forked from ~ljy/RK356X_SDK_RELEASE

hc
2023-12-11 6778948f9de86c3cfaf36725a7c87dcff9ba247f
kernel/arch/x86/Kconfig
....@@ -3,7 +3,7 @@
33 config 64BIT
44 bool "64-bit kernel" if "$(ARCH)" = "x86"
55 default "$(ARCH)" != "i386"
6
- ---help---
6
+ help
77 Say yes to build a 64-bit kernel - formerly known as x86_64
88 Say no to build a 32-bit kernel - formerly known as i386
99
....@@ -14,26 +14,36 @@
1414 select ARCH_WANT_IPC_PARSE_VERSION
1515 select CLKSRC_I8253
1616 select CLONE_BACKWARDS
17
- select HAVE_AOUT
18
- select HAVE_GENERIC_DMA_COHERENT
17
+ select HAVE_DEBUG_STACKOVERFLOW
1918 select MODULES_USE_ELF_REL
2019 select OLD_SIGACTION
2120 select GENERIC_VDSO_32
21
+ select ARCH_SPLIT_ARG64
2222
2323 config X86_64
2424 def_bool y
2525 depends on 64BIT
2626 # Options that are inherently 64-bit kernel only:
27
- select ARCH_HAS_GIGANTIC_PAGE if (MEMORY_ISOLATION && COMPACTION) || CMA
28
- select ARCH_SUPPORTS_INT128
27
+ select ARCH_HAS_GIGANTIC_PAGE
28
+ select ARCH_SUPPORTS_INT128 if CC_HAS_INT128
29
+ select ARCH_SUPPORTS_SPECULATIVE_PAGE_FAULT
2930 select ARCH_USE_CMPXCHG_LOCKREF
3031 select HAVE_ARCH_SOFT_DIRTY
3132 select MODULES_USE_ELF_RELA
3233 select NEED_DMA_MAP_STATE
3334 select SWIOTLB
34
- select X86_DEV_DMA_OPS
35
- select ARCH_HAS_SYSCALL_WRAPPER
3635
36
+config FORCE_DYNAMIC_FTRACE
37
+ def_bool y
38
+ depends on X86_32
39
+ depends on FUNCTION_TRACER
40
+ select DYNAMIC_FTRACE
41
+ help
42
+ We keep the static function tracing (!DYNAMIC_FTRACE) around
43
+ in order to test the non static function tracing in the
44
+ generic code, as other architectures still use it. But we
45
+ only need to keep it around for x86_64. No need to keep it
46
+ for x86_32. For x86_32, force DYNAMIC_FTRACE.
3747 #
3848 # Arch settings
3949 #
....@@ -47,50 +57,60 @@
4757 #
4858 select ACPI_LEGACY_TABLES_LOOKUP if ACPI
4959 select ACPI_SYSTEM_POWER_STATES_SUPPORT if ACPI
50
- select ARCH_CLOCKSOURCE_DATA
51
- select ARCH_DISCARD_MEMBLOCK
60
+ select ARCH_32BIT_OFF_T if X86_32
61
+ select ARCH_CLOCKSOURCE_INIT
5262 select ARCH_HAS_ACPI_TABLE_UPGRADE if ACPI
5363 select ARCH_HAS_DEBUG_VIRTUAL
64
+ select ARCH_HAS_DEBUG_VM_PGTABLE if !X86_PAE
5465 select ARCH_HAS_DEVMEM_IS_ALLOWED
66
+ select ARCH_HAS_EARLY_DEBUG if KGDB
5567 select ARCH_HAS_ELF_RANDOMIZE
5668 select ARCH_HAS_FAST_MULTIPLIER
5769 select ARCH_HAS_FILTER_PGPROT
5870 select ARCH_HAS_FORTIFY_SOURCE
5971 select ARCH_HAS_GCOV_PROFILE_ALL
60
- select ARCH_HAS_KCOV if X86_64
72
+ select ARCH_HAS_KCOV if X86_64 && STACK_VALIDATION
73
+ select ARCH_HAS_MEM_ENCRYPT
6174 select ARCH_HAS_MEMBARRIER_SYNC_CORE
75
+ select ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE
6276 select ARCH_HAS_PMEM_API if X86_64
77
+ select ARCH_HAS_PTE_DEVMAP if X86_64
6378 select ARCH_HAS_PTE_SPECIAL
64
- select ARCH_HAS_REFCOUNT
6579 select ARCH_HAS_UACCESS_FLUSHCACHE if X86_64
66
- select ARCH_HAS_UACCESS_MCSAFE if X86_64 && X86_MCE
80
+ select ARCH_HAS_COPY_MC if X86_64
6781 select ARCH_HAS_SET_MEMORY
68
- select ARCH_HAS_SG_CHAIN
82
+ select ARCH_HAS_SET_DIRECT_MAP
6983 select ARCH_HAS_STRICT_KERNEL_RWX
7084 select ARCH_HAS_STRICT_MODULE_RWX
7185 select ARCH_HAS_SYNC_CORE_BEFORE_USERMODE
86
+ select ARCH_HAS_SYSCALL_WRAPPER
7287 select ARCH_HAS_UBSAN_SANITIZE_ALL
73
- select ARCH_HAS_ZONE_DEVICE if X86_64
88
+ select ARCH_HAS_DEBUG_WX
7489 select ARCH_HAVE_NMI_SAFE_CMPXCHG
7590 select ARCH_MIGHT_HAVE_ACPI_PDC if ACPI
7691 select ARCH_MIGHT_HAVE_PC_PARPORT
7792 select ARCH_MIGHT_HAVE_PC_SERIO
93
+ select ARCH_STACKWALK
7894 select ARCH_SUPPORTS_ACPI
7995 select ARCH_SUPPORTS_ATOMIC_RMW
8096 select ARCH_SUPPORTS_NUMA_BALANCING if X86_64
8197 select ARCH_SUPPORTS_LTO_CLANG if X86_64
98
+ select ARCH_SUPPORTS_LTO_CLANG_THIN if X86_64
8299 select ARCH_USE_BUILTIN_BSWAP
83100 select ARCH_USE_QUEUED_RWLOCKS
84101 select ARCH_USE_QUEUED_SPINLOCKS
102
+ select ARCH_USE_SYM_ANNOTATIONS
85103 select ARCH_WANT_BATCHED_UNMAP_TLB_FLUSH
104
+ select ARCH_WANT_DEFAULT_BPF_JIT if X86_64
86105 select ARCH_WANTS_DYNAMIC_TASK_STRUCT
106
+ select ARCH_WANT_HUGE_PMD_SHARE
107
+ select ARCH_WANT_LD_ORPHAN_WARN
87108 select ARCH_WANTS_THP_SWAP if X86_64
88
- select BUILDTIME_EXTABLE_SORT
109
+ select BUILDTIME_TABLE_SORT
89110 select CLKEVT_I8253
90111 select CLOCKSOURCE_VALIDATE_LAST_CYCLE
91112 select CLOCKSOURCE_WATCHDOG
92113 select DCACHE_WORD_ACCESS
93
- select DMA_DIRECT_OPS
94114 select EDAC_ATOMIC_SCRUB
95115 select EDAC_SUPPORT
96116 select GENERIC_CLOCKEVENTS
....@@ -100,6 +120,7 @@
100120 select GENERIC_CPU_AUTOPROBE
101121 select GENERIC_CPU_VULNERABILITIES
102122 select GENERIC_EARLY_IOREMAP
123
+ select GENERIC_ENTRY
103124 select GENERIC_FIND_FIRST_BIT
104125 select GENERIC_IOMAP
105126 select GENERIC_IRQ_EFFECTIVE_AFF_MASK if SMP
....@@ -109,11 +130,15 @@
109130 select GENERIC_IRQ_RESERVATION_MODE
110131 select GENERIC_IRQ_SHOW
111132 select GENERIC_PENDING_IRQ if SMP
133
+ select GENERIC_PTDUMP
112134 select GENERIC_SMP_IDLE_THREAD
113135 select GENERIC_STRNCPY_FROM_USER
114136 select GENERIC_STRNLEN_USER
115137 select GENERIC_TIME_VSYSCALL
116138 select GENERIC_GETTIMEOFDAY
139
+ select GENERIC_VDSO_TIME_NS
140
+ select GUP_GET_PTE_LOW_HIGH if X86_PAE
141
+ select HARDIRQS_SW_RESEND
117142 select HARDLOCKUP_CHECK_TIMESTAMP if X86_64
118143 select HAVE_ACPI_APEI if ACPI
119144 select HAVE_ACPI_APEI_NMI if ACPI
....@@ -121,32 +146,41 @@
121146 select HAVE_ARCH_AUDITSYSCALL
122147 select HAVE_ARCH_HUGE_VMAP if X86_64 || X86_PAE
123148 select HAVE_ARCH_JUMP_LABEL
149
+ select HAVE_ARCH_JUMP_LABEL_RELATIVE
124150 select HAVE_ARCH_KASAN if X86_64
151
+ select HAVE_ARCH_KASAN_VMALLOC if X86_64
152
+ select HAVE_ARCH_KFENCE
125153 select HAVE_ARCH_KGDB
126154 select HAVE_ARCH_MMAP_RND_BITS if MMU
127155 select HAVE_ARCH_MMAP_RND_COMPAT_BITS if MMU && COMPAT
128156 select HAVE_ARCH_COMPAT_MMAP_BASES if MMU && COMPAT
129
- select HAVE_ARCH_PREL32_RELOCATIONS if !LTO_CLANG
157
+ select HAVE_ARCH_PREL32_RELOCATIONS
130158 select HAVE_ARCH_SECCOMP_FILTER
131159 select HAVE_ARCH_THREAD_STRUCT_WHITELIST
160
+ select HAVE_ARCH_STACKLEAK
132161 select HAVE_ARCH_TRACEHOOK
133162 select HAVE_ARCH_TRANSPARENT_HUGEPAGE
134163 select HAVE_ARCH_TRANSPARENT_HUGEPAGE_PUD if X86_64
164
+ select HAVE_ARCH_USERFAULTFD_WP if X86_64 && USERFAULTFD
165
+ select HAVE_ARCH_USERFAULTFD_MINOR if X86_64 && USERFAULTFD
135166 select HAVE_ARCH_VMAP_STACK if X86_64
136167 select HAVE_ARCH_WITHIN_STACK_FRAMES
168
+ select HAVE_ASM_MODVERSIONS
137169 select HAVE_CMPXCHG_DOUBLE
138170 select HAVE_CMPXCHG_LOCAL
139171 select HAVE_CONTEXT_TRACKING if X86_64
140
- select HAVE_COPY_THREAD_TLS
141172 select HAVE_C_RECORDMCOUNT
173
+ select HAVE_OBJTOOL_MCOUNT if STACK_VALIDATION
142174 select HAVE_DEBUG_KMEMLEAK
143
- select HAVE_DEBUG_STACKOVERFLOW
144175 select HAVE_DMA_CONTIGUOUS
145176 select HAVE_DYNAMIC_FTRACE
146177 select HAVE_DYNAMIC_FTRACE_WITH_REGS
178
+ select HAVE_DYNAMIC_FTRACE_WITH_DIRECT_CALLS
147179 select HAVE_EBPF_JIT
148180 select HAVE_EFFICIENT_UNALIGNED_ACCESS
181
+ select HAVE_EISA
149182 select HAVE_EXIT_THREAD
183
+ select HAVE_FAST_GUP
150184 select HAVE_FENTRY if X86_64 || DYNAMIC_FTRACE
151185 select HAVE_FTRACE_MCOUNT_RECORD
152186 select HAVE_FUNCTION_GRAPH_TRACER
....@@ -155,7 +189,6 @@
155189 select HAVE_HW_BREAKPOINT
156190 select HAVE_IDE
157191 select HAVE_IOREMAP_PROT
158
- select HAVE_IRQ_EXIT_ON_IRQ_STACK if X86_64
159192 select HAVE_IRQ_TIME_ACCOUNTING
160193 select HAVE_KERNEL_BZIP2
161194 select HAVE_KERNEL_GZIP
....@@ -163,16 +196,17 @@
163196 select HAVE_KERNEL_LZMA
164197 select HAVE_KERNEL_LZO
165198 select HAVE_KERNEL_XZ
199
+ select HAVE_KERNEL_ZSTD
166200 select HAVE_KPROBES
167201 select HAVE_KPROBES_ON_FTRACE
168202 select HAVE_FUNCTION_ERROR_INJECTION
169203 select HAVE_KRETPROBES
170204 select HAVE_KVM
171205 select HAVE_LIVEPATCH if X86_64
172
- select HAVE_MEMBLOCK
173
- select HAVE_MEMBLOCK_NODE_MAP
174206 select HAVE_MIXED_BREAKPOINTS_REGS
175207 select HAVE_MOD_ARCH_SPECIFIC
208
+ select HAVE_MOVE_PMD
209
+ select HAVE_MOVE_PUD
176210 select HAVE_NMI
177211 select HAVE_OPROFILE
178212 select HAVE_OPTPROBES
....@@ -180,15 +214,18 @@
180214 select HAVE_PERF_EVENTS
181215 select HAVE_PERF_EVENTS_NMI
182216 select HAVE_HARDLOCKUP_DETECTOR_PERF if PERF_EVENTS && HAVE_PERF_EVENTS_NMI
217
+ select HAVE_PCI
183218 select HAVE_PERF_REGS
184219 select HAVE_PERF_USER_STACK_DUMP
185
- select HAVE_PREEMPT_LAZY
186
- select HAVE_RCU_TABLE_FREE if PARAVIRT
187
- select HAVE_RCU_TABLE_INVALIDATE if HAVE_RCU_TABLE_FREE
220
+ select MMU_GATHER_RCU_TABLE_FREE if PARAVIRT
221
+ select HAVE_POSIX_CPU_TIMERS_TASK_WORK
188222 select HAVE_REGS_AND_STACK_ACCESS_API
189223 select HAVE_RELIABLE_STACKTRACE if X86_64 && (UNWINDER_FRAME_POINTER || UNWINDER_ORC) && STACK_VALIDATION
224
+ select HAVE_FUNCTION_ARG_ACCESS_API
190225 select HAVE_STACKPROTECTOR if CC_HAS_SANE_STACKPROTECTOR
191
- select HAVE_STACK_VALIDATION if X86_64 && !LTO_CLANG
226
+ select HAVE_STACK_VALIDATION if X86_64
227
+ select HAVE_STATIC_CALL
228
+ select HAVE_STATIC_CALL_INLINE if HAVE_STACK_VALIDATION
192229 select HAVE_RSEQ
193230 select HAVE_SYSCALL_TRACEPOINTS
194231 select HAVE_UNSTABLE_SCHED_CLOCK
....@@ -197,17 +234,22 @@
197234 select HOTPLUG_SMT if SMP
198235 select IRQ_FORCED_THREADING
199236 select NEED_SG_DMA_LENGTH
200
- select PCI_LOCKLESS_CONFIG
237
+ select PCI_DOMAINS if PCI
238
+ select PCI_LOCKLESS_CONFIG if PCI
201239 select PERF_EVENTS
202240 select RTC_LIB
203241 select RTC_MC146818_LIB
204242 select SPARSE_IRQ
205243 select SRCU
244
+ select STACK_VALIDATION if HAVE_STACK_VALIDATION && (HAVE_STATIC_CALL_INLINE || RETPOLINE)
206245 select SYSCTL_EXCEPTION_TRACE
207246 select THREAD_INFO_IN_TASK
208247 select USER_STACKTRACE_SUPPORT
209248 select VIRT_TO_BUS
249
+ select HAVE_ARCH_KCSAN if X86_64
210250 select X86_FEATURE_NAMES if PROC_FS
251
+ select PROC_PID_ARCH_STATUS if PROC_FS
252
+ imply IMA_SECURE_AND_OR_TRUSTED_BOOT if EFI
211253
212254 config INSTRUCTION_DECODER
213255 def_bool y
....@@ -217,11 +259,6 @@
217259 string
218260 default "elf32-i386" if X86_32
219261 default "elf64-x86-64" if X86_64
220
-
221
-config ARCH_DEFCONFIG
222
- string
223
- default "arch/x86/configs/i386_defconfig" if X86_32
224
- default "arch/x86/configs/x86_64_defconfig" if X86_64
225262
226263 config LOCKDEP_SUPPORT
227264 def_bool y
....@@ -261,18 +298,9 @@
261298 config GENERIC_BUG_RELATIVE_POINTERS
262299 bool
263300
264
-config GENERIC_HWEIGHT
265
- def_bool y
266
-
267301 config ARCH_MAY_HAVE_PC_FDC
268302 def_bool y
269303 depends on ISA_DMA_API
270
-
271
-config RWSEM_GENERIC_SPINLOCK
272
- def_bool PREEMPT_RT_FULL
273
-
274
-config RWSEM_XCHGADD_ALGORITHM
275
- def_bool !RWSEM_GENERIC_SPINLOCK && !PREEMPT_RT_FULL
276304
277305 config GENERIC_CALIBRATE_DELAY
278306 def_bool y
....@@ -301,9 +329,6 @@
301329 config ARCH_SUSPEND_POSSIBLE
302330 def_bool y
303331
304
-config ARCH_WANT_HUGE_PMD_SHARE
305
- def_bool y
306
-
307332 config ARCH_WANT_GENERAL_HUGETLB
308333 def_bool y
309334
....@@ -312,9 +337,6 @@
312337
313338 config AUDIT_ARCH
314339 def_bool y if X86_64
315
-
316
-config ARCH_SUPPORTS_OPTIMIZED_INLINING
317
- def_bool y
318340
319341 config ARCH_SUPPORTS_DEBUG_PAGEALLOC
320342 def_bool y
....@@ -378,7 +400,7 @@
378400
379401 config SMP
380402 bool "Symmetric multi-processing support"
381
- ---help---
403
+ help
382404 This enables support for systems with more than one CPU. If you have
383405 a system with only one CPU, say N. If you have a system with more
384406 than one CPU, say Y.
....@@ -398,8 +420,8 @@
398420 Y to "Enhanced Real Time Clock Support", below. The "Advanced Power
399421 Management" code will be disabled if you say Y here.
400422
401
- See also <file:Documentation/x86/i386/IO-APIC.txt>,
402
- <file:Documentation/lockup-watchdogs.txt> and the SMP-HOWTO available at
423
+ See also <file:Documentation/x86/i386/IO-APIC.rst>,
424
+ <file:Documentation/admin-guide/lockup-watchdogs.rst> and the SMP-HOWTO available at
403425 <http://www.tldp.org/docs.html#howto>.
404426
405427 If you don't know what to do here, say N.
....@@ -407,7 +429,7 @@
407429 config X86_FEATURE_NAMES
408430 bool "Processor feature human-readable names" if EMBEDDED
409431 default y
410
- ---help---
432
+ help
411433 This option compiles in a table of x86 feature bits and corresponding
412434 names. This is required to support /proc/cpuinfo and a few kernel
413435 messages. You can disable this to save space, at the expense of
....@@ -418,7 +440,7 @@
418440 config X86_X2APIC
419441 bool "Support x2apic"
420442 depends on X86_LOCAL_APIC && X86_64 && (IRQ_REMAP || HYPERVISOR_GUEST)
421
- ---help---
443
+ help
422444 This enables x2apic support on CPUs that have this feature.
423445
424446 This allows 32-bit apic IDs (so it can support very large systems),
....@@ -430,34 +452,32 @@
430452 bool "Enable MPS table" if ACPI || SFI
431453 default y
432454 depends on X86_LOCAL_APIC
433
- ---help---
455
+ help
434456 For old smp systems that do not have proper acpi support. Newer systems
435457 (esp with 64bit cpus) with acpi support, MADT and DSDT will override it
436458
437459 config GOLDFISH
438
- def_bool y
439
- depends on X86_GOLDFISH
460
+ def_bool y
461
+ depends on X86_GOLDFISH
440462
441
-config RETPOLINE
442
- bool "Avoid speculative indirect branches in kernel"
443
- default y
444
- select STACK_VALIDATION if HAVE_STACK_VALIDATION
445
- help
446
- Compile kernel with the retpoline compiler options to guard against
447
- kernel-to-user data leaks by avoiding speculative indirect
448
- branches. Requires a compiler with -mindirect-branch=thunk-extern
449
- support for full protection. The kernel may run slower.
450
-
451
-config INTEL_RDT
452
- bool "Intel Resource Director Technology support"
453
- default n
454
- depends on X86 && CPU_SUP_INTEL
463
+config X86_CPU_RESCTRL
464
+ bool "x86 CPU resource control support"
465
+ depends on X86 && (CPU_SUP_INTEL || CPU_SUP_AMD)
455466 select KERNFS
467
+ select PROC_CPU_RESCTRL if PROC_FS
456468 help
457
- Select to enable resource allocation and monitoring which are
458
- sub-features of Intel Resource Director Technology(RDT). More
459
- information about RDT can be found in the Intel x86
460
- Architecture Software Developer Manual.
469
+ Enable x86 CPU resource control support.
470
+
471
+ Provide support for the allocation and monitoring of system resources
472
+ usage by the CPU.
473
+
474
+ Intel calls this Intel Resource Director Technology
475
+ (Intel(R) RDT). More information about RDT can be found in the
476
+ Intel x86 Architecture Software Developer Manual.
477
+
478
+ AMD calls this AMD Platform Quality of Service (AMD QoS).
479
+ More information about AMD QoS can be found in the AMD64 Technology
480
+ Platform Quality of Service Extensions manual.
461481
462482 Say N if unsure.
463483
....@@ -465,13 +485,13 @@
465485 config X86_BIGSMP
466486 bool "Support for big SMP systems with more than 8 CPUs"
467487 depends on SMP
468
- ---help---
469
- This option is needed for the systems that have more than 8 CPUs
488
+ help
489
+ This option is needed for the systems that have more than 8 CPUs.
470490
471491 config X86_EXTENDED_PLATFORM
472492 bool "Support for extended (non-PC) x86 platforms"
473493 default y
474
- ---help---
494
+ help
475495 If you disable this option then the kernel will only support
476496 standard PC platforms. (which covers the vast majority of
477497 systems out there.)
....@@ -493,7 +513,7 @@
493513 config X86_EXTENDED_PLATFORM
494514 bool "Support for extended (non-PC) x86 platforms"
495515 default y
496
- ---help---
516
+ help
497517 If you disable this option then the kernel will only support
498518 standard PC platforms. (which covers the vast majority of
499519 systems out there.)
....@@ -517,7 +537,7 @@
517537 depends on SMP
518538 depends on X86_X2APIC
519539 depends on PCI_MMCONFIG
520
- ---help---
540
+ help
521541 Adds support for Numascale NumaChip large-SMP systems. Needed to
522542 enable more than ~168 cores.
523543 If you don't have one of these, you should say N here.
....@@ -529,7 +549,7 @@
529549 depends on X86_64 && PCI
530550 depends on X86_EXTENDED_PLATFORM
531551 depends on SMP
532
- ---help---
552
+ help
533553 Support for ScaleMP vSMP systems. Say 'Y' here if this kernel is
534554 supposed to run on these EM64T-based machines. Only choose this option
535555 if you have one of these machines.
....@@ -543,7 +563,7 @@
543563 depends on KEXEC_CORE
544564 depends on X86_X2APIC
545565 depends on PCI
546
- ---help---
566
+ help
547567 This option is needed in order to support SGI Ultraviolet systems.
548568 If you don't have one of these, you should say N here.
549569
....@@ -551,9 +571,9 @@
551571 # Please maintain the alphabetic order if and when there are additions
552572
553573 config X86_GOLDFISH
554
- bool "Goldfish (Virtual Platform)"
555
- depends on X86_EXTENDED_PLATFORM
556
- ---help---
574
+ bool "Goldfish (Virtual Platform)"
575
+ depends on X86_EXTENDED_PLATFORM
576
+ help
557577 Enable support for the Goldfish virtual platform used primarily
558578 for Android development. Unless you are building for the Android
559579 Goldfish emulator say N here.
....@@ -568,7 +588,7 @@
568588 select X86_REBOOTFIXUPS
569589 select OF
570590 select OF_EARLY_FLATTREE
571
- ---help---
591
+ help
572592 Select for the Intel CE media processor (CE4100) SOC.
573593 This option compiles in support for the CE4100 SOC for settop
574594 boxes and media devices.
....@@ -584,9 +604,9 @@
584604 select I2C
585605 select DW_APB_TIMER
586606 select APB_TIMER
587
- select INTEL_SCU_IPC
607
+ select INTEL_SCU_PCI
588608 select MFD_INTEL_MSIC
589
- ---help---
609
+ help
590610 Select to build a kernel capable of supporting Intel MID (Mobile
591611 Internet Device) platform systems which do not have the PCI legacy
592612 interfaces. If you are building for a PC class system say N here.
....@@ -606,18 +626,18 @@
606626 select IOSF_MBI
607627 select INTEL_IMR
608628 select COMMON_CLK
609
- ---help---
629
+ help
610630 Select to include support for Quark X1000 SoC.
611631 Say Y here if you have a Quark based system such as the Arduino
612632 compatible Intel Galileo.
613633
614634 config X86_INTEL_LPSS
615635 bool "Intel Low Power Subsystem Support"
616
- depends on X86 && ACPI
636
+ depends on X86 && ACPI && PCI
617637 select COMMON_CLK
618638 select PINCTRL
619639 select IOSF_MBI
620
- ---help---
640
+ help
621641 Select to build support for Intel Low Power Subsystem such as
622642 found on Intel Lynxpoint PCH. Selecting this option enables
623643 things like clock tree (common clock framework) and pincontrol
....@@ -628,7 +648,7 @@
628648 depends on ACPI
629649 select COMMON_CLK
630650 select PINCTRL
631
- ---help---
651
+ help
632652 Select to interpret AMD specific ACPI device to platform device
633653 such as I2C, UART, GPIO found on AMD Carrizo and later chipsets.
634654 I2C and UART depend on COMMON_CLK to set clock. GPIO driver is
....@@ -637,7 +657,7 @@
637657 config IOSF_MBI
638658 tristate "Intel SoC IOSF Sideband support for SoC platforms"
639659 depends on PCI
640
- ---help---
660
+ help
641661 This option enables sideband register access support for Intel SoC
642662 platforms. On these platforms the IOSF sideband is used in lieu of
643663 MSR's for some register accesses, mostly but not limited to thermal
....@@ -654,7 +674,7 @@
654674 config IOSF_MBI_DEBUG
655675 bool "Enable IOSF sideband access through debugfs"
656676 depends on IOSF_MBI && DEBUG_FS
657
- ---help---
677
+ help
658678 Select this option to expose the IOSF sideband access registers (MCR,
659679 MDR, MCRX) through debugfs to write and read register information from
660680 different units on the SoC. This is most useful for obtaining device
....@@ -670,7 +690,7 @@
670690 depends on X86_EXTENDED_PLATFORM
671691 select M486
672692 select X86_REBOOTFIXUPS
673
- ---help---
693
+ help
674694 This option is needed for RDC R-321x system-on-chip, also known
675695 as R-8610-(G).
676696 If you don't have one of these chips, you should say N here.
....@@ -679,7 +699,7 @@
679699 bool "Support non-standard 32-bit SMP architectures"
680700 depends on X86_32 && SMP
681701 depends on X86_EXTENDED_PLATFORM
682
- ---help---
702
+ help
683703 This option compiles in the bigsmp and STA2X11 default
684704 subarchitectures. It is intended for a generic binary
685705 kernel. If you select them all, kernel will probe it one by
....@@ -699,14 +719,10 @@
699719 config STA2X11
700720 bool "STA2X11 Companion Chip Support"
701721 depends on X86_32_NON_STANDARD && PCI
702
- select ARCH_HAS_PHYS_TO_DMA
703
- select X86_DEV_DMA_OPS
704
- select X86_DMA_REMAP
705722 select SWIOTLB
706723 select MFD_STA2X11
707724 select GPIOLIB
708
- default n
709
- ---help---
725
+ help
710726 This adds support for boards based on the STA2X11 IO-Hub,
711727 a.k.a. "ConneXt". The chip is used in place of the standard
712728 PC chipset, so all "standard" peripherals are missing. If this
....@@ -716,7 +732,7 @@
716732 config X86_32_IRIS
717733 tristate "Eurobraille/Iris poweroff module"
718734 depends on X86_32
719
- ---help---
735
+ help
720736 The Iris machines from EuroBraille do not have APM or ACPI support
721737 to shut themselves down properly. A special I/O sequence is
722738 needed to do so, which is what this module does at
....@@ -730,7 +746,7 @@
730746 def_bool y
731747 prompt "Single-depth WCHAN output"
732748 depends on X86
733
- ---help---
749
+ help
734750 Calculate simpler /proc/<PID>/wchan values. If this option
735751 is disabled then wchan values will recurse back to the
736752 caller function. This provides more accurate wchan values,
....@@ -740,7 +756,7 @@
740756
741757 menuconfig HYPERVISOR_GUEST
742758 bool "Linux guest support"
743
- ---help---
759
+ help
744760 Say Y here to enable options for running Linux under various hyper-
745761 visors. This option enables basic hypervisor detection and platform
746762 setup.
....@@ -752,23 +768,26 @@
752768
753769 config PARAVIRT
754770 bool "Enable paravirtualization code"
755
- ---help---
771
+ help
756772 This changes the kernel so it can modify itself when it is run
757773 under a hypervisor, potentially improving performance significantly
758774 over full virtualization. However, when run without a hypervisor
759775 the kernel is theoretically slower and slightly larger.
760776
777
+config PARAVIRT_XXL
778
+ bool
779
+
761780 config PARAVIRT_DEBUG
762781 bool "paravirt-ops debugging"
763782 depends on PARAVIRT && DEBUG_KERNEL
764
- ---help---
783
+ help
765784 Enable to debug paravirt_ops internals. Specifically, BUG if
766785 a paravirt_op is missing when it is called.
767786
768787 config PARAVIRT_SPINLOCKS
769788 bool "Paravirtualization layer for spinlocks"
770789 depends on PARAVIRT && SMP
771
- ---help---
790
+ help
772791 Paravirtualized spinlocks allow a pvops backend to replace the
773792 spinlock implementation with something virtualization-friendly
774793 (for example, block the virtual CPU rather than spinning).
....@@ -778,13 +797,8 @@
778797
779798 If you are unsure how to answer this question, answer Y.
780799
781
-config QUEUED_LOCK_STAT
782
- bool "Paravirt queued spinlock statistics"
783
- depends on PARAVIRT_SPINLOCKS && DEBUG_FS
784
- ---help---
785
- Enable the collection of statistical data on the slowpath
786
- behavior of paravirtualized queued spinlocks and report
787
- them on debugfs.
800
+config X86_HV_CALLBACK_VECTOR
801
+ def_bool n
788802
789803 source "arch/x86/xen/Kconfig"
790804
....@@ -792,28 +806,32 @@
792806 bool "KVM Guest support (including kvmclock)"
793807 depends on PARAVIRT
794808 select PARAVIRT_CLOCK
809
+ select ARCH_CPUIDLE_HALTPOLL
810
+ select X86_HV_CALLBACK_VECTOR
795811 default y
796
- ---help---
812
+ help
797813 This option enables various optimizations for running under the KVM
798814 hypervisor. It includes a paravirtualized clock, so that instead
799815 of relying on a PIT (or probably other) emulation by the
800816 underlying device model, the host provides the guest with
801817 timing infrastructure such as time of day, and system time
802818
803
-config KVM_DEBUG_FS
804
- bool "Enable debug information for KVM Guests in debugfs"
805
- depends on KVM_GUEST && DEBUG_FS
806
- default n
807
- ---help---
808
- This option enables collection of various statistics for KVM guest.
809
- Statistics are displayed in debugfs filesystem. Enabling this option
810
- may incur significant overhead.
819
+config ARCH_CPUIDLE_HALTPOLL
820
+ def_bool n
821
+ prompt "Disable host haltpoll when loading haltpoll driver"
822
+ help
823
+ If virtualized under KVM, disable host haltpoll.
824
+
825
+config PVH
826
+ bool "Support for running PVH guests"
827
+ help
828
+ This option enables the PVH entry point for guest virtual machines
829
+ as specified in the x86/HVM direct boot ABI.
811830
812831 config PARAVIRT_TIME_ACCOUNTING
813832 bool "Paravirtual steal time accounting"
814833 depends on PARAVIRT
815
- default n
816
- ---help---
834
+ help
817835 Select this option to enable fine granularity task steal time
818836 accounting. Time spent executing other tasks in parallel with
819837 the current vCPU is discounted from the vCPU power. To account for
....@@ -828,22 +846,30 @@
828846 bool "Jailhouse non-root cell support"
829847 depends on X86_64 && PCI
830848 select X86_PM_TIMER
831
- ---help---
849
+ help
832850 This option allows to run Linux as guest in a Jailhouse non-root
833851 cell. You can leave this option disabled if you only want to start
834852 Jailhouse and run Linux afterwards in the root cell.
835853
836
-endif #HYPERVISOR_GUEST
854
+config ACRN_GUEST
855
+ bool "ACRN Guest support"
856
+ depends on X86_64
857
+ select X86_HV_CALLBACK_VECTOR
858
+ help
859
+ This option allows to run Linux as guest in the ACRN hypervisor. ACRN is
860
+ a flexible, lightweight reference open-source hypervisor, built with
861
+ real-time and safety-criticality in mind. It is built for embedded
862
+ IOT with small footprint and real-time features. More details can be
863
+ found in https://projectacrn.org/.
837864
838
-config NO_BOOTMEM
839
- def_bool y
865
+endif #HYPERVISOR_GUEST
840866
841867 source "arch/x86/Kconfig.cpu"
842868
843869 config HPET_TIMER
844870 def_bool X86_64
845871 prompt "HPET Timer Support" if X86_32
846
- ---help---
872
+ help
847873 Use the IA-PC HPET (High Precision Event Timer) to manage
848874 time in preference to the PIT and RTC, if a HPET is
849875 present.
....@@ -864,16 +890,16 @@
864890 depends on HPET_TIMER && (RTC=y || RTC=m || RTC_DRV_CMOS=m || RTC_DRV_CMOS=y)
865891
866892 config APB_TIMER
867
- def_bool y if X86_INTEL_MID
868
- prompt "Intel MID APB Timer Support" if X86_INTEL_MID
869
- select DW_APB_TIMER
870
- depends on X86_INTEL_MID && SFI
871
- help
872
- APB timer is the replacement for 8254, HPET on X86 MID platforms.
873
- The APBT provides a stable time base on SMP
874
- systems, unlike the TSC, but it is more expensive to access,
875
- as it is off-chip. APB timers are always running regardless of CPU
876
- C states, they are used as per CPU clockevent device when possible.
893
+ def_bool y if X86_INTEL_MID
894
+ prompt "Intel MID APB Timer Support" if X86_INTEL_MID
895
+ select DW_APB_TIMER
896
+ depends on X86_INTEL_MID && SFI
897
+ help
898
+ APB timer is the replacement for 8254, HPET on X86 MID platforms.
899
+ The APBT provides a stable time base on SMP
900
+ systems, unlike the TSC, but it is more expensive to access,
901
+ as it is off-chip. APB timers are always running regardless of CPU
902
+ C states, they are used as per CPU clockevent device when possible.
877903
878904 # Mark as expert because too many people got it wrong.
879905 # The code disables itself when not needed.
....@@ -881,7 +907,7 @@
881907 default y
882908 select DMI_SCAN_MACHINE_NON_EFI_FALLBACK
883909 bool "Enable DMI scanning" if EXPERT
884
- ---help---
910
+ help
885911 Enabled scanning of DMI to identify machine quirks. Say Y
886912 here unless you have verified that your setup is not
887913 affected by entries in the DMI blacklist. Required by PNP
....@@ -889,10 +915,11 @@
889915
890916 config GART_IOMMU
891917 bool "Old AMD GART IOMMU support"
918
+ select DMA_OPS
892919 select IOMMU_HELPER
893920 select SWIOTLB
894921 depends on X86_64 && PCI && AMD_NB
895
- ---help---
922
+ help
896923 Provides a driver for older AMD Athlon64/Opteron/Turion/Sempron
897924 GART based hardware IOMMUs.
898925
....@@ -909,41 +936,11 @@
909936
910937 If unsure, say Y.
911938
912
-config CALGARY_IOMMU
913
- bool "IBM Calgary IOMMU support"
914
- select IOMMU_HELPER
915
- select SWIOTLB
916
- depends on X86_64 && PCI
917
- ---help---
918
- Support for hardware IOMMUs in IBM's xSeries x366 and x460
919
- systems. Needed to run systems with more than 3GB of memory
920
- properly with 32-bit PCI devices that do not support DAC
921
- (Double Address Cycle). Calgary also supports bus level
922
- isolation, where all DMAs pass through the IOMMU. This
923
- prevents them from going anywhere except their intended
924
- destination. This catches hard-to-find kernel bugs and
925
- mis-behaving drivers and devices that do not use the DMA-API
926
- properly to set up their DMA buffers. The IOMMU can be
927
- turned off at boot time with the iommu=off parameter.
928
- Normally the kernel will make the right choice by itself.
929
- If unsure, say Y.
930
-
931
-config CALGARY_IOMMU_ENABLED_BY_DEFAULT
932
- def_bool y
933
- prompt "Should Calgary be enabled by default?"
934
- depends on CALGARY_IOMMU
935
- ---help---
936
- Should Calgary be enabled by default? if you choose 'y', Calgary
937
- will be used (if it exists). If you choose 'n', Calgary will not be
938
- used even if it exists. If you choose 'n' and would like to use
939
- Calgary anyway, pass 'iommu=calgary' on the kernel command line.
940
- If unsure, say Y.
941
-
942939 config MAXSMP
943940 bool "Enable Maximum number of SMP Processors and NUMA Nodes"
944941 depends on X86_64 && SMP && DEBUG_KERNEL
945
- select CPUMASK_OFFSTACK if !PREEMPT_RT_FULL
946
- ---help---
942
+ select CPUMASK_OFFSTACK
943
+ help
947944 Enable maximum number of CPUS and NUMA Nodes for this architecture.
948945 If unsure, say N.
949946
....@@ -977,8 +974,8 @@
977974 config NR_CPUS_RANGE_END
978975 int
979976 depends on X86_64
980
- default 8192 if SMP && ( MAXSMP || CPUMASK_OFFSTACK)
981
- default 512 if SMP && (!MAXSMP && !CPUMASK_OFFSTACK)
977
+ default 8192 if SMP && CPUMASK_OFFSTACK
978
+ default 512 if SMP && !CPUMASK_OFFSTACK
982979 default 1 if !SMP
983980
984981 config NR_CPUS_DEFAULT
....@@ -999,7 +996,7 @@
999996 int "Maximum number of CPUs" if SMP && !MAXSMP
1000997 range NR_CPUS_RANGE_BEGIN NR_CPUS_RANGE_END
1001998 default NR_CPUS_DEFAULT
1002
- ---help---
999
+ help
10031000 This allows you to specify the maximum number of CPUs which this
10041001 kernel will support. If CPUMASK_OFFSTACK is enabled, the maximum
10051002 supported value is 8192, otherwise the maximum value is 512. The
....@@ -1015,7 +1012,7 @@
10151012 def_bool y
10161013 prompt "Multi-core scheduler support"
10171014 depends on SMP
1018
- ---help---
1015
+ help
10191016 Multi-core scheduler support improves the CPU scheduler's decision
10201017 making when dealing with multi-core CPU chips at a cost of slightly
10211018 increased overhead in some places. If unsure say N here.
....@@ -1026,7 +1023,7 @@
10261023 select X86_INTEL_PSTATE
10271024 select CPU_FREQ
10281025 default y
1029
- ---help---
1026
+ help
10301027 Intel Turbo Boost Max Technology 3.0 enabled CPUs have a
10311028 core ordering determined at manufacturing time, which allows
10321029 certain cores to reach higher turbo frequencies (when running
....@@ -1042,14 +1039,14 @@
10421039 If unsure say Y here.
10431040
10441041 config UP_LATE_INIT
1045
- def_bool y
1046
- depends on !SMP && X86_LOCAL_APIC
1042
+ def_bool y
1043
+ depends on !SMP && X86_LOCAL_APIC
10471044
10481045 config X86_UP_APIC
10491046 bool "Local APIC support on uniprocessors" if !PCI_MSI
10501047 default PCI_MSI
10511048 depends on X86_32 && !SMP && !X86_32_NON_STANDARD
1052
- ---help---
1049
+ help
10531050 A local APIC (Advanced Programmable Interrupt Controller) is an
10541051 integrated interrupt controller in the CPU. If you have a single-CPU
10551052 system which has a processor with a local APIC, you can say Y here to
....@@ -1062,7 +1059,7 @@
10621059 config X86_UP_IOAPIC
10631060 bool "IO-APIC support on uniprocessors"
10641061 depends on X86_UP_APIC
1065
- ---help---
1062
+ help
10661063 An IO-APIC (I/O Advanced Programmable Interrupt Controller) is an
10671064 SMP-capable replacement for PC-style interrupt controllers. Most
10681065 SMP systems and many recent uniprocessor systems have one.
....@@ -1084,7 +1081,7 @@
10841081 config X86_REROUTE_FOR_BROKEN_BOOT_IRQS
10851082 bool "Reroute for broken boot IRQs"
10861083 depends on X86_IO_APIC
1087
- ---help---
1084
+ help
10881085 This option enables a workaround that fixes a source of
10891086 spurious interrupts. This is recommended when threaded
10901087 interrupt handling is used on systems where the generation of
....@@ -1108,7 +1105,7 @@
11081105 bool "Machine Check / overheating reporting"
11091106 select GENERIC_ALLOCATOR
11101107 default y
1111
- ---help---
1108
+ help
11121109 Machine Check support allows the processor to notify the
11131110 kernel if it detects a problem (e.g. overheating, data corruption).
11141111 The action the kernel takes depends on the severity of the problem,
....@@ -1117,7 +1114,7 @@
11171114 config X86_MCELOG_LEGACY
11181115 bool "Support for deprecated /dev/mcelog character device"
11191116 depends on X86_MCE
1120
- ---help---
1117
+ help
11211118 Enable support for /dev/mcelog which is needed by the old mcelog
11221119 userspace logging daemon. Consider switching to the new generation
11231120 rasdaemon solution.
....@@ -1126,7 +1123,7 @@
11261123 def_bool y
11271124 prompt "Intel MCE features"
11281125 depends on X86_MCE && X86_LOCAL_APIC
1129
- ---help---
1126
+ help
11301127 Additional support for intel specific MCE features such as
11311128 the thermal monitor.
11321129
....@@ -1134,14 +1131,14 @@
11341131 def_bool y
11351132 prompt "AMD MCE features"
11361133 depends on X86_MCE && X86_LOCAL_APIC && AMD_NB
1137
- ---help---
1134
+ help
11381135 Additional support for AMD specific MCE features such as
11391136 the DRAM Error Threshold.
11401137
11411138 config X86_ANCIENT_MCE
11421139 bool "Support for old Pentium 5 / WinChip machine checks"
11431140 depends on X86_32 && X86_MCE
1144
- ---help---
1141
+ help
11451142 Include support for machine check handling on old Pentium 5 or WinChip
11461143 systems. These typically need to be enabled explicitly on the command
11471144 line.
....@@ -1153,7 +1150,7 @@
11531150 config X86_MCE_INJECT
11541151 depends on X86_MCE && X86_LOCAL_APIC && DEBUG_FS
11551152 tristate "Machine check injector support"
1156
- ---help---
1153
+ help
11571154 Provide support for injecting machine checks for testing purposes.
11581155 If you don't know what a machine check is and you don't do kernel
11591156 QA it is safe to say n.
....@@ -1166,9 +1163,8 @@
11661163
11671164 config X86_LEGACY_VM86
11681165 bool "Legacy VM86 support"
1169
- default n
11701166 depends on X86_32
1171
- ---help---
1167
+ help
11721168 This option allows user programs to put the CPU into V8086
11731169 mode, which is an 80286-era approximation of 16-bit real mode.
11741170
....@@ -1193,14 +1189,14 @@
11931189 If unsure, say N here.
11941190
11951191 config VM86
1196
- bool
1197
- default X86_LEGACY_VM86
1192
+ bool
1193
+ default X86_LEGACY_VM86
11981194
11991195 config X86_16BIT
12001196 bool "Enable support for 16-bit segments" if EXPERT
12011197 default y
12021198 depends on MODIFY_LDT_SYSCALL
1203
- ---help---
1199
+ help
12041200 This option is required by programs like Wine to run 16-bit
12051201 protected mode legacy code on x86 processors. Disabling
12061202 this option saves about 300 bytes on i386, or around 6K text
....@@ -1215,10 +1211,10 @@
12151211 depends on X86_16BIT && X86_64
12161212
12171213 config X86_VSYSCALL_EMULATION
1218
- bool "Enable vsyscall emulation" if EXPERT
1219
- default y
1220
- depends on X86_64
1221
- ---help---
1214
+ bool "Enable vsyscall emulation" if EXPERT
1215
+ default y
1216
+ depends on X86_64
1217
+ help
12221218 This enables emulation of the legacy vsyscall page. Disabling
12231219 it is roughly equivalent to booting with vsyscall=none, except
12241220 that it will also disable the helpful warning if a program
....@@ -1232,10 +1228,28 @@
12321228 Disabling this option saves about 7K of kernel size and
12331229 possibly 4K of additional runtime pagetable memory.
12341230
1231
+config X86_IOPL_IOPERM
1232
+ bool "IOPERM and IOPL Emulation"
1233
+ default y
1234
+ help
1235
+ This enables the ioperm() and iopl() syscalls which are necessary
1236
+ for legacy applications.
1237
+
1238
+ Legacy IOPL support is an overbroad mechanism which allows user
1239
+ space aside of accessing all 65536 I/O ports also to disable
1240
+ interrupts. To gain this access the caller needs CAP_SYS_RAWIO
1241
+ capabilities and permission from potentially active security
1242
+ modules.
1243
+
1244
+ The emulation restricts the functionality of the syscall to
1245
+ only allowing the full range I/O port access, but prevents the
1246
+ ability to disable interrupts from user space which would be
1247
+ granted if the hardware IOPL mechanism would be used.
1248
+
12351249 config TOSHIBA
12361250 tristate "Toshiba Laptop support"
12371251 depends on X86_32
1238
- ---help---
1252
+ help
12391253 This adds a driver to safely access the System Management Mode of
12401254 the CPU on Toshiba portables with a genuine Toshiba BIOS. It does
12411255 not work on models with a Phoenix BIOS. The System Management Mode
....@@ -1250,9 +1264,10 @@
12501264
12511265 config I8K
12521266 tristate "Dell i8k legacy laptop support"
1253
- select HWMON
1267
+ depends on HWMON
1268
+ depends on PROC_FS
12541269 select SENSORS_DELL_SMM
1255
- ---help---
1270
+ help
12561271 This option enables legacy /proc/i8k userspace interface in hwmon
12571272 dell-smm-hwmon driver. Character file /proc/i8k reports bios version,
12581273 temperature and allows controlling fan speeds of Dell laptops via
....@@ -1267,7 +1282,7 @@
12671282 config X86_REBOOTFIXUPS
12681283 bool "Enable X86 board specific fixups for reboot"
12691284 depends on X86_32
1270
- ---help---
1285
+ help
12711286 This enables chipset and/or board specific fixups to be done
12721287 in order to get reboot to work correctly. This is only needed on
12731288 some combinations of hardware and BIOS. The symptom, for which
....@@ -1285,8 +1300,7 @@
12851300 bool "CPU microcode loading support"
12861301 default y
12871302 depends on CPU_SUP_AMD || CPU_SUP_INTEL
1288
- select FW_LOADER
1289
- ---help---
1303
+ help
12901304 If you say Y here, you will be able to update the microcode on
12911305 Intel and AMD processors. The Intel support is for the IA32 family,
12921306 e.g. Pentium Pro, Pentium II, Pentium III, Pentium 4, Xeon etc. The
....@@ -1295,7 +1309,7 @@
12951309 the Linux kernel.
12961310
12971311 The preferred method to load microcode from a detached initrd is described
1298
- in Documentation/x86/microcode.txt. For that you need to enable
1312
+ in Documentation/x86/microcode.rst. For that you need to enable
12991313 CONFIG_BLK_DEV_INITRD in order for the loader to be able to scan the
13001314 initrd for microcode blobs.
13011315
....@@ -1305,10 +1319,9 @@
13051319
13061320 config MICROCODE_INTEL
13071321 bool "Intel microcode loading support"
1308
- depends on MICROCODE
1322
+ depends on CPU_SUP_INTEL && MICROCODE
13091323 default MICROCODE
1310
- select FW_LOADER
1311
- ---help---
1324
+ help
13121325 This options enables microcode patch loading support for Intel
13131326 processors.
13141327
....@@ -1318,19 +1331,26 @@
13181331
13191332 config MICROCODE_AMD
13201333 bool "AMD microcode loading support"
1321
- depends on MICROCODE
1322
- select FW_LOADER
1323
- ---help---
1334
+ depends on CPU_SUP_AMD && MICROCODE
1335
+ help
13241336 If you select this option, microcode patch loading support for AMD
13251337 processors will be enabled.
13261338
13271339 config MICROCODE_OLD_INTERFACE
1328
- def_bool y
1340
+ bool "Ancient loading interface (DEPRECATED)"
1341
+ default n
13291342 depends on MICROCODE
1343
+ help
1344
+ DO NOT USE THIS! This is the ancient /dev/cpu/microcode interface
1345
+ which was used by userspace tools like iucode_tool and microcode.ctl.
1346
+ It is inadequate because it runs too late to be able to properly
1347
+ load microcode on a machine and it needs special tools. Instead, you
1348
+ should've switched to the early loading method with the initrd or
1349
+ builtin microcode by now: Documentation/x86/microcode.rst
13301350
13311351 config X86_MSR
13321352 tristate "/dev/cpu/*/msr - Model-specific register support"
1333
- ---help---
1353
+ help
13341354 This device gives privileged processes access to the x86
13351355 Model-Specific Registers (MSRs). It is a character device with
13361356 major 202 and minors 0 to 31 for /dev/cpu/0/msr to /dev/cpu/31/msr.
....@@ -1339,7 +1359,7 @@
13391359
13401360 config X86_CPUID
13411361 tristate "/dev/cpu/*/cpuid - CPU information support"
1342
- ---help---
1362
+ help
13431363 This device gives processes access to the x86 CPUID instruction to
13441364 be executed on a specific processor. It is a character device
13451365 with major 203 and minors 0 to 31 for /dev/cpu/0/cpuid to
....@@ -1352,7 +1372,7 @@
13521372
13531373 config NOHIGHMEM
13541374 bool "off"
1355
- ---help---
1375
+ help
13561376 Linux can use up to 64 Gigabytes of physical memory on x86 systems.
13571377 However, the address space of 32-bit x86 processors is only 4
13581378 Gigabytes large. That means that, if you have a large amount of
....@@ -1388,15 +1408,15 @@
13881408
13891409 config HIGHMEM4G
13901410 bool "4GB"
1391
- ---help---
1411
+ help
13921412 Select this if you have a 32-bit processor and between 1 and 4
13931413 gigabytes of physical RAM.
13941414
13951415 config HIGHMEM64G
13961416 bool "64GB"
1397
- depends on !M486 && !M586 && !M586TSC && !M586MMX && !MGEODE_LX && !MGEODEGX1 && !MCYRIXIII && !MELAN && !MWINCHIPC6 && !MWINCHIP3D && !MK6
1417
+ depends on !M486SX && !M486 && !M586 && !M586TSC && !M586MMX && !MGEODE_LX && !MGEODEGX1 && !MCYRIXIII && !MELAN && !MWINCHIPC6 && !MWINCHIP3D && !MK6
13981418 select X86_PAE
1399
- ---help---
1419
+ help
14001420 Select this if you have a 32-bit processor and more than 4
14011421 gigabytes of physical RAM.
14021422
....@@ -1406,7 +1426,7 @@
14061426 prompt "Memory split" if EXPERT
14071427 default VMSPLIT_3G
14081428 depends on X86_32
1409
- ---help---
1429
+ help
14101430 Select the desired split between kernel and user memory.
14111431
14121432 If the address range available to the kernel is less than the
....@@ -1454,7 +1474,7 @@
14541474 depends on X86_32 && !HIGHMEM4G
14551475 select PHYS_ADDR_T_64BIT
14561476 select SWIOTLB
1457
- ---help---
1477
+ help
14581478 PAE is required for NX support, and furthermore enables
14591479 larger swapspace support for non-overcommit purposes. It
14601480 has the cost of more pagetable lookup overhead, and also
....@@ -1462,10 +1482,11 @@
14621482
14631483 config X86_5LEVEL
14641484 bool "Enable 5-level page tables support"
1485
+ default y
14651486 select DYNAMIC_MEMORY_LAYOUT
14661487 select SPARSEMEM_VMEMMAP
14671488 depends on X86_64
1468
- ---help---
1489
+ help
14691490 5-level paging enables access to larger address space:
14701491 upto 128 PiB of virtual address space and 4 PiB of
14711492 physical address space.
....@@ -1475,29 +1496,38 @@
14751496 A kernel with the option enabled can be booted on machines that
14761497 support 4- or 5-level paging.
14771498
1478
- See Documentation/x86/x86_64/5level-paging.txt for more
1499
+ See Documentation/x86/x86_64/5level-paging.rst for more
14791500 information.
14801501
14811502 Say N if unsure.
14821503
14831504 config X86_DIRECT_GBPAGES
14841505 def_bool y
1485
- depends on X86_64 && !DEBUG_PAGEALLOC
1486
- ---help---
1506
+ depends on X86_64
1507
+ help
14871508 Certain kernel features effectively disable kernel
14881509 linear 1 GB mappings (even if the CPU otherwise
14891510 supports them), so don't confuse the user by printing
14901511 that we have them enabled.
14911512
1492
-config ARCH_HAS_MEM_ENCRYPT
1493
- def_bool y
1513
+config X86_CPA_STATISTICS
1514
+ bool "Enable statistic for Change Page Attribute"
1515
+ depends on DEBUG_FS
1516
+ help
1517
+ Expose statistics about the Change Page Attribute mechanism, which
1518
+ helps to determine the effectiveness of preserving large and huge
1519
+ page mappings when mapping protections are changed.
14941520
14951521 config AMD_MEM_ENCRYPT
14961522 bool "AMD Secure Memory Encryption (SME) support"
14971523 depends on X86_64 && CPU_SUP_AMD
1524
+ select DMA_COHERENT_POOL
14981525 select DYNAMIC_PHYSICAL_MASK
14991526 select ARCH_USE_MEMREMAP_PROT
1500
- ---help---
1527
+ select ARCH_HAS_FORCE_DMA_UNENCRYPTED
1528
+ select INSTRUCTION_DECODER
1529
+ select ARCH_HAS_CC_PLATFORM
1530
+ help
15011531 Say yes to enable support for the encryption of system memory.
15021532 This requires an AMD processor that supports Secure Memory
15031533 Encryption (SME).
....@@ -1505,7 +1535,7 @@
15051535 config AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT
15061536 bool "Activate AMD Secure Memory Encryption (SME) by default"
15071537 depends on AMD_MEM_ENCRYPT
1508
- ---help---
1538
+ help
15091539 Say yes to have system memory encrypted by default if running on
15101540 an AMD processor that supports Secure Memory Encryption (SME).
15111541
....@@ -1517,12 +1547,12 @@
15171547
15181548 # Common NUMA Features
15191549 config NUMA
1520
- bool "Numa Memory Allocation and Scheduler Support"
1550
+ bool "NUMA Memory Allocation and Scheduler Support"
15211551 depends on SMP
15221552 depends on X86_64 || (X86_32 && HIGHMEM64G && X86_BIGSMP)
15231553 default y if X86_BIGSMP
1524
- ---help---
1525
- Enable NUMA (Non Uniform Memory Access) support.
1554
+ help
1555
+ Enable NUMA (Non-Uniform Memory Access) support.
15261556
15271557 The kernel will try to allocate memory used by a CPU on the
15281558 local memory controller of the CPU and add some more
....@@ -1540,7 +1570,7 @@
15401570 def_bool y
15411571 prompt "Old style AMD Opteron NUMA detection"
15421572 depends on X86_64 && NUMA && PCI
1543
- ---help---
1573
+ help
15441574 Enable AMD NUMA node topology detection. You should say Y here if
15451575 you have a multi processor AMD system. This uses an old method to
15461576 read the NUMA configuration directly from the builtin Northbridge
....@@ -1552,22 +1582,13 @@
15521582 prompt "ACPI NUMA detection"
15531583 depends on X86_64 && NUMA && ACPI && PCI
15541584 select ACPI_NUMA
1555
- ---help---
1585
+ help
15561586 Enable ACPI SRAT based node topology detection.
1557
-
1558
-# Some NUMA nodes have memory ranges that span
1559
-# other nodes. Even though a pfn is valid and
1560
-# between a node's start and end pfns, it may not
1561
-# reside on that node. See memmap_init_zone()
1562
-# for details.
1563
-config NODES_SPAN_OTHER_NODES
1564
- def_bool y
1565
- depends on X86_64_ACPI_NUMA
15661587
15671588 config NUMA_EMU
15681589 bool "NUMA emulation"
15691590 depends on NUMA
1570
- ---help---
1591
+ help
15711592 Enable NUMA emulation. A flat machine will be split
15721593 into virtual nodes when booted with "numa=fake=N", where N is the
15731594 number of nodes. This is only useful for debugging.
....@@ -1579,25 +1600,13 @@
15791600 default "6" if X86_64
15801601 default "3"
15811602 depends on NEED_MULTIPLE_NODES
1582
- ---help---
1603
+ help
15831604 Specify the maximum number of NUMA Nodes available on the target
15841605 system. Increases memory reserved to accommodate various tables.
1585
-
1586
-config ARCH_HAVE_MEMORY_PRESENT
1587
- def_bool y
1588
- depends on X86_32 && DISCONTIGMEM
15891606
15901607 config ARCH_FLATMEM_ENABLE
15911608 def_bool y
15921609 depends on X86_32 && !NUMA
1593
-
1594
-config ARCH_DISCONTIGMEM_ENABLE
1595
- def_bool y
1596
- depends on NUMA && X86_32
1597
-
1598
-config ARCH_DISCONTIGMEM_DEFAULT
1599
- def_bool y
1600
- depends on NUMA && X86_32
16011610
16021611 config ARCH_SPARSEMEM_ENABLE
16031612 def_bool y
....@@ -1606,8 +1615,7 @@
16061615 select SPARSEMEM_VMEMMAP_ENABLE if X86_64
16071616
16081617 config ARCH_SPARSEMEM_DEFAULT
1609
- def_bool y
1610
- depends on X86_64
1618
+ def_bool X86_64 || (NUMA && X86_32)
16111619
16121620 config ARCH_SELECT_MEMORY_MODEL
16131621 def_bool y
....@@ -1618,7 +1626,7 @@
16181626 depends on X86_64 && MEMORY_HOTPLUG
16191627 help
16201628 This option enables a sysfs memory/probe interface for testing.
1621
- See Documentation/memory-hotplug.txt for more information.
1629
+ See Documentation/admin-guide/mm/memory-hotplug.rst for more information.
16221630 If you are unsure how to answer this question, answer N.
16231631
16241632 config ARCH_PROC_KCORE_TEXT
....@@ -1626,9 +1634,9 @@
16261634 depends on X86_64 && PROC_KCORE
16271635
16281636 config ILLEGAL_POINTER_VALUE
1629
- hex
1630
- default 0 if X86_32
1631
- default 0xdead000000000000 if X86_64
1637
+ hex
1638
+ default 0 if X86_32
1639
+ default 0xdead000000000000 if X86_64
16321640
16331641 config X86_PMEM_LEGACY_DEVICE
16341642 bool
....@@ -1638,6 +1646,7 @@
16381646 depends on PHYS_ADDR_T_64BIT
16391647 depends on BLK_DEV
16401648 select X86_PMEM_LEGACY_DEVICE
1649
+ select NUMA_KEEP_MEMINFO if NUMA
16411650 select LIBNVDIMM
16421651 help
16431652 Treat memory marked using the non-standard e820 type of 12 as used
....@@ -1650,7 +1659,7 @@
16501659 config HIGHPTE
16511660 bool "Allocate 3rd-level pagetables from highmem"
16521661 depends on HIGHMEM
1653
- ---help---
1662
+ help
16541663 The VM uses one page table entry for each page of physical memory.
16551664 For systems with a lot of RAM, this can be wasteful of precious
16561665 low memory. Setting this option will put user-space page table
....@@ -1658,7 +1667,7 @@
16581667
16591668 config X86_CHECK_BIOS_CORRUPTION
16601669 bool "Check for low memory corruption"
1661
- ---help---
1670
+ help
16621671 Periodically check for memory corruption in low memory, which
16631672 is suspected to be caused by BIOS. Even when enabled in the
16641673 configuration, it is disabled at runtime. Enable it by
....@@ -1682,7 +1691,7 @@
16821691 bool "Set the default setting of memory_corruption_check"
16831692 depends on X86_CHECK_BIOS_CORRUPTION
16841693 default y
1685
- ---help---
1694
+ help
16861695 Set whether the default state of memory_corruption_check is
16871696 on or off.
16881697
....@@ -1690,7 +1699,7 @@
16901699 int "Amount of low memory, in kilobytes, to reserve for the BIOS"
16911700 default 64
16921701 range 4 640
1693
- ---help---
1702
+ help
16941703 Specify the amount of low memory to reserve for the BIOS.
16951704
16961705 The first page contains BIOS data structures that the kernel
....@@ -1718,8 +1727,8 @@
17181727 config MATH_EMULATION
17191728 bool
17201729 depends on MODIFY_LDT_SYSCALL
1721
- prompt "Math emulation" if X86_32
1722
- ---help---
1730
+ prompt "Math emulation" if X86_32 && (M486SX || MELAN)
1731
+ help
17231732 Linux can emulate a math coprocessor (used for floating point
17241733 operations) if you don't have one. 486DX and Pentium processors have
17251734 a math coprocessor built in, 486SX and 386 do not, unless you added
....@@ -1745,7 +1754,7 @@
17451754 config MTRR
17461755 def_bool y
17471756 prompt "MTRR (Memory Type Range Register) support" if EXPERT
1748
- ---help---
1757
+ help
17491758 On Intel P6 family processors (Pentium Pro, Pentium II and later)
17501759 the Memory Type Range Registers (MTRRs) may be used to control
17511760 processor access to memory ranges. This is most useful if you have
....@@ -1775,13 +1784,13 @@
17751784 You can safely say Y even if your machine doesn't have MTRRs, you'll
17761785 just add about 9 KB to your kernel.
17771786
1778
- See <file:Documentation/x86/mtrr.txt> for more information.
1787
+ See <file:Documentation/x86/mtrr.rst> for more information.
17791788
17801789 config MTRR_SANITIZER
17811790 def_bool y
17821791 prompt "MTRR cleanup support"
17831792 depends on MTRR
1784
- ---help---
1793
+ help
17851794 Convert MTRR layout from continuous to discrete, so X drivers can
17861795 add writeback entries.
17871796
....@@ -1796,7 +1805,7 @@
17961805 range 0 1
17971806 default "0"
17981807 depends on MTRR_SANITIZER
1799
- ---help---
1808
+ help
18001809 Enable mtrr cleanup default value
18011810
18021811 config MTRR_SANITIZER_SPARE_REG_NR_DEFAULT
....@@ -1804,7 +1813,7 @@
18041813 range 0 7
18051814 default "1"
18061815 depends on MTRR_SANITIZER
1807
- ---help---
1816
+ help
18081817 mtrr cleanup spare entries default, it can be changed via
18091818 mtrr_spare_reg_nr=N on the kernel command line.
18101819
....@@ -1812,7 +1821,7 @@
18121821 def_bool y
18131822 prompt "x86 PAT support" if EXPERT
18141823 depends on MTRR
1815
- ---help---
1824
+ help
18161825 Use PAT attributes to setup page level cache control.
18171826
18181827 PATs are the modern equivalents of MTRRs and are much more
....@@ -1830,7 +1839,7 @@
18301839 config ARCH_RANDOM
18311840 def_bool y
18321841 prompt "x86 architectural random number generator" if EXPERT
1833
- ---help---
1842
+ help
18341843 Enable the x86 architectural RDRAND instruction
18351844 (Intel Bull Mountain technology) to generate random numbers.
18361845 If supported, this is a high bandwidth, cryptographically
....@@ -1839,7 +1848,7 @@
18391848 config X86_SMAP
18401849 def_bool y
18411850 prompt "Supervisor Mode Access Prevention" if EXPERT
1842
- ---help---
1851
+ help
18431852 Supervisor Mode Access Prevention (SMAP) is a security
18441853 feature in newer Intel processors. There is a small
18451854 performance cost if this enabled and turned on; there is
....@@ -1847,63 +1856,34 @@
18471856
18481857 If unsure, say Y.
18491858
1850
-config X86_INTEL_UMIP
1859
+config X86_UMIP
18511860 def_bool y
1852
- depends on CPU_SUP_INTEL
1853
- prompt "Intel User Mode Instruction Prevention" if EXPERT
1854
- ---help---
1855
- The User Mode Instruction Prevention (UMIP) is a security
1856
- feature in newer Intel processors. If enabled, a general
1857
- protection fault is issued if the SGDT, SLDT, SIDT, SMSW
1858
- or STR instructions are executed in user mode. These instructions
1859
- unnecessarily expose information about the hardware state.
1861
+ prompt "User Mode Instruction Prevention" if EXPERT
1862
+ help
1863
+ User Mode Instruction Prevention (UMIP) is a security feature in
1864
+ some x86 processors. If enabled, a general protection fault is
1865
+ issued if the SGDT, SLDT, SIDT, SMSW or STR instructions are
1866
+ executed in user mode. These instructions unnecessarily expose
1867
+ information about the hardware state.
18601868
18611869 The vast majority of applications do not use these instructions.
18621870 For the very few that do, software emulation is provided in
18631871 specific cases in protected and virtual-8086 modes. Emulated
18641872 results are dummy.
18651873
1866
-config X86_INTEL_MPX
1867
- prompt "Intel MPX (Memory Protection Extensions)"
1868
- def_bool n
1869
- # Note: only available in 64-bit mode due to VMA flags shortage
1870
- depends on CPU_SUP_INTEL && X86_64
1871
- select ARCH_USES_HIGH_VMA_FLAGS
1872
- ---help---
1873
- MPX provides hardware features that can be used in
1874
- conjunction with compiler-instrumented code to check
1875
- memory references. It is designed to detect buffer
1876
- overflow or underflow bugs.
1877
-
1878
- This option enables running applications which are
1879
- instrumented or otherwise use MPX. It does not use MPX
1880
- itself inside the kernel or to protect the kernel
1881
- against bad memory references.
1882
-
1883
- Enabling this option will make the kernel larger:
1884
- ~8k of kernel text and 36 bytes of data on a 64-bit
1885
- defconfig. It adds a long to the 'mm_struct' which
1886
- will increase the kernel memory overhead of each
1887
- process and adds some branches to paths used during
1888
- exec() and munmap().
1889
-
1890
- For details, see Documentation/x86/intel_mpx.txt
1891
-
1892
- If unsure, say N.
1893
-
18941874 config X86_INTEL_MEMORY_PROTECTION_KEYS
1895
- prompt "Intel Memory Protection Keys"
1875
+ prompt "Memory Protection Keys"
18961876 def_bool y
18971877 # Note: only available in 64-bit mode
1898
- depends on CPU_SUP_INTEL && X86_64
1878
+ depends on X86_64 && (CPU_SUP_INTEL || CPU_SUP_AMD)
18991879 select ARCH_USES_HIGH_VMA_FLAGS
19001880 select ARCH_HAS_PKEYS
1901
- ---help---
1881
+ help
19021882 Memory Protection Keys provides a mechanism for enforcing
19031883 page-based protections, but without requiring modification of the
19041884 page tables when an application changes protection domains.
19051885
1906
- For details, see Documentation/x86/protection-keys.txt
1886
+ For details, see Documentation/core-api/protection-keys.rst
19071887
19081888 If unsure, say y.
19091889
....@@ -1958,7 +1938,7 @@
19581938 select UCS2_STRING
19591939 select EFI_RUNTIME_WRAPPERS
19601940 select ARCH_USE_MEMREMAP_PROT
1961
- ---help---
1941
+ help
19621942 This enables the kernel to use EFI runtime services that are
19631943 available (such as the EFI variable services).
19641944
....@@ -1970,19 +1950,19 @@
19701950 platforms.
19711951
19721952 config EFI_STUB
1973
- bool "EFI stub support"
1974
- depends on EFI && !X86_USE_3DNOW
1975
- select RELOCATABLE
1976
- ---help---
1977
- This kernel feature allows a bzImage to be loaded directly
1953
+ bool "EFI stub support"
1954
+ depends on EFI && !X86_USE_3DNOW
1955
+ select RELOCATABLE
1956
+ help
1957
+ This kernel feature allows a bzImage to be loaded directly
19781958 by EFI firmware without the use of a bootloader.
19791959
1980
- See Documentation/efi-stub.txt for more information.
1960
+ See Documentation/admin-guide/efi-stub.rst for more information.
19811961
19821962 config EFI_MIXED
19831963 bool "EFI mixed-mode support"
19841964 depends on EFI_STUB && X86_64
1985
- ---help---
1965
+ help
19861966 Enabling this feature allows a 64-bit kernel to be booted
19871967 on a 32-bit firmware, provided that your CPU supports 64-bit
19881968 mode.
....@@ -1993,28 +1973,12 @@
19931973
19941974 If unsure, say N.
19951975
1996
-config SECCOMP
1997
- def_bool y
1998
- prompt "Enable seccomp to safely compute untrusted bytecode"
1999
- ---help---
2000
- This kernel feature is useful for number crunching applications
2001
- that may need to compute untrusted bytecode during their
2002
- execution. By using pipes or other transports made available to
2003
- the process as file descriptors supporting the read/write
2004
- syscalls, it's possible to isolate those applications in
2005
- their own address space using seccomp. Once seccomp is
2006
- enabled via prctl(PR_SET_SECCOMP), it cannot be disabled
2007
- and the task is only allowed to execute a few safe syscalls
2008
- defined by each seccomp mode.
2009
-
2010
- If unsure, say Y. Only embedded should say N here.
2011
-
2012
-source kernel/Kconfig.hz
1976
+source "kernel/Kconfig.hz"
20131977
20141978 config KEXEC
20151979 bool "kexec system call"
20161980 select KEXEC_CORE
2017
- ---help---
1981
+ help
20181982 kexec is a system call that implements the ability to shutdown your
20191983 current kernel, and to start another kernel. It is like a reboot
20201984 but it is independent of the system firmware. And like a reboot
....@@ -2035,7 +1999,7 @@
20351999 depends on X86_64
20362000 depends on CRYPTO=y
20372001 depends on CRYPTO_SHA256=y
2038
- ---help---
2002
+ help
20392003 This is new version of kexec system call. This system call is
20402004 file based and takes file descriptors as system call argument
20412005 for kernel and initramfs as opposed to list of segments as
....@@ -2044,29 +2008,39 @@
20442008 config ARCH_HAS_KEXEC_PURGATORY
20452009 def_bool KEXEC_FILE
20462010
2047
-config KEXEC_VERIFY_SIG
2011
+config KEXEC_SIG
20482012 bool "Verify kernel signature during kexec_file_load() syscall"
20492013 depends on KEXEC_FILE
2050
- ---help---
2051
- This option makes kernel signature verification mandatory for
2052
- the kexec_file_load() syscall.
2014
+ help
20532015
2054
- In addition to that option, you need to enable signature
2016
+ This option makes the kexec_file_load() syscall check for a valid
2017
+ signature of the kernel image. The image can still be loaded without
2018
+ a valid signature unless you also enable KEXEC_SIG_FORCE, though if
2019
+ there's a signature that we can check, then it must be valid.
2020
+
2021
+ In addition to this option, you need to enable signature
20552022 verification for the corresponding kernel image type being
20562023 loaded in order for this to work.
20572024
2025
+config KEXEC_SIG_FORCE
2026
+ bool "Require a valid signature in kexec_file_load() syscall"
2027
+ depends on KEXEC_SIG
2028
+ help
2029
+ This option makes kernel signature verification mandatory for
2030
+ the kexec_file_load() syscall.
2031
+
20582032 config KEXEC_BZIMAGE_VERIFY_SIG
20592033 bool "Enable bzImage signature verification support"
2060
- depends on KEXEC_VERIFY_SIG
2034
+ depends on KEXEC_SIG
20612035 depends on SIGNED_PE_FILE_VERIFICATION
20622036 select SYSTEM_TRUSTED_KEYRING
2063
- ---help---
2037
+ help
20642038 Enable bzImage signature verification support.
20652039
20662040 config CRASH_DUMP
20672041 bool "kernel crash dumps"
20682042 depends on X86_64 || (X86_32 && HIGHMEM)
2069
- ---help---
2043
+ help
20702044 Generate crash dump after being started by kexec.
20712045 This should be normally only set in special crash dump kernels
20722046 which are loaded in the main kernel with kexec-tools into
....@@ -2075,19 +2049,19 @@
20752049 to a memory address not used by the main kernel or BIOS using
20762050 PHYSICAL_START, or it must be built as a relocatable image
20772051 (CONFIG_RELOCATABLE=y).
2078
- For more details see Documentation/kdump/kdump.txt
2052
+ For more details see Documentation/admin-guide/kdump/kdump.rst
20792053
20802054 config KEXEC_JUMP
20812055 bool "kexec jump"
20822056 depends on KEXEC && HIBERNATION
2083
- ---help---
2057
+ help
20842058 Jump between original kernel and kexeced kernel and invoke
20852059 code in physical address mode via KEXEC
20862060
20872061 config PHYSICAL_START
20882062 hex "Physical address where the kernel is loaded" if (EXPERT || CRASH_DUMP)
20892063 default "0x1000000"
2090
- ---help---
2064
+ help
20912065 This gives the physical address where the kernel is loaded.
20922066
20932067 If kernel is a not relocatable (CONFIG_RELOCATABLE=n) then
....@@ -2112,7 +2086,7 @@
21122086 the reserved region. In other words, it can be set based on
21132087 the "X" value as specified in the "crashkernel=YM@XM"
21142088 command line boot parameter passed to the panic-ed
2115
- kernel. Please take a look at Documentation/kdump/kdump.txt
2089
+ kernel. Please take a look at Documentation/admin-guide/kdump/kdump.rst
21162090 for more details about crash dumps.
21172091
21182092 Usage of bzImage for capturing the crash dump is recommended as
....@@ -2128,7 +2102,7 @@
21282102 config RELOCATABLE
21292103 bool "Build a relocatable kernel"
21302104 default y
2131
- ---help---
2105
+ help
21322106 This builds a kernel image that retains relocation information
21332107 so it can be loaded someplace besides the default 1MB.
21342108 The relocations tend to make the kernel binary about 10% larger,
....@@ -2146,7 +2120,7 @@
21462120 bool "Randomize the address of the kernel image (KASLR)"
21472121 depends on RELOCATABLE
21482122 default y
2149
- ---help---
2123
+ help
21502124 In support of Kernel Address Space Layout Randomization (KASLR),
21512125 this randomizes the physical address at which the kernel image
21522126 is decompressed and the virtual address where the kernel
....@@ -2187,7 +2161,7 @@
21872161 default "0x200000"
21882162 range 0x2000 0x1000000 if X86_32
21892163 range 0x200000 0x1000000 if X86_64
2190
- ---help---
2164
+ help
21912165 This value puts the alignment restrictions on physical address
21922166 where kernel is loaded and run from. Kernel is compiled for an
21932167 address which meets above alignment restriction.
....@@ -2211,7 +2185,7 @@
22112185
22122186 config DYNAMIC_MEMORY_LAYOUT
22132187 bool
2214
- ---help---
2188
+ help
22152189 This option makes base addresses of vmalloc and vmemmap as well as
22162190 __PAGE_OFFSET movable during boot.
22172191
....@@ -2221,7 +2195,7 @@
22212195 depends on RANDOMIZE_BASE
22222196 select DYNAMIC_MEMORY_LAYOUT
22232197 default RANDOMIZE_BASE
2224
- ---help---
2198
+ help
22252199 Randomizes the base virtual address of kernel memory sections
22262200 (physical memory mapping, vmalloc & vmemmap). This security feature
22272201 makes exploits relying on predictable memory locations less reliable.
....@@ -2240,7 +2214,7 @@
22402214 default "0x0"
22412215 range 0x1 0x40 if MEMORY_HOTPLUG
22422216 range 0x0 0x40
2243
- ---help---
2217
+ help
22442218 Define the padding in terabytes added to the existing physical
22452219 memory size during kernel memory randomization. It is useful
22462220 for memory hotplug support but reduces the entropy available for
....@@ -2254,9 +2228,8 @@
22542228
22552229 config BOOTPARAM_HOTPLUG_CPU0
22562230 bool "Set default setting of cpu0_hotpluggable"
2257
- default n
22582231 depends on HOTPLUG_CPU
2259
- ---help---
2232
+ help
22602233 Set whether default state of cpu0_hotpluggable is on or off.
22612234
22622235 Say Y here to enable CPU0 hotplug by default. If this switch
....@@ -2285,7 +2258,7 @@
22852258 def_bool n
22862259 prompt "Debug CPU0 hotplug"
22872260 depends on HOTPLUG_CPU
2288
- ---help---
2261
+ help
22892262 Enabling this option offlines CPU0 (if CPU0 can be offlined) as
22902263 soon as possible and boots up userspace with CPU0 offlined. User
22912264 can online CPU0 back after boot time.
....@@ -2300,7 +2273,7 @@
23002273 def_bool n
23012274 prompt "Disable the 32-bit vDSO (needed for glibc 2.3.3)"
23022275 depends on COMPAT_32
2303
- ---help---
2276
+ help
23042277 Certain buggy versions of glibc will crash if they are
23052278 presented with a 32-bit vDSO that is not mapped at the address
23062279 indicated in its segment table.
....@@ -2324,7 +2297,7 @@
23242297 choice
23252298 prompt "vsyscall table for legacy applications"
23262299 depends on X86_64
2327
- default LEGACY_VSYSCALL_EMULATE
2300
+ default LEGACY_VSYSCALL_XONLY
23282301 help
23292302 Legacy user code that does not know how to find the vDSO expects
23302303 to be able to issue three syscalls by calling fixed addresses in
....@@ -2332,23 +2305,38 @@
23322305 it can be used to assist security vulnerability exploitation.
23332306
23342307 This setting can be changed at boot time via the kernel command
2335
- line parameter vsyscall=[emulate|none].
2308
+ line parameter vsyscall=[emulate|xonly|none].
23362309
23372310 On a system with recent enough glibc (2.14 or newer) and no
23382311 static binaries, you can say None without a performance penalty
23392312 to improve security.
23402313
2341
- If unsure, select "Emulate".
2314
+ If unsure, select "Emulate execution only".
23422315
23432316 config LEGACY_VSYSCALL_EMULATE
2344
- bool "Emulate"
2317
+ bool "Full emulation"
23452318 help
2346
- The kernel traps and emulates calls into the fixed
2347
- vsyscall address mapping. This makes the mapping
2348
- non-executable, but it still contains known contents,
2349
- which could be used in certain rare security vulnerability
2350
- exploits. This configuration is recommended when userspace
2351
- still uses the vsyscall area.
2319
+ The kernel traps and emulates calls into the fixed vsyscall
2320
+ address mapping. This makes the mapping non-executable, but
2321
+ it still contains readable known contents, which could be
2322
+ used in certain rare security vulnerability exploits. This
2323
+ configuration is recommended when using legacy userspace
2324
+ that still uses vsyscalls along with legacy binary
2325
+ instrumentation tools that require code to be readable.
2326
+
2327
+ An example of this type of legacy userspace is running
2328
+ Pin on an old binary that still uses vsyscalls.
2329
+
2330
+ config LEGACY_VSYSCALL_XONLY
2331
+ bool "Emulate execution only"
2332
+ help
2333
+ The kernel traps and emulates calls into the fixed vsyscall
2334
+ address mapping and does not allow reads. This
2335
+ configuration is recommended when userspace might use the
2336
+ legacy vsyscall area but support for legacy binary
2337
+ instrumentation of legacy code is not needed. It mitigates
2338
+ certain uses of the vsyscall area as an ASLR-bypassing
2339
+ buffer.
23522340
23532341 config LEGACY_VSYSCALL_NONE
23542342 bool "None"
....@@ -2363,7 +2351,7 @@
23632351
23642352 config CMDLINE_BOOL
23652353 bool "Built-in kernel command line"
2366
- ---help---
2354
+ help
23672355 Allow for specifying boot arguments to the kernel at
23682356 build time. On some systems (e.g. embedded ones), it is
23692357 necessary or convenient to provide some or all of the
....@@ -2381,7 +2369,7 @@
23812369 string "Built-in kernel command string"
23822370 depends on CMDLINE_BOOL
23832371 default ""
2384
- ---help---
2372
+ help
23852373 Enter arguments here that should be compiled into the kernel
23862374 image and used at boot time. If the boot loader provides a
23872375 command line at boot time, it is appended to this string to
....@@ -2396,8 +2384,8 @@
23962384
23972385 config CMDLINE_OVERRIDE
23982386 bool "Built-in command line overrides boot loader arguments"
2399
- depends on CMDLINE_BOOL
2400
- ---help---
2387
+ depends on CMDLINE_BOOL && CMDLINE != ""
2388
+ help
24012389 Set this option to 'Y' to have the kernel ignore the boot loader
24022390 command line, and use ONLY the built-in command line.
24032391
....@@ -2407,7 +2395,7 @@
24072395 config MODIFY_LDT_SYSCALL
24082396 bool "Enable the LDT (local descriptor table)" if EXPERT
24092397 default y
2410
- ---help---
2398
+ help
24112399 Linux can allow user programs to install a per-process x86
24122400 Local Descriptor Table (LDT) using the modify_ldt(2) system
24132401 call. This is required to run 16-bit or segmented code such as
....@@ -2423,6 +2411,88 @@
24232411 source "kernel/livepatch/Kconfig"
24242412
24252413 endmenu
2414
+
2415
+config CC_HAS_SLS
2416
+ def_bool $(cc-option,-mharden-sls=all)
2417
+
2418
+config CC_HAS_RETURN_THUNK
2419
+ def_bool $(cc-option,-mfunction-return=thunk-extern)
2420
+
2421
+menuconfig SPECULATION_MITIGATIONS
2422
+ bool "Mitigations for speculative execution vulnerabilities"
2423
+ default y
2424
+ help
2425
+ Say Y here to enable options which enable mitigations for
2426
+ speculative execution hardware vulnerabilities.
2427
+
2428
+ If you say N, all mitigations will be disabled. You really
2429
+ should know what you are doing to say so.
2430
+
2431
+if SPECULATION_MITIGATIONS
2432
+
2433
+config PAGE_TABLE_ISOLATION
2434
+ bool "Remove the kernel mapping in user mode"
2435
+ default y
2436
+ depends on (X86_64 || X86_PAE)
2437
+ help
2438
+ This feature reduces the number of hardware side channels by
2439
+ ensuring that the majority of kernel addresses are not mapped
2440
+ into userspace.
2441
+
2442
+ See Documentation/x86/pti.rst for more details.
2443
+
2444
+config RETPOLINE
2445
+ bool "Avoid speculative indirect branches in kernel"
2446
+ default y
2447
+ help
2448
+ Compile kernel with the retpoline compiler options to guard against
2449
+ kernel-to-user data leaks by avoiding speculative indirect
2450
+ branches. Requires a compiler with -mindirect-branch=thunk-extern
2451
+ support for full protection. The kernel may run slower.
2452
+
2453
+config RETHUNK
2454
+ bool "Enable return-thunks"
2455
+ depends on RETPOLINE && CC_HAS_RETURN_THUNK
2456
+ default y if X86_64
2457
+ help
2458
+ Compile the kernel with the return-thunks compiler option to guard
2459
+ against kernel-to-user data leaks by avoiding return speculation.
2460
+ Requires a compiler with -mfunction-return=thunk-extern
2461
+ support for full protection. The kernel may run slower.
2462
+
2463
+config CPU_UNRET_ENTRY
2464
+ bool "Enable UNRET on kernel entry"
2465
+ depends on CPU_SUP_AMD && RETHUNK && X86_64
2466
+ default y
2467
+ help
2468
+ Compile the kernel with support for the retbleed=unret mitigation.
2469
+
2470
+config CPU_IBPB_ENTRY
2471
+ bool "Enable IBPB on kernel entry"
2472
+ depends on CPU_SUP_AMD && X86_64
2473
+ default y
2474
+ help
2475
+ Compile the kernel with support for the retbleed=ibpb mitigation.
2476
+
2477
+config CPU_IBRS_ENTRY
2478
+ bool "Enable IBRS on kernel entry"
2479
+ depends on CPU_SUP_INTEL && X86_64
2480
+ default y
2481
+ help
2482
+ Compile the kernel with support for the spectre_v2=ibrs mitigation.
2483
+ This mitigates both spectre_v2 and retbleed at great cost to
2484
+ performance.
2485
+
2486
+config SLS
2487
+ bool "Mitigate Straight-Line-Speculation"
2488
+ depends on CC_HAS_SLS && X86_64
2489
+ default n
2490
+ help
2491
+ Compile the kernel with straight-line-speculation options to guard
2492
+ against straight line speculation. The kernel image might be slightly
2493
+ larger.
2494
+
2495
+endif
24262496
24272497 config ARCH_HAS_ADD_PAGES
24282498 def_bool y
....@@ -2456,7 +2526,7 @@
24562526
24572527 config ARCH_HIBERNATION_HEADER
24582528 def_bool y
2459
- depends on X86_64 && HIBERNATION
2529
+ depends on HIBERNATION
24602530
24612531 source "kernel/power/Kconfig"
24622532
....@@ -2471,7 +2541,7 @@
24712541 menuconfig APM
24722542 tristate "APM (Advanced Power Management) BIOS support"
24732543 depends on X86_32 && PM_SLEEP
2474
- ---help---
2544
+ help
24752545 APM is a BIOS specification for saving power using several different
24762546 techniques. This is mostly useful for battery powered laptops with
24772547 APM compliant BIOSes. If you say Y here, the system time will be
....@@ -2486,7 +2556,7 @@
24862556 machines with more than one CPU.
24872557
24882558 In order to use APM, you will need supporting software. For location
2489
- and more information, read <file:Documentation/power/apm-acpi.txt>
2559
+ and more information, read <file:Documentation/power/apm-acpi.rst>
24902560 and the Battery Powered Linux mini-HOWTO, available from
24912561 <http://www.tldp.org/docs.html#howto>.
24922562
....@@ -2531,14 +2601,14 @@
25312601
25322602 config APM_IGNORE_USER_SUSPEND
25332603 bool "Ignore USER SUSPEND"
2534
- ---help---
2604
+ help
25352605 This option will ignore USER SUSPEND requests. On machines with a
25362606 compliant APM BIOS, you want to say N. However, on the NEC Versa M
25372607 series notebooks, it is necessary to say Y because of a BIOS bug.
25382608
25392609 config APM_DO_ENABLE
25402610 bool "Enable PM at boot time"
2541
- ---help---
2611
+ help
25422612 Enable APM features at boot time. From page 36 of the APM BIOS
25432613 specification: "When disabled, the APM BIOS does not automatically
25442614 power manage devices, enter the Standby State, enter the Suspend
....@@ -2556,7 +2626,7 @@
25562626 config APM_CPU_IDLE
25572627 depends on CPU_IDLE
25582628 bool "Make CPU Idle calls when idle"
2559
- ---help---
2629
+ help
25602630 Enable calls to APM CPU Idle/CPU Busy inside the kernel's idle loop.
25612631 On some machines, this can activate improved power savings, such as
25622632 a slowed CPU clock rate, when the machine is idle. These idle calls
....@@ -2567,7 +2637,7 @@
25672637
25682638 config APM_DISPLAY_BLANK
25692639 bool "Enable console blanking using APM"
2570
- ---help---
2640
+ help
25712641 Enable console blanking using the APM. Some laptops can use this to
25722642 turn off the LCD backlight when the screen blanker of the Linux
25732643 virtual console blanks the screen. Note that this is only used by
....@@ -2580,7 +2650,7 @@
25802650
25812651 config APM_ALLOW_INTS
25822652 bool "Allow interrupts during APM BIOS calls"
2583
- ---help---
2653
+ help
25842654 Normally we disable external interrupts while we are making calls to
25852655 the APM BIOS as a measure to lessen the effects of a badly behaving
25862656 BIOS implementation. The BIOS should reenable interrupts if it
....@@ -2601,20 +2671,11 @@
26012671
26022672 menu "Bus options (PCI etc.)"
26032673
2604
-config PCI
2605
- bool "PCI support"
2606
- default y
2607
- ---help---
2608
- Find out whether you have a PCI motherboard. PCI is the name of a
2609
- bus system, i.e. the way the CPU talks to the other stuff inside
2610
- your box. Other bus systems are ISA, EISA, MicroChannel (MCA) or
2611
- VESA. If you have PCI, say Y, otherwise N.
2612
-
26132674 choice
26142675 prompt "PCI access mode"
26152676 depends on X86_32 && PCI
26162677 default PCI_GOANY
2617
- ---help---
2678
+ help
26182679 On PCI systems, the BIOS can be used to detect the PCI devices and
26192680 determine their configuration. However, some old PCI motherboards
26202681 have BIOS bugs and may crash if this is done. Also, some embedded
....@@ -2671,10 +2732,6 @@
26712732 depends on PCI && XEN
26722733 select SWIOTLB_XEN
26732734
2674
-config PCI_DOMAINS
2675
- def_bool y
2676
- depends on PCI
2677
-
26782735 config MMCONF_FAM10H
26792736 def_bool y
26802737 depends on X86_64 && PCI_MMCONFIG && ACPI
....@@ -2691,8 +2748,6 @@
26912748 is known to be incomplete.
26922749
26932750 You should say N unless you know you need this.
2694
-
2695
-source "drivers/pci/Kconfig"
26962751
26972752 config ISA_BUS
26982753 bool "ISA bus support on modern systems" if EXPERT
....@@ -2717,34 +2772,16 @@
27172772
27182773 config ISA
27192774 bool "ISA support"
2720
- ---help---
2775
+ help
27212776 Find out whether you have ISA slots on your motherboard. ISA is the
27222777 name of a bus system, i.e. the way the CPU talks to the other stuff
27232778 inside your box. Other bus systems are PCI, EISA, MicroChannel
27242779 (MCA) or VESA. ISA is an older system, now being displaced by PCI;
27252780 newer boards don't support it. If you have ISA, say Y, otherwise N.
27262781
2727
-config EISA
2728
- bool "EISA support"
2729
- depends on ISA
2730
- ---help---
2731
- The Extended Industry Standard Architecture (EISA) bus was
2732
- developed as an open alternative to the IBM MicroChannel bus.
2733
-
2734
- The EISA bus provided some of the features of the IBM MicroChannel
2735
- bus while maintaining backward compatibility with cards made for
2736
- the older ISA bus. The EISA bus saw limited use between 1988 and
2737
- 1995 when it was made obsolete by the PCI bus.
2738
-
2739
- Say Y here if you are building a kernel for an EISA-based machine.
2740
-
2741
- Otherwise, say N.
2742
-
2743
-source "drivers/eisa/Kconfig"
2744
-
27452782 config SCx200
27462783 tristate "NatSemi SCx200 support"
2747
- ---help---
2784
+ help
27482785 This provides basic support for National Semiconductor's
27492786 (now AMD's) Geode processors. The driver probes for the
27502787 PCI-IDs of several on-chip devices, so its a good dependency
....@@ -2756,7 +2793,7 @@
27562793 tristate "NatSemi SCx200 27MHz High-Resolution Timer Support"
27572794 depends on SCx200
27582795 default y
2759
- ---help---
2796
+ help
27602797 This driver provides a clocksource built upon the on-chip
27612798 27MHz high-resolution timer. Its also a workaround for
27622799 NSC Geode SC-1100's buggy TSC, which loses time when the
....@@ -2770,20 +2807,21 @@
27702807 select OF
27712808 select OF_PROMTREE
27722809 select IRQ_DOMAIN
2773
- ---help---
2810
+ select OLPC_EC
2811
+ help
27742812 Add support for detecting the unique features of the OLPC
27752813 XO hardware.
27762814
27772815 config OLPC_XO1_PM
27782816 bool "OLPC XO-1 Power Management"
27792817 depends on OLPC && MFD_CS5535=y && PM_SLEEP
2780
- ---help---
2818
+ help
27812819 Add support for poweroff and suspend of the OLPC XO-1 laptop.
27822820
27832821 config OLPC_XO1_RTC
27842822 bool "OLPC XO-1 Real Time Clock"
27852823 depends on OLPC_XO1_PM && RTC_DRV_CMOS
2786
- ---help---
2824
+ help
27872825 Add support for the XO-1 real time clock, which can be used as a
27882826 programmable wakeup source.
27892827
....@@ -2792,7 +2830,7 @@
27922830 depends on OLPC && OLPC_XO1_PM && GPIO_CS5535=y
27932831 depends on INPUT=y
27942832 select POWER_SUPPLY
2795
- ---help---
2833
+ help
27962834 Add support for SCI-based features of the OLPC XO-1 laptop:
27972835 - EC-driven system wakeups
27982836 - Power button
....@@ -2805,7 +2843,7 @@
28052843 bool "OLPC XO-1.5 SCI extras"
28062844 depends on OLPC && ACPI
28072845 select POWER_SUPPLY
2808
- ---help---
2846
+ help
28092847 Add support for SCI-based features of the OLPC XO-1.5 laptop:
28102848 - EC-driven system wakeups
28112849 - AC adapter status updates
....@@ -2814,7 +2852,7 @@
28142852 config ALIX
28152853 bool "PCEngines ALIX System Support (LED setup)"
28162854 select GPIOLIB
2817
- ---help---
2855
+ help
28182856 This option enables system support for the PCEngines ALIX.
28192857 At present this just sets up LEDs for GPIO control on
28202858 ALIX2/3/6 boards. However, other system specific setup should
....@@ -2828,14 +2866,14 @@
28282866 config NET5501
28292867 bool "Soekris Engineering net5501 System Support (LEDS, GPIO, etc)"
28302868 select GPIOLIB
2831
- ---help---
2869
+ help
28322870 This option enables system support for the Soekris Engineering net5501.
28332871
28342872 config GEOS
28352873 bool "Traverse Technologies GEOS System Support (LEDS, GPIO, etc)"
28362874 select GPIOLIB
28372875 depends on DMI
2838
- ---help---
2876
+ help
28392877 This option enables system support for the Traverse Technologies GEOS.
28402878
28412879 config TS5500
....@@ -2844,7 +2882,7 @@
28442882 select CHECK_SIGNATURE
28452883 select NEW_LEDS
28462884 select LEDS_CLASS
2847
- ---help---
2885
+ help
28482886 This option enables system support for the Technologic Systems TS-5500.
28492887
28502888 endif # X86_32
....@@ -2852,18 +2890,6 @@
28522890 config AMD_NB
28532891 def_bool y
28542892 depends on CPU_SUP_AMD && PCI
2855
-
2856
-source "drivers/pcmcia/Kconfig"
2857
-
2858
-config RAPIDIO
2859
- tristate "RapidIO support"
2860
- depends on PCI
2861
- default n
2862
- help
2863
- If enabled this option will include drivers and the core
2864
- infrastructure code to support RapidIO interconnect devices.
2865
-
2866
-source "drivers/rapidio/Kconfig"
28672893
28682894 config X86_SYSFB
28692895 bool "Mark VGA/VBE/EFI FB as generic system framebuffer"
....@@ -2903,7 +2929,7 @@
29032929 select BINFMT_ELF
29042930 select COMPAT_BINFMT_ELF
29052931 select COMPAT_OLD_SIGACTION
2906
- ---help---
2932
+ help
29072933 Include code to run legacy 32-bit programs under a
29082934 64-bit kernel. You should likely turn this on, unless you're
29092935 100% sure that you don't have any 32-bit programs left.
....@@ -2911,13 +2937,19 @@
29112937 config IA32_AOUT
29122938 tristate "IA32 a.out support"
29132939 depends on IA32_EMULATION
2914
- ---help---
2940
+ depends on BROKEN
2941
+ help
29152942 Support old a.out binaries in the 32bit emulation.
29162943
29172944 config X86_X32
29182945 bool "x32 ABI for 64-bit mode"
29192946 depends on X86_64
2920
- ---help---
2947
+ # llvm-objcopy does not convert x86_64 .note.gnu.property or
2948
+ # compressed debug sections to x86_x32 properly:
2949
+ # https://github.com/ClangBuiltLinux/linux/issues/514
2950
+ # https://github.com/ClangBuiltLinux/linux/issues/1141
2951
+ depends on $(success,$(OBJCOPY) --version | head -n1 | grep -qv llvm)
2952
+ help
29212953 Include code to run binaries for the x32 native 32-bit ABI
29222954 for 64-bit processors. An x32 process gets access to the
29232955 full 64-bit register file and wide data path while leaving
....@@ -2953,17 +2985,8 @@
29532985 def_bool y
29542986 depends on X86_32
29552987
2956
-config X86_DEV_DMA_OPS
2957
- bool
2958
- depends on X86_64 || STA2X11
2959
-
2960
-config X86_DMA_REMAP
2961
- bool
2962
- depends on STA2X11
2963
-
2964
-config HAVE_GENERIC_GUP
2965
- def_bool y
2966
-
29672988 source "drivers/firmware/Kconfig"
29682989
29692990 source "arch/x86/kvm/Kconfig"
2991
+
2992
+source "arch/x86/Kconfig.assembler"