |
|---|
| 128 | | - This is mostly useful for distributions which want to ensure the |
|---|
| 129 | | - build is unique between builds. It's safe to leave the default. |
|---|
| 202 | + string "Build ID Salt" |
|---|
| 203 | + default "" |
|---|
| 204 | + help |
|---|
| 205 | + The build ID is used to link binaries and their debug info. Setting |
|---|
| 206 | + this option will use the value in the calculation of the build id. |
|---|
| 207 | + This is mostly useful for distributions which want to ensure the |
|---|
| 208 | + build is unique between builds. It's safe to leave the default. |
|---|
| 130 | 209 | |
|---|
| 131 | 210 | config HAVE_KERNEL_GZIP |
|---|
| 132 | 211 | bool |
|---|
| .. | .. |
|---|
| 146 | 225 | config HAVE_KERNEL_LZ4 |
|---|
| 147 | 226 | bool |
|---|
| 148 | 227 | |
|---|
| 228 | +config HAVE_KERNEL_ZSTD |
|---|
| 229 | + bool |
|---|
| 230 | + |
|---|
| 149 | 231 | config HAVE_KERNEL_UNCOMPRESSED |
|---|
| 150 | 232 | bool |
|---|
| 151 | 233 | |
|---|
| 152 | 234 | choice |
|---|
| 153 | 235 | prompt "Kernel compression mode" |
|---|
| 154 | 236 | default KERNEL_GZIP |
|---|
| 155 | | - depends on HAVE_KERNEL_GZIP || HAVE_KERNEL_BZIP2 || HAVE_KERNEL_LZMA || HAVE_KERNEL_XZ || HAVE_KERNEL_LZO || HAVE_KERNEL_LZ4 || HAVE_KERNEL_UNCOMPRESSED |
|---|
| 237 | + depends on HAVE_KERNEL_GZIP || HAVE_KERNEL_BZIP2 || HAVE_KERNEL_LZMA || HAVE_KERNEL_XZ || HAVE_KERNEL_LZO || HAVE_KERNEL_LZ4 || HAVE_KERNEL_ZSTD || HAVE_KERNEL_UNCOMPRESSED |
|---|
| 156 | 238 | help |
|---|
| 157 | 239 | The linux kernel is a kind of self-extracting executable. |
|---|
| 158 | 240 | Several compression algorithms are available, which differ |
|---|
| .. | .. |
|---|
| 231 | 313 | is about 8% bigger than LZO. But the decompression speed is |
|---|
| 232 | 314 | faster than LZO. |
|---|
| 233 | 315 | |
|---|
| 316 | +config KERNEL_ZSTD |
|---|
| 317 | + bool "ZSTD" |
|---|
| 318 | + depends on HAVE_KERNEL_ZSTD |
|---|
| 319 | + help |
|---|
| 320 | + ZSTD is a compression algorithm targeting intermediate compression |
|---|
| 321 | + with fast decompression speed. It will compress better than GZIP and |
|---|
| 322 | + decompress around the same speed as LZO, but slower than LZ4. You |
|---|
| 323 | + will need at least 192 KB RAM or more for booting. The zstd command |
|---|
| 324 | + line tool is required for compression. |
|---|
| 325 | + |
|---|
| 234 | 326 | config KERNEL_UNCOMPRESSED |
|---|
| 235 | 327 | bool "None" |
|---|
| 236 | 328 | depends on HAVE_KERNEL_UNCOMPRESSED |
|---|
| .. | .. |
|---|
| 242 | 334 | and jump right at uncompressed kernel image. |
|---|
| 243 | 335 | |
|---|
| 244 | 336 | endchoice |
|---|
| 337 | + |
|---|
| 338 | +config DEFAULT_INIT |
|---|
| 339 | + string "Default init path" |
|---|
| 340 | + default "" |
|---|
| 341 | + help |
|---|
| 342 | + This option determines the default init for the system if no init= |
|---|
| 343 | + option is passed on the kernel command line. If the requested path is |
|---|
| 344 | + not present, we will still then move on to attempting further |
|---|
| 345 | + locations (e.g. /sbin/init, etc). If this is empty, we will just use |
|---|
| 346 | + the fallback list when init= is not passed. |
|---|
| 245 | 347 | |
|---|
| 246 | 348 | config DEFAULT_HOSTNAME |
|---|
| 247 | 349 | string "Default hostname" |
|---|
| .. | .. |
|---|
| 271 | 373 | |
|---|
| 272 | 374 | config SYSVIPC |
|---|
| 273 | 375 | bool "System V IPC" |
|---|
| 274 | | - ---help--- |
|---|
| 376 | + help |
|---|
| 275 | 377 | Inter Process Communication is a suite of library functions and |
|---|
| 276 | 378 | system calls which let processes (running programs) synchronize and |
|---|
| 277 | 379 | exchange information. It is generally considered to be a good thing, |
|---|
| .. | .. |
|---|
| 293 | 395 | config POSIX_MQUEUE |
|---|
| 294 | 396 | bool "POSIX Message Queues" |
|---|
| 295 | 397 | depends on NET |
|---|
| 296 | | - ---help--- |
|---|
| 398 | + help |
|---|
| 297 | 399 | POSIX variant of message queues is a part of IPC. In POSIX message |
|---|
| 298 | 400 | queues every message has a priority which decides about succession |
|---|
| 299 | 401 | of receiving it by a process. If you want to compile and run |
|---|
| .. | .. |
|---|
| 311 | 413 | depends on POSIX_MQUEUE |
|---|
| 312 | 414 | depends on SYSCTL |
|---|
| 313 | 415 | default y |
|---|
| 416 | + |
|---|
| 417 | +config WATCH_QUEUE |
|---|
| 418 | + bool "General notification queue" |
|---|
| 419 | + default n |
|---|
| 420 | + help |
|---|
| 421 | + |
|---|
| 422 | + This is a general notification queue for the kernel to pass events to |
|---|
| 423 | + userspace by splicing them into pipes. It can be used in conjunction |
|---|
| 424 | + with watches for key/keyring change notifications and device |
|---|
| 425 | + notifications. |
|---|
| 426 | + |
|---|
| 427 | + See Documentation/watch_queue.rst |
|---|
| 314 | 428 | |
|---|
| 315 | 429 | config CROSS_MEMORY_ATTACH |
|---|
| 316 | 430 | bool "Enable process_vm_readv/writev syscalls" |
|---|
| .. | .. |
|---|
| 338 | 452 | help |
|---|
| 339 | 453 | Enable auditing infrastructure that can be used with another |
|---|
| 340 | 454 | kernel subsystem, such as SELinux (which requires this for |
|---|
| 341 | | - logging of avc messages output). Does not do system-call |
|---|
| 342 | | - auditing without CONFIG_AUDITSYSCALL. |
|---|
| 455 | + logging of avc messages output). System call auditing is included |
|---|
| 456 | + on architectures which support it. |
|---|
| 343 | 457 | |
|---|
| 344 | 458 | config HAVE_ARCH_AUDITSYSCALL |
|---|
| 345 | 459 | bool |
|---|
| 346 | 460 | |
|---|
| 347 | 461 | config AUDITSYSCALL |
|---|
| 348 | | - bool "Enable system-call auditing support" |
|---|
| 462 | + def_bool y |
|---|
| 349 | 463 | depends on AUDIT && HAVE_ARCH_AUDITSYSCALL |
|---|
| 350 | | - default y if SECURITY_SELINUX |
|---|
| 351 | | - help |
|---|
| 352 | | - Enable low-overhead system-call auditing infrastructure that |
|---|
| 353 | | - can be used independently or with another kernel subsystem, |
|---|
| 354 | | - such as SELinux. |
|---|
| 355 | | - |
|---|
| 356 | | -config AUDIT_WATCH |
|---|
| 357 | | - def_bool y |
|---|
| 358 | | - depends on AUDITSYSCALL |
|---|
| 359 | | - select FSNOTIFY |
|---|
| 360 | | - |
|---|
| 361 | | -config AUDIT_TREE |
|---|
| 362 | | - def_bool y |
|---|
| 363 | | - depends on AUDITSYSCALL |
|---|
| 364 | 464 | select FSNOTIFY |
|---|
| 365 | 465 | |
|---|
| 366 | 466 | source "kernel/irq/Kconfig" |
|---|
| .. | .. |
|---|
| 405 | 505 | bool "Full dynticks CPU time accounting" |
|---|
| 406 | 506 | depends on HAVE_CONTEXT_TRACKING |
|---|
| 407 | 507 | depends on HAVE_VIRT_CPU_ACCOUNTING_GEN |
|---|
| 508 | + depends on GENERIC_CLOCKEVENTS |
|---|
| 408 | 509 | select VIRT_CPU_ACCOUNTING |
|---|
| 409 | 510 | select CONTEXT_TRACKING |
|---|
| 410 | 511 | help |
|---|
| .. | .. |
|---|
| 436 | 537 | def_bool y |
|---|
| 437 | 538 | depends on IRQ_TIME_ACCOUNTING || PARAVIRT_TIME_ACCOUNTING |
|---|
| 438 | 539 | depends on SMP |
|---|
| 540 | + |
|---|
| 541 | +config SCHED_THERMAL_PRESSURE |
|---|
| 542 | + bool |
|---|
| 543 | + default y if ARM && ARM_CPU_TOPOLOGY |
|---|
| 544 | + default y if ARM64 |
|---|
| 545 | + depends on SMP |
|---|
| 546 | + depends on CPU_FREQ_THERMAL |
|---|
| 547 | + help |
|---|
| 548 | + Select this option to enable thermal pressure accounting in the |
|---|
| 549 | + scheduler. Thermal pressure is the value conveyed to the scheduler |
|---|
| 550 | + that reflects the reduction in CPU compute capacity resulted from |
|---|
| 551 | + thermal throttling. Thermal throttling occurs when the performance of |
|---|
| 552 | + a CPU is capped due to high operating temperatures. |
|---|
| 553 | + |
|---|
| 554 | + If selected, the scheduler will be able to balance tasks accordingly, |
|---|
| 555 | + i.e. put less load on throttled CPUs than on non/less throttled ones. |
|---|
| 556 | + |
|---|
| 557 | + This requires the architecture to implement |
|---|
| 558 | + arch_set_thermal_pressure() and arch_get_thermal_pressure(). |
|---|
| 439 | 559 | |
|---|
| 440 | 560 | config BSD_PROCESS_ACCT |
|---|
| 441 | 561 | bool "BSD Process Accounting" |
|---|
| .. | .. |
|---|
| 522 | 642 | have cpu.pressure, memory.pressure, and io.pressure files, |
|---|
| 523 | 643 | which aggregate pressure stalls for the grouped tasks only. |
|---|
| 524 | 644 | |
|---|
| 525 | | - For more details see Documentation/accounting/psi.txt. |
|---|
| 645 | + For more details see Documentation/accounting/psi.rst. |
|---|
| 526 | 646 | |
|---|
| 527 | 647 | Say N if unsure. |
|---|
| 528 | 648 | |
|---|
| .. | .. |
|---|
| 568 | 688 | |
|---|
| 569 | 689 | config IKCONFIG |
|---|
| 570 | 690 | tristate "Kernel .config support" |
|---|
| 571 | | - select BUILD_BIN2C |
|---|
| 572 | | - ---help--- |
|---|
| 691 | + help |
|---|
| 573 | 692 | This option enables the complete Linux kernel ".config" file |
|---|
| 574 | 693 | contents to be saved in the kernel. It provides documentation |
|---|
| 575 | 694 | of which kernel options are used in a running kernel or in an |
|---|
| .. | .. |
|---|
| 582 | 701 | config IKCONFIG_PROC |
|---|
| 583 | 702 | bool "Enable access to .config through /proc/config.gz" |
|---|
| 584 | 703 | depends on IKCONFIG && PROC_FS |
|---|
| 585 | | - ---help--- |
|---|
| 704 | + help |
|---|
| 586 | 705 | This option enables access to the kernel configuration file |
|---|
| 587 | 706 | through /proc/config.gz. |
|---|
| 588 | 707 | |
|---|
| .. | .. |
|---|
| 634 | 753 | with more CPUs. Therefore this value is used only when the sum of |
|---|
| 635 | 754 | contributions is greater than the half of the default kernel ring |
|---|
| 636 | 755 | buffer as defined by LOG_BUF_SHIFT. The default values are set |
|---|
| 637 | | - so that more than 64 CPUs are needed to trigger the allocation. |
|---|
| 756 | + so that more than 16 CPUs are needed to trigger the allocation. |
|---|
| 638 | 757 | |
|---|
| 639 | 758 | Also this option is ignored when "log_buf_len" kernel parameter is |
|---|
| 640 | 759 | used as it forces an exact (power of two) size of the ring buffer. |
|---|
| .. | .. |
|---|
| 754 | 873 | config ARCH_WANT_BATCHED_UNMAP_TLB_FLUSH |
|---|
| 755 | 874 | bool |
|---|
| 756 | 875 | |
|---|
| 876 | +config CC_HAS_INT128 |
|---|
| 877 | + def_bool !$(cc-option,$(m64-flag) -D__SIZEOF_INT128__=0) && 64BIT |
|---|
| 878 | + |
|---|
| 757 | 879 | # |
|---|
| 758 | 880 | # For architectures that know their GCC __int128 support is sound |
|---|
| 759 | 881 | # |
|---|
| .. | .. |
|---|
| 794 | 916 | use with process control subsystems such as Cpusets, CFS, memory |
|---|
| 795 | 917 | controls or device isolation. |
|---|
| 796 | 918 | See |
|---|
| 797 | | - - Documentation/scheduler/sched-design-CFS.txt (CFS) |
|---|
| 798 | | - - Documentation/cgroup-v1/ (features for grouping, isolation |
|---|
| 919 | + - Documentation/scheduler/sched-design-CFS.rst (CFS) |
|---|
| 920 | + - Documentation/admin-guide/cgroup-v1/ (features for grouping, isolation |
|---|
| 799 | 921 | and resource control) |
|---|
| 800 | 922 | |
|---|
| 801 | 923 | Say N if unsure. |
|---|
| .. | .. |
|---|
| 803 | 925 | if CGROUPS |
|---|
| 804 | 926 | |
|---|
| 805 | 927 | config PAGE_COUNTER |
|---|
| 806 | | - bool |
|---|
| 928 | + bool |
|---|
| 807 | 929 | |
|---|
| 808 | 930 | config MEMCG |
|---|
| 809 | 931 | bool "Memory controller" |
|---|
| .. | .. |
|---|
| 813 | 935 | Provides control over the memory footprint of tasks in a cgroup. |
|---|
| 814 | 936 | |
|---|
| 815 | 937 | config MEMCG_SWAP |
|---|
| 816 | | - bool "Swap controller" |
|---|
| 938 | + bool |
|---|
| 817 | 939 | depends on MEMCG && SWAP |
|---|
| 818 | | - help |
|---|
| 819 | | - Provides control over the swap space consumed by tasks in a cgroup. |
|---|
| 820 | | - |
|---|
| 821 | | -config MEMCG_SWAP_ENABLED |
|---|
| 822 | | - bool "Swap controller enabled by default" |
|---|
| 823 | | - depends on MEMCG_SWAP |
|---|
| 824 | 940 | default y |
|---|
| 825 | | - help |
|---|
| 826 | | - Memory Resource Controller Swap Extension comes with its price in |
|---|
| 827 | | - a bigger memory consumption. General purpose distribution kernels |
|---|
| 828 | | - which want to enable the feature but keep it disabled by default |
|---|
| 829 | | - and let the user enable it by swapaccount=1 boot command line |
|---|
| 830 | | - parameter should have this option unselected. |
|---|
| 831 | | - For those who want to have the feature enabled by default should |
|---|
| 832 | | - select this option (if, for some reason, they need to disable it |
|---|
| 833 | | - then swapaccount=0 does the trick). |
|---|
| 834 | 941 | |
|---|
| 835 | 942 | config MEMCG_KMEM |
|---|
| 836 | 943 | bool |
|---|
| .. | .. |
|---|
| 841 | 948 | bool "IO controller" |
|---|
| 842 | 949 | depends on BLOCK |
|---|
| 843 | 950 | default n |
|---|
| 844 | | - ---help--- |
|---|
| 951 | + help |
|---|
| 845 | 952 | Generic block IO controller cgroup interface. This is the common |
|---|
| 846 | 953 | cgroup interface which should be used by various IO controlling |
|---|
| 847 | 954 | policies. |
|---|
| .. | .. |
|---|
| 854 | 961 | This option only enables generic Block IO controller infrastructure. |
|---|
| 855 | 962 | One needs to also enable actual IO controlling logic/policy. For |
|---|
| 856 | 963 | enabling proportional weight division of disk bandwidth in CFQ, set |
|---|
| 857 | | - CONFIG_CFQ_GROUP_IOSCHED=y; for enabling throttling policy, set |
|---|
| 964 | + CONFIG_BFQ_GROUP_IOSCHED=y; for enabling throttling policy, set |
|---|
| 858 | 965 | CONFIG_BLK_DEV_THROTTLING=y. |
|---|
| 859 | 966 | |
|---|
| 860 | | - See Documentation/cgroup-v1/blkio-controller.txt for more information. |
|---|
| 861 | | - |
|---|
| 862 | | -config DEBUG_BLK_CGROUP |
|---|
| 863 | | - bool "IO controller debugging" |
|---|
| 864 | | - depends on BLK_CGROUP |
|---|
| 865 | | - default n |
|---|
| 866 | | - ---help--- |
|---|
| 867 | | - Enable some debugging help. Currently it exports additional stat |
|---|
| 868 | | - files in a cgroup which can be useful for debugging. |
|---|
| 967 | + See Documentation/admin-guide/cgroup-v1/blkio-controller.rst for more information. |
|---|
| 869 | 968 | |
|---|
| 870 | 969 | config CGROUP_WRITEBACK |
|---|
| 871 | 970 | bool |
|---|
| .. | .. |
|---|
| 895 | 994 | tasks running within the fair group scheduler. Groups with no limit |
|---|
| 896 | 995 | set are considered to be unconstrained and will run with no |
|---|
| 897 | 996 | restriction. |
|---|
| 898 | | - See Documentation/scheduler/sched-bwc.txt for more information. |
|---|
| 997 | + See Documentation/scheduler/sched-bwc.rst for more information. |
|---|
| 899 | 998 | |
|---|
| 900 | 999 | config RT_GROUP_SCHED |
|---|
| 901 | 1000 | bool "Group scheduling for SCHED_RR/FIFO" |
|---|
| 902 | 1001 | depends on CGROUP_SCHED |
|---|
| 903 | | - depends on !PREEMPT_RT_FULL |
|---|
| 904 | 1002 | default n |
|---|
| 905 | 1003 | help |
|---|
| 906 | 1004 | This feature lets you explicitly allocate real CPU bandwidth |
|---|
| 907 | 1005 | to task groups. If enabled, it will also make it impossible to |
|---|
| 908 | 1006 | schedule realtime tasks for non-root users until you allocate |
|---|
| 909 | 1007 | realtime bandwidth for them. |
|---|
| 910 | | - See Documentation/scheduler/sched-rt-group.txt for more information. |
|---|
| 1008 | + See Documentation/scheduler/sched-rt-group.rst for more information. |
|---|
| 911 | 1009 | |
|---|
| 912 | 1010 | endif #CGROUP_SCHED |
|---|
| 913 | 1011 | |
|---|
| .. | .. |
|---|
| 945 | 1043 | PIDs controller is designed to stop this from happening. |
|---|
| 946 | 1044 | |
|---|
| 947 | 1045 | It should be noted that organisational operations (such as attaching |
|---|
| 948 | | - to a cgroup hierarchy will *not* be blocked by the PIDs controller), |
|---|
| 1046 | + to a cgroup hierarchy) will *not* be blocked by the PIDs controller, |
|---|
| 949 | 1047 | since the PIDs limit only affects a process's ability to fork, not to |
|---|
| 950 | 1048 | attach to a cgroup. |
|---|
| 951 | 1049 | |
|---|
| .. | .. |
|---|
| 1020 | 1118 | help |
|---|
| 1021 | 1119 | This option extends the perf per-cpu mode to restrict monitoring |
|---|
| 1022 | 1120 | to threads which belong to the cgroup specified and run on the |
|---|
| 1023 | | - designated cpu. |
|---|
| 1121 | + designated cpu. Or this can be used to have cgroup ID in samples |
|---|
| 1122 | + so that it can monitor performance events among cgroups. |
|---|
| 1024 | 1123 | |
|---|
| 1025 | 1124 | Say N if unsure. |
|---|
| 1026 | 1125 | |
|---|
| .. | .. |
|---|
| 1074 | 1173 | In this namespace tasks see different info provided with the |
|---|
| 1075 | 1174 | uname() system call |
|---|
| 1076 | 1175 | |
|---|
| 1176 | +config TIME_NS |
|---|
| 1177 | + bool "TIME namespace" |
|---|
| 1178 | + depends on GENERIC_VDSO_TIME_NS |
|---|
| 1179 | + default y |
|---|
| 1180 | + help |
|---|
| 1181 | + In this namespace boottime and monotonic clocks can be set. |
|---|
| 1182 | + The time will keep going with the same pace. |
|---|
| 1183 | + |
|---|
| 1077 | 1184 | config IPC_NS |
|---|
| 1078 | 1185 | bool "IPC namespace" |
|---|
| 1079 | 1186 | depends on (SYSVIPC || POSIX_MQUEUE) |
|---|
| .. | .. |
|---|
| 1117 | 1224 | config CHECKPOINT_RESTORE |
|---|
| 1118 | 1225 | bool "Checkpoint/restore support" |
|---|
| 1119 | 1226 | select PROC_CHILDREN |
|---|
| 1227 | + select KCMP |
|---|
| 1120 | 1228 | default n |
|---|
| 1121 | 1229 | help |
|---|
| 1122 | 1230 | Enables additional kernel features in a sake of checkpoint/restore. |
|---|
| .. | .. |
|---|
| 1138 | 1246 | desktop applications. Task group autogeneration is currently based |
|---|
| 1139 | 1247 | upon task session. |
|---|
| 1140 | 1248 | |
|---|
| 1141 | | -config SCHED_TUNE |
|---|
| 1142 | | - bool "Boosting for CFS tasks (EXPERIMENTAL)" |
|---|
| 1143 | | - depends on !UCLAMP_TASK |
|---|
| 1144 | | - depends on SMP |
|---|
| 1145 | | - help |
|---|
| 1146 | | - This option enables support for task classification using a new |
|---|
| 1147 | | - cgroup controller, schedtune. Schedtune allows tasks to be given |
|---|
| 1148 | | - a boost value and marked as latency-sensitive or not. This option |
|---|
| 1149 | | - provides the "schedtune" controller. |
|---|
| 1150 | | - |
|---|
| 1151 | | - This new controller: |
|---|
| 1152 | | - 1. allows only a two layers hierarchy, where the root defines the |
|---|
| 1153 | | - system-wide boost value and its direct childrens define each one a |
|---|
| 1154 | | - different "class of tasks" to be boosted with a different value |
|---|
| 1155 | | - 2. supports up to 16 different task classes, each one which could be |
|---|
| 1156 | | - configured with a different boost value |
|---|
| 1157 | | - |
|---|
| 1158 | | - Latency-sensitive tasks are not subject to energy-aware wakeup |
|---|
| 1159 | | - task placement. The boost value assigned to tasks is used to |
|---|
| 1160 | | - influence task placement and CPU frequency selection (if |
|---|
| 1161 | | - utilization-driven frequency selection is in use). |
|---|
| 1162 | | - |
|---|
| 1163 | | - If unsure, say N. |
|---|
| 1249 | +config RT_SOFTINT_OPTIMIZATION |
|---|
| 1250 | + bool "Improve RT scheduling during long softint execution" |
|---|
| 1251 | + depends on ARM64 |
|---|
| 1252 | + depends on SMP |
|---|
| 1253 | + default n |
|---|
| 1254 | + help |
|---|
| 1255 | + Enable an optimization which tries to avoid placing RT tasks on CPUs |
|---|
| 1256 | + occupied by nonpreemptible tasks, such as a long softint, or CPUs |
|---|
| 1257 | + which may soon block preemptions, such as a CPU running a ksoftirq |
|---|
| 1258 | + thread which handles slow softints. |
|---|
| 1164 | 1259 | |
|---|
| 1165 | 1260 | config SYSFS_DEPRECATED |
|---|
| 1166 | 1261 | bool "Enable deprecated sysfs features to support old userspace tools" |
|---|
| .. | .. |
|---|
| 1233 | 1328 | |
|---|
| 1234 | 1329 | config INITRD_ASYNC |
|---|
| 1235 | 1330 | bool "Initrd async" |
|---|
| 1331 | + depends on NO_GKI |
|---|
| 1236 | 1332 | help |
|---|
| 1237 | 1333 | Init ramdisk async, can reduce kernel init time. |
|---|
| 1238 | | - |
|---|
| 1239 | | -config ROCKCHIP_ONE_INITRD |
|---|
| 1240 | | - bool "Detect only one initrd" |
|---|
| 1241 | | - depends on ARCH_ROCKCHIP |
|---|
| 1242 | | - default ARCH_ROCKCHIP |
|---|
| 1243 | | - help |
|---|
| 1244 | | - RK bootloader does not put a correct size to cmdline. |
|---|
| 1245 | | - Directly return when we get a good initrd. |
|---|
| 1246 | 1334 | |
|---|
| 1247 | 1335 | endif |
|---|
| 1248 | 1336 | |
|---|
| .. | .. |
|---|
| 1255 | 1343 | initcall_nr_threads default is 0, which disable intcall async. |
|---|
| 1256 | 1344 | initcall_nr_threads=-1, auto selected the number of threads. |
|---|
| 1257 | 1345 | |
|---|
| 1346 | +config BOOT_CONFIG |
|---|
| 1347 | + bool "Boot config support" |
|---|
| 1348 | + select BLK_DEV_INITRD |
|---|
| 1349 | + help |
|---|
| 1350 | + Extra boot config allows system admin to pass a config file as |
|---|
| 1351 | + complemental extension of kernel cmdline when booting. |
|---|
| 1352 | + The boot config file must be attached at the end of initramfs |
|---|
| 1353 | + with checksum, size and magic word. |
|---|
| 1354 | + See <file:Documentation/admin-guide/bootconfig.rst> for details. |
|---|
| 1355 | + |
|---|
| 1356 | + If unsure, say Y. |
|---|
| 1357 | + |
|---|
| 1258 | 1358 | choice |
|---|
| 1259 | 1359 | prompt "Compiler optimization level" |
|---|
| 1260 | 1360 | default CC_OPTIMIZE_FOR_PERFORMANCE |
|---|
| 1261 | 1361 | |
|---|
| 1262 | 1362 | config CC_OPTIMIZE_FOR_PERFORMANCE |
|---|
| 1263 | | - bool "Optimize for performance" |
|---|
| 1363 | + bool "Optimize for performance (-O2)" |
|---|
| 1264 | 1364 | help |
|---|
| 1265 | 1365 | This is the default optimization level for the kernel, building |
|---|
| 1266 | 1366 | with the "-O2" compiler flag for best performance and most |
|---|
| 1267 | 1367 | helpful compile-time warnings. |
|---|
| 1268 | 1368 | |
|---|
| 1269 | | -config CC_OPTIMIZE_FOR_SIZE |
|---|
| 1270 | | - bool "Optimize for size" |
|---|
| 1369 | +config CC_OPTIMIZE_FOR_PERFORMANCE_O3 |
|---|
| 1370 | + bool "Optimize more for performance (-O3)" |
|---|
| 1371 | + depends on ARC |
|---|
| 1271 | 1372 | help |
|---|
| 1272 | | - Enabling this option will pass "-Os" instead of "-O2" to |
|---|
| 1273 | | - your compiler resulting in a smaller kernel. |
|---|
| 1373 | + Choosing this option will pass "-O3" to your compiler to optimize |
|---|
| 1374 | + the kernel yet more for performance. |
|---|
| 1274 | 1375 | |
|---|
| 1275 | | - If unsure, say N. |
|---|
| 1376 | +config CC_OPTIMIZE_FOR_SIZE |
|---|
| 1377 | + bool "Optimize for size (-Os)" |
|---|
| 1378 | + help |
|---|
| 1379 | + Choosing this option will pass "-Os" to your compiler resulting |
|---|
| 1380 | + in a smaller kernel. |
|---|
| 1276 | 1381 | |
|---|
| 1277 | 1382 | endchoice |
|---|
| 1278 | 1383 | |
|---|
| .. | .. |
|---|
| 1290 | 1395 | bool "Dead code and data elimination (EXPERIMENTAL)" |
|---|
| 1291 | 1396 | depends on HAVE_LD_DEAD_CODE_DATA_ELIMINATION |
|---|
| 1292 | 1397 | depends on EXPERT |
|---|
| 1293 | | - depends on !(FUNCTION_TRACER && CC_IS_GCC && GCC_VERSION < 40800) |
|---|
| 1294 | 1398 | depends on $(cc-option,-ffunction-sections -fdata-sections) |
|---|
| 1295 | 1399 | depends on $(ld-option,--gc-sections) |
|---|
| 1296 | 1400 | help |
|---|
| .. | .. |
|---|
| 1304 | 1408 | silently broken kernel if the required annotations are not |
|---|
| 1305 | 1409 | present. This option is not well tested yet, so use at your |
|---|
| 1306 | 1410 | own risk. |
|---|
| 1411 | + |
|---|
| 1412 | +config LD_ORPHAN_WARN |
|---|
| 1413 | + def_bool y |
|---|
| 1414 | + depends on ARCH_WANT_LD_ORPHAN_WARN |
|---|
| 1415 | + depends on !LD_IS_LLD || LLD_VERSION >= 110000 |
|---|
| 1416 | + depends on $(ld-option,--orphan-handling=warn) |
|---|
| 1307 | 1417 | |
|---|
| 1308 | 1418 | config SYSCTL |
|---|
| 1309 | 1419 | bool |
|---|
| .. | .. |
|---|
| 1344 | 1454 | select DEBUG_KERNEL |
|---|
| 1345 | 1455 | help |
|---|
| 1346 | 1456 | This option allows certain base kernel options and settings |
|---|
| 1347 | | - to be disabled or tweaked. This is for specialized |
|---|
| 1348 | | - environments which can tolerate a "non-standard" kernel. |
|---|
| 1349 | | - Only use this if you really know what you are doing. |
|---|
| 1457 | + to be disabled or tweaked. This is for specialized |
|---|
| 1458 | + environments which can tolerate a "non-standard" kernel. |
|---|
| 1459 | + Only use this if you really know what you are doing. |
|---|
| 1350 | 1460 | |
|---|
| 1351 | 1461 | config UID16 |
|---|
| 1352 | 1462 | bool "Enable 16-bit UID system calls" if EXPERT |
|---|
| .. | .. |
|---|
| 1372 | 1482 | config SGETMASK_SYSCALL |
|---|
| 1373 | 1483 | bool "sgetmask/ssetmask syscalls support" if EXPERT |
|---|
| 1374 | 1484 | def_bool PARISC || M68K || PPC || MIPS || X86 || SPARC || MICROBLAZE || SUPERH |
|---|
| 1375 | | - ---help--- |
|---|
| 1485 | + help |
|---|
| 1376 | 1486 | sys_sgetmask and sys_ssetmask are obsolete system calls |
|---|
| 1377 | 1487 | no longer supported in libc but still enabled by default in some |
|---|
| 1378 | 1488 | architectures. |
|---|
| .. | .. |
|---|
| 1382 | 1492 | config SYSFS_SYSCALL |
|---|
| 1383 | 1493 | bool "Sysfs syscall support" if EXPERT |
|---|
| 1384 | 1494 | default y |
|---|
| 1385 | | - ---help--- |
|---|
| 1495 | + help |
|---|
| 1386 | 1496 | sys_sysfs is an obsolete system call no longer supported in libc. |
|---|
| 1387 | 1497 | Note that disabling this option is more secure but might break |
|---|
| 1388 | 1498 | compatibility with some systems. |
|---|
| 1389 | 1499 | |
|---|
| 1390 | 1500 | If unsure say Y here. |
|---|
| 1391 | | - |
|---|
| 1392 | | -config SYSCTL_SYSCALL |
|---|
| 1393 | | - bool "Sysctl syscall support" if EXPERT |
|---|
| 1394 | | - depends on PROC_SYSCTL |
|---|
| 1395 | | - default n |
|---|
| 1396 | | - select SYSCTL |
|---|
| 1397 | | - ---help--- |
|---|
| 1398 | | - sys_sysctl uses binary paths that have been found challenging |
|---|
| 1399 | | - to properly maintain and use. The interface in /proc/sys |
|---|
| 1400 | | - using paths with ascii names is now the primary path to this |
|---|
| 1401 | | - information. |
|---|
| 1402 | | - |
|---|
| 1403 | | - Almost nothing using the binary sysctl interface so if you are |
|---|
| 1404 | | - trying to save some space it is probably safe to disable this, |
|---|
| 1405 | | - making your kernel marginally smaller. |
|---|
| 1406 | | - |
|---|
| 1407 | | - If unsure say N here. |
|---|
| 1408 | 1501 | |
|---|
| 1409 | 1502 | config FHANDLE |
|---|
| 1410 | 1503 | bool "open by fhandle syscalls" if EXPERT |
|---|
| .. | .. |
|---|
| 1456 | 1549 | bool "BUG() support" if EXPERT |
|---|
| 1457 | 1550 | default y |
|---|
| 1458 | 1551 | help |
|---|
| 1459 | | - Disabling this option eliminates support for BUG and WARN, reducing |
|---|
| 1460 | | - the size of your kernel image and potentially quietly ignoring |
|---|
| 1461 | | - numerous fatal conditions. You should only consider disabling this |
|---|
| 1462 | | - option for embedded systems with no facilities for reporting errors. |
|---|
| 1463 | | - Just say Y. |
|---|
| 1552 | + Disabling this option eliminates support for BUG and WARN, reducing |
|---|
| 1553 | + the size of your kernel image and potentially quietly ignoring |
|---|
| 1554 | + numerous fatal conditions. You should only consider disabling this |
|---|
| 1555 | + option for embedded systems with no facilities for reporting errors. |
|---|
| 1556 | + Just say Y. |
|---|
| 1464 | 1557 | |
|---|
| 1465 | 1558 | config ELF_CORE |
|---|
| 1466 | 1559 | depends on COREDUMP |
|---|
| .. | .. |
|---|
| 1476 | 1569 | select I8253_LOCK |
|---|
| 1477 | 1570 | default y |
|---|
| 1478 | 1571 | help |
|---|
| 1479 | | - This option allows to disable the internal PC-Speaker |
|---|
| 1480 | | - support, saving some memory. |
|---|
| 1572 | + This option allows to disable the internal PC-Speaker |
|---|
| 1573 | + support, saving some memory. |
|---|
| 1481 | 1574 | |
|---|
| 1482 | 1575 | config BASE_FULL |
|---|
| 1483 | 1576 | default y |
|---|
| .. | .. |
|---|
| 1562 | 1655 | by some high performance threaded applications. Disabling |
|---|
| 1563 | 1656 | this option saves about 7k. |
|---|
| 1564 | 1657 | |
|---|
| 1658 | +config IO_URING |
|---|
| 1659 | + bool "Enable IO uring support" if EXPERT |
|---|
| 1660 | + select IO_WQ |
|---|
| 1661 | + default y |
|---|
| 1662 | + help |
|---|
| 1663 | + This option enables support for the io_uring interface, enabling |
|---|
| 1664 | + applications to submit and complete IO through submission and |
|---|
| 1665 | + completion rings that are shared between the kernel and application. |
|---|
| 1666 | + |
|---|
| 1565 | 1667 | config ADVISE_SYSCALLS |
|---|
| 1566 | 1668 | bool "Enable madvise/fadvise syscalls" if EXPERT |
|---|
| 1567 | 1669 | default y |
|---|
| .. | .. |
|---|
| 1571 | 1673 | usage, improving performance. If building an embedded system where no |
|---|
| 1572 | 1674 | applications use these syscalls, you can disable this option to save |
|---|
| 1573 | 1675 | space. |
|---|
| 1676 | + |
|---|
| 1677 | +config HAVE_ARCH_USERFAULTFD_WP |
|---|
| 1678 | + bool |
|---|
| 1679 | + help |
|---|
| 1680 | + Arch has userfaultfd write protection support |
|---|
| 1681 | + |
|---|
| 1682 | +config HAVE_ARCH_USERFAULTFD_MINOR |
|---|
| 1683 | + bool |
|---|
| 1684 | + help |
|---|
| 1685 | + Arch has userfaultfd minor fault support |
|---|
| 1574 | 1686 | |
|---|
| 1575 | 1687 | config MEMBARRIER |
|---|
| 1576 | 1688 | bool "Enable membarrier() system call" if EXPERT |
|---|
| .. | .. |
|---|
| 1585 | 1697 | If unsure, say Y. |
|---|
| 1586 | 1698 | |
|---|
| 1587 | 1699 | config KALLSYMS |
|---|
| 1588 | | - bool "Load all symbols for debugging/ksymoops" if EXPERT |
|---|
| 1589 | | - default y |
|---|
| 1590 | | - help |
|---|
| 1591 | | - Say Y here to let the kernel print out symbolic crash information and |
|---|
| 1592 | | - symbolic stack backtraces. This increases the size of the kernel |
|---|
| 1593 | | - somewhat, as all symbols have to be loaded into the kernel image. |
|---|
| 1700 | + bool "Load all symbols for debugging/ksymoops" if EXPERT |
|---|
| 1701 | + default y |
|---|
| 1702 | + help |
|---|
| 1703 | + Say Y here to let the kernel print out symbolic crash information and |
|---|
| 1704 | + symbolic stack backtraces. This increases the size of the kernel |
|---|
| 1705 | + somewhat, as all symbols have to be loaded into the kernel image. |
|---|
| 1594 | 1706 | |
|---|
| 1595 | 1707 | config KALLSYMS_ALL |
|---|
| 1596 | 1708 | bool "Include all symbols in kallsyms" |
|---|
| 1597 | 1709 | depends on DEBUG_KERNEL && KALLSYMS |
|---|
| 1598 | 1710 | help |
|---|
| 1599 | | - Normally kallsyms only contains the symbols of functions for nicer |
|---|
| 1600 | | - OOPS messages and backtraces (i.e., symbols from the text and inittext |
|---|
| 1601 | | - sections). This is sufficient for most cases. And only in very rare |
|---|
| 1602 | | - cases (e.g., when a debugger is used) all symbols are required (e.g., |
|---|
| 1603 | | - names of variables from the data sections, etc). |
|---|
| 1711 | + Normally kallsyms only contains the symbols of functions for nicer |
|---|
| 1712 | + OOPS messages and backtraces (i.e., symbols from the text and inittext |
|---|
| 1713 | + sections). This is sufficient for most cases. And only in very rare |
|---|
| 1714 | + cases (e.g., when a debugger is used) all symbols are required (e.g., |
|---|
| 1715 | + names of variables from the data sections, etc). |
|---|
| 1604 | 1716 | |
|---|
| 1605 | | - This option makes sure that all symbols are loaded into the kernel |
|---|
| 1606 | | - image (i.e., symbols from all sections) in cost of increased kernel |
|---|
| 1607 | | - size (depending on the kernel configuration, it may be 300KiB or |
|---|
| 1608 | | - something like this). |
|---|
| 1717 | + This option makes sure that all symbols are loaded into the kernel |
|---|
| 1718 | + image (i.e., symbols from all sections) in cost of increased kernel |
|---|
| 1719 | + size (depending on the kernel configuration, it may be 300KiB or |
|---|
| 1720 | + something like this). |
|---|
| 1609 | 1721 | |
|---|
| 1610 | | - Say N unless you really need all symbols. |
|---|
| 1722 | + Say N unless you really need all symbols. |
|---|
| 1611 | 1723 | |
|---|
| 1612 | 1724 | config KALLSYMS_ABSOLUTE_PERCPU |
|---|
| 1613 | 1725 | bool |
|---|
| .. | .. |
|---|
| 1635 | 1747 | # end of the "standard kernel features (expert users)" menu |
|---|
| 1636 | 1748 | |
|---|
| 1637 | 1749 | # syscall, maps, verifier |
|---|
| 1750 | + |
|---|
| 1751 | +config BPF_LSM |
|---|
| 1752 | + bool "LSM Instrumentation with BPF" |
|---|
| 1753 | + depends on BPF_EVENTS |
|---|
| 1754 | + depends on BPF_SYSCALL |
|---|
| 1755 | + depends on SECURITY |
|---|
| 1756 | + depends on BPF_JIT |
|---|
| 1757 | + help |
|---|
| 1758 | + Enables instrumentation of the security hooks with eBPF programs for |
|---|
| 1759 | + implementing dynamic MAC and Audit Policies. |
|---|
| 1760 | + |
|---|
| 1761 | + If you are unsure how to answer this question, answer N. |
|---|
| 1762 | + |
|---|
| 1638 | 1763 | config BPF_SYSCALL |
|---|
| 1639 | 1764 | bool "Enable bpf() system call" |
|---|
| 1640 | 1765 | select BPF |
|---|
| 1641 | 1766 | select IRQ_WORK |
|---|
| 1767 | + select TASKS_TRACE_RCU |
|---|
| 1642 | 1768 | default n |
|---|
| 1643 | 1769 | help |
|---|
| 1644 | 1770 | Enable the bpf() system call that allows to manipulate eBPF |
|---|
| 1645 | 1771 | programs and maps via file descriptors. |
|---|
| 1772 | + |
|---|
| 1773 | +config ARCH_WANT_DEFAULT_BPF_JIT |
|---|
| 1774 | + bool |
|---|
| 1646 | 1775 | |
|---|
| 1647 | 1776 | config BPF_JIT_ALWAYS_ON |
|---|
| 1648 | 1777 | bool "Permanently enable BPF JIT and remove BPF interpreter" |
|---|
| .. | .. |
|---|
| 1650 | 1779 | help |
|---|
| 1651 | 1780 | Enables BPF JIT and removes BPF interpreter to avoid |
|---|
| 1652 | 1781 | speculative execution of BPF instructions by the interpreter |
|---|
| 1782 | + |
|---|
| 1783 | +config BPF_JIT_DEFAULT_ON |
|---|
| 1784 | + def_bool ARCH_WANT_DEFAULT_BPF_JIT || BPF_JIT_ALWAYS_ON |
|---|
| 1785 | + depends on HAVE_EBPF_JIT && BPF_JIT |
|---|
| 1653 | 1786 | |
|---|
| 1654 | 1787 | config BPF_UNPRIV_DEFAULT_OFF |
|---|
| 1655 | 1788 | bool "Disable unprivileged BPF by default" |
|---|
| .. | .. |
|---|
| 1660 | 1793 | still reenable it by setting it to 0 later on, or permanently |
|---|
| 1661 | 1794 | disable it by setting it to 1 (from which no other transition to |
|---|
| 1662 | 1795 | 0 is possible anymore). |
|---|
| 1796 | + |
|---|
| 1797 | +source "kernel/bpf/preload/Kconfig" |
|---|
| 1663 | 1798 | |
|---|
| 1664 | 1799 | config USERFAULTFD |
|---|
| 1665 | 1800 | bool "Enable userfaultfd() system call" |
|---|
| .. | .. |
|---|
| 1673 | 1808 | |
|---|
| 1674 | 1809 | config ARCH_HAS_MEMBARRIER_SYNC_CORE |
|---|
| 1675 | 1810 | bool |
|---|
| 1811 | + |
|---|
| 1812 | +config KCMP |
|---|
| 1813 | + bool "Enable kcmp() system call" if EXPERT |
|---|
| 1814 | + help |
|---|
| 1815 | + Enable the kernel resource comparison system call. It provides |
|---|
| 1816 | + user-space with the ability to compare two processes to see if they |
|---|
| 1817 | + share a common resource, such as a file descriptor or even virtual |
|---|
| 1818 | + memory space. |
|---|
| 1819 | + |
|---|
| 1820 | + If unsure, say N. |
|---|
| 1676 | 1821 | |
|---|
| 1677 | 1822 | config RSEQ |
|---|
| 1678 | 1823 | bool "Enable rseq() system call" if EXPERT |
|---|
| .. | .. |
|---|
| 1760 | 1905 | depends on PERF_EVENTS && DEBUG_KERNEL && !PPC |
|---|
| 1761 | 1906 | select PERF_USE_VMALLOC |
|---|
| 1762 | 1907 | help |
|---|
| 1763 | | - Use vmalloc memory to back perf mmap() buffers. |
|---|
| 1908 | + Use vmalloc memory to back perf mmap() buffers. |
|---|
| 1764 | 1909 | |
|---|
| 1765 | | - Mostly useful for debugging the vmalloc code on platforms |
|---|
| 1766 | | - that don't require it. |
|---|
| 1910 | + Mostly useful for debugging the vmalloc code on platforms |
|---|
| 1911 | + that don't require it. |
|---|
| 1767 | 1912 | |
|---|
| 1768 | | - Say N if unsure. |
|---|
| 1913 | + Say N if unsure. |
|---|
| 1769 | 1914 | |
|---|
| 1770 | 1915 | endmenu |
|---|
| 1771 | 1916 | |
|---|
| .. | .. |
|---|
| 1787 | 1932 | default y |
|---|
| 1788 | 1933 | bool "Enable SLUB debugging support" if EXPERT |
|---|
| 1789 | 1934 | depends on SLUB && SYSFS |
|---|
| 1790 | | - select SLUB_SYSFS |
|---|
| 1791 | 1935 | help |
|---|
| 1792 | 1936 | SLUB has extensive debug support features. Disabling these can |
|---|
| 1793 | 1937 | result in significant savings in code size. This also disables |
|---|
| .. | .. |
|---|
| 1828 | 1972 | |
|---|
| 1829 | 1973 | config SLAB |
|---|
| 1830 | 1974 | bool "SLAB" |
|---|
| 1831 | | - depends on !PREEMPT_RT_FULL |
|---|
| 1832 | 1975 | select HAVE_HARDENED_USERCOPY_ALLOCATOR |
|---|
| 1833 | 1976 | help |
|---|
| 1834 | 1977 | The regular slab allocator that is established and known to work |
|---|
| .. | .. |
|---|
| 1849 | 1992 | config SLOB |
|---|
| 1850 | 1993 | depends on EXPERT |
|---|
| 1851 | 1994 | bool "SLOB (Simple Allocator)" |
|---|
| 1852 | | - depends on !PREEMPT_RT_FULL |
|---|
| 1853 | 1995 | help |
|---|
| 1854 | 1996 | SLOB replaces the stock allocator with a drastically simpler |
|---|
| 1855 | 1997 | allocator. SLOB is generally more space efficient but |
|---|
| .. | .. |
|---|
| 1872 | 2014 | command line. |
|---|
| 1873 | 2015 | |
|---|
| 1874 | 2016 | config SLAB_FREELIST_RANDOM |
|---|
| 1875 | | - default n |
|---|
| 2017 | + bool "Randomize slab freelist" |
|---|
| 1876 | 2018 | depends on SLAB || SLUB |
|---|
| 1877 | | - bool "SLAB freelist randomization" |
|---|
| 1878 | 2019 | help |
|---|
| 1879 | 2020 | Randomizes the freelist order used on creating new pages. This |
|---|
| 1880 | 2021 | security feature reduces the predictability of the kernel slab |
|---|
| .. | .. |
|---|
| 1882 | 2023 | |
|---|
| 1883 | 2024 | config SLAB_FREELIST_HARDENED |
|---|
| 1884 | 2025 | bool "Harden slab freelist metadata" |
|---|
| 1885 | | - depends on SLUB |
|---|
| 2026 | + depends on SLAB || SLUB |
|---|
| 1886 | 2027 | help |
|---|
| 1887 | 2028 | Many kernel heap attacks try to target slab cache metadata and |
|---|
| 1888 | 2029 | other infrastructure. This options makes minor performance |
|---|
| 1889 | | - sacrifies to harden the kernel slab allocator against common |
|---|
| 1890 | | - freelist exploit methods. |
|---|
| 2030 | + sacrifices to harden the kernel slab allocator against common |
|---|
| 2031 | + freelist exploit methods. Some slab implementations have more |
|---|
| 2032 | + sanity-checking than others. This option is most effective with |
|---|
| 2033 | + CONFIG_SLUB. |
|---|
| 2034 | + |
|---|
| 2035 | +config SHUFFLE_PAGE_ALLOCATOR |
|---|
| 2036 | + bool "Page allocator randomization" |
|---|
| 2037 | + default SLAB_FREELIST_RANDOM && ACPI_NUMA |
|---|
| 2038 | + help |
|---|
| 2039 | + Randomization of the page allocator improves the average |
|---|
| 2040 | + utilization of a direct-mapped memory-side-cache. See section |
|---|
| 2041 | + 5.2.27 Heterogeneous Memory Attribute Table (HMAT) in the ACPI |
|---|
| 2042 | + 6.2a specification for an example of how a platform advertises |
|---|
| 2043 | + the presence of a memory-side-cache. There are also incidental |
|---|
| 2044 | + security benefits as it reduces the predictability of page |
|---|
| 2045 | + allocations to compliment SLAB_FREELIST_RANDOM, but the |
|---|
| 2046 | + default granularity of shuffling on the "MAX_ORDER - 1" i.e, |
|---|
| 2047 | + 10th order of pages is selected based on cache utilization |
|---|
| 2048 | + benefits on x86. |
|---|
| 2049 | + |
|---|
| 2050 | + While the randomization improves cache utilization it may |
|---|
| 2051 | + negatively impact workloads on platforms without a cache. For |
|---|
| 2052 | + this reason, by default, the randomization is enabled only |
|---|
| 2053 | + after runtime detection of a direct-mapped memory-side-cache. |
|---|
| 2054 | + Otherwise, the randomization may be force enabled with the |
|---|
| 2055 | + 'page_alloc.shuffle' kernel command line parameter. |
|---|
| 2056 | + |
|---|
| 2057 | + Say Y if unsure. |
|---|
| 1891 | 2058 | |
|---|
| 1892 | 2059 | config SLUB_CPU_PARTIAL |
|---|
| 1893 | 2060 | default y |
|---|
| 1894 | | - depends on SLUB && SMP && !PREEMPT_RT_FULL |
|---|
| 2061 | + depends on SLUB && SMP |
|---|
| 1895 | 2062 | bool "SLUB per cpu partial cache" |
|---|
| 1896 | 2063 | help |
|---|
| 1897 | | - Per cpu partial caches accellerate objects allocation and freeing |
|---|
| 2064 | + Per cpu partial caches accelerate objects allocation and freeing |
|---|
| 1898 | 2065 | that is local to a processor at the price of more indeterminism |
|---|
| 1899 | 2066 | in the latency of the free. On overflow these caches will be cleared |
|---|
| 1900 | 2067 | which requires the taking of locks that may cause latency spikes. |
|---|
| .. | .. |
|---|
| 1920 | 2087 | userspace. Since that isn't generally a problem on no-MMU systems, |
|---|
| 1921 | 2088 | it is normally safe to say Y here. |
|---|
| 1922 | 2089 | |
|---|
| 1923 | | - See Documentation/nommu-mmap.txt for more information. |
|---|
| 2090 | + See Documentation/admin-guide/mm/nommu-mmap.rst for more information. |
|---|
| 1924 | 2091 | |
|---|
| 1925 | 2092 | config SYSTEM_DATA_VERIFICATION |
|---|
| 1926 | 2093 | def_bool n |
|---|
| .. | .. |
|---|
| 1964 | 2131 | int |
|---|
| 1965 | 2132 | default 0 if BASE_FULL |
|---|
| 1966 | 2133 | default 1 if !BASE_FULL |
|---|
| 2134 | + |
|---|
| 2135 | +config MODULE_SIG_FORMAT |
|---|
| 2136 | + def_bool n |
|---|
| 2137 | + select SYSTEM_DATA_VERIFICATION |
|---|
| 1967 | 2138 | |
|---|
| 1968 | 2139 | menuconfig MODULES |
|---|
| 1969 | 2140 | bool "Enable loadable module support" |
|---|
| .. | .. |
|---|
| 2024 | 2195 | make them incompatible with the kernel you are running. If |
|---|
| 2025 | 2196 | unsure, say N. |
|---|
| 2026 | 2197 | |
|---|
| 2198 | +config ASM_MODVERSIONS |
|---|
| 2199 | + bool |
|---|
| 2200 | + default HAVE_ASM_MODVERSIONS && MODVERSIONS |
|---|
| 2201 | + help |
|---|
| 2202 | + This enables module versioning for exported symbols also from |
|---|
| 2203 | + assembly. This can be enabled only when the target architecture |
|---|
| 2204 | + supports it. |
|---|
| 2205 | + |
|---|
| 2027 | 2206 | config MODULE_REL_CRCS |
|---|
| 2028 | 2207 | bool |
|---|
| 2029 | 2208 | depends on MODVERSIONS |
|---|
| .. | .. |
|---|
| 2039 | 2218 | the version). With this option, such a "srcversion" field |
|---|
| 2040 | 2219 | will be created for all modules. If unsure, say N. |
|---|
| 2041 | 2220 | |
|---|
| 2221 | +config MODULE_SCMVERSION |
|---|
| 2222 | + bool "SCM version for modules" |
|---|
| 2223 | + depends on LOCALVERSION_AUTO |
|---|
| 2224 | + help |
|---|
| 2225 | + This enables the module attribute "scmversion" which can be used |
|---|
| 2226 | + by developers to identify the SCM version of a given module, e.g. |
|---|
| 2227 | + git sha1 or hg sha1. The SCM version can be queried by modinfo or |
|---|
| 2228 | + via the sysfs node: /sys/modules/MODULENAME/scmversion. This is |
|---|
| 2229 | + useful when the kernel or kernel modules are updated separately |
|---|
| 2230 | + since that causes the vermagic of the kernel and the module to |
|---|
| 2231 | + differ. |
|---|
| 2232 | + |
|---|
| 2233 | + If unsure, say N. |
|---|
| 2234 | + |
|---|
| 2042 | 2235 | config MODULE_SIG |
|---|
| 2043 | 2236 | bool "Module signature verification" |
|---|
| 2044 | | - depends on MODULES |
|---|
| 2045 | | - select SYSTEM_DATA_VERIFICATION |
|---|
| 2237 | + select MODULE_SIG_FORMAT |
|---|
| 2046 | 2238 | help |
|---|
| 2047 | 2239 | Check modules for valid signatures upon load: the signature |
|---|
| 2048 | 2240 | is simply appended to the module. For more information see |
|---|
| .. | .. |
|---|
| 2051 | 2243 | Note that this option adds the OpenSSL development packages as a |
|---|
| 2052 | 2244 | kernel build dependency so that the signing tool can use its crypto |
|---|
| 2053 | 2245 | library. |
|---|
| 2246 | + |
|---|
| 2247 | + You should enable this option if you wish to use either |
|---|
| 2248 | + CONFIG_SECURITY_LOCKDOWN_LSM or lockdown functionality imposed via |
|---|
| 2249 | + another LSM - otherwise unsigned modules will be loadable regardless |
|---|
| 2250 | + of the lockdown policy. |
|---|
| 2054 | 2251 | |
|---|
| 2055 | 2252 | !!!WARNING!!! If you enable this option, you MUST make sure that the |
|---|
| 2056 | 2253 | module DOES NOT get stripped after being signed. This includes the |
|---|
| .. | .. |
|---|
| 2118 | 2315 | |
|---|
| 2119 | 2316 | config MODULE_COMPRESS |
|---|
| 2120 | 2317 | bool "Compress modules on installation" |
|---|
| 2121 | | - depends on MODULES |
|---|
| 2122 | 2318 | help |
|---|
| 2123 | 2319 | |
|---|
| 2124 | 2320 | Compresses kernel modules when 'make modules_install' is run; gzip or |
|---|
| .. | .. |
|---|
| 2154 | 2350 | |
|---|
| 2155 | 2351 | endchoice |
|---|
| 2156 | 2352 | |
|---|
| 2353 | +config MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS |
|---|
| 2354 | + bool "Allow loading of modules with missing namespace imports" |
|---|
| 2355 | + help |
|---|
| 2356 | + Symbols exported with EXPORT_SYMBOL_NS*() are considered exported in |
|---|
| 2357 | + a namespace. A module that makes use of a symbol exported with such a |
|---|
| 2358 | + namespace is required to import the namespace via MODULE_IMPORT_NS(). |
|---|
| 2359 | + There is no technical reason to enforce correct namespace imports, |
|---|
| 2360 | + but it creates consistency between symbols defining namespaces and |
|---|
| 2361 | + users importing namespaces they make use of. This option relaxes this |
|---|
| 2362 | + requirement and lifts the enforcement when loading a module. |
|---|
| 2363 | + |
|---|
| 2364 | + If unsure, say N. |
|---|
| 2365 | + |
|---|
| 2366 | +config UNUSED_SYMBOLS |
|---|
| 2367 | + bool "Enable unused/obsolete exported symbols" |
|---|
| 2368 | + default y if X86 |
|---|
| 2369 | + help |
|---|
| 2370 | + Unused but exported symbols make the kernel needlessly bigger. For |
|---|
| 2371 | + that reason most of these unused exports will soon be removed. This |
|---|
| 2372 | + option is provided temporarily to provide a transition period in case |
|---|
| 2373 | + some external kernel module needs one of these symbols anyway. If you |
|---|
| 2374 | + encounter such a case in your module, consider if you are actually |
|---|
| 2375 | + using the right API. (rationale: since nobody in the kernel is using |
|---|
| 2376 | + this in a module, there is a pretty good chance it's actually the |
|---|
| 2377 | + wrong interface to use). If you really need the symbol, please send a |
|---|
| 2378 | + mail to the linux kernel mailing list mentioning the symbol and why |
|---|
| 2379 | + you really need it, and what the merge plan to the mainline kernel for |
|---|
| 2380 | + your module is. |
|---|
| 2381 | + |
|---|
| 2157 | 2382 | config TRIM_UNUSED_KSYMS |
|---|
| 2158 | 2383 | bool "Trim unused exported kernel symbols" |
|---|
| 2159 | | - depends on MODULES && !UNUSED_SYMBOLS |
|---|
| 2384 | + depends on !UNUSED_SYMBOLS |
|---|
| 2160 | 2385 | help |
|---|
| 2161 | 2386 | The kernel and some modules make many symbols available for |
|---|
| 2162 | 2387 | other modules to use via EXPORT_SYMBOL() and variants. Depending |
|---|
| .. | .. |
|---|
| 2217 | 2442 | |
|---|
| 2218 | 2443 | source "kernel/Kconfig.locks" |
|---|
| 2219 | 2444 | |
|---|
| 2445 | +config ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE |
|---|
| 2446 | + bool |
|---|
| 2447 | + |
|---|
| 2220 | 2448 | config ARCH_HAS_SYNC_CORE_BEFORE_USERMODE |
|---|
| 2221 | 2449 | bool |
|---|
| 2222 | 2450 | |
|---|
| .. | .. |
|---|
| 2230 | 2458 | config ARCH_HAS_SYSCALL_WRAPPER |
|---|
| 2231 | 2459 | def_bool n |
|---|
| 2232 | 2460 | |
|---|
| 2461 | +if !ROCKCHIP_MINI_KERNEL |
|---|
| 2233 | 2462 | source "init/Kconfig.gki" |
|---|
| 2463 | +endif |
|---|