1fb32e03fSMathieu Desnoyers# 2fb32e03fSMathieu Desnoyers# General architecture dependent options 3fb32e03fSMathieu Desnoyers# 4125e5645SMathieu Desnoyers 5*2965faa5SDave Youngconfig KEXEC_CORE 6*2965faa5SDave Young bool 7*2965faa5SDave Young 8125e5645SMathieu Desnoyersconfig OPROFILE 9b309a294SRobert Richter tristate "OProfile system profiling" 10125e5645SMathieu Desnoyers depends on PROFILING 11125e5645SMathieu Desnoyers depends on HAVE_OPROFILE 12d69d59f4SIngo Molnar select RING_BUFFER 139a5963ebSChristian Borntraeger select RING_BUFFER_ALLOW_SWAP 14125e5645SMathieu Desnoyers help 15125e5645SMathieu Desnoyers OProfile is a profiling system capable of profiling the 16125e5645SMathieu Desnoyers whole system, include the kernel, kernel modules, libraries, 17125e5645SMathieu Desnoyers and applications. 18125e5645SMathieu Desnoyers 19125e5645SMathieu Desnoyers If unsure, say N. 20125e5645SMathieu Desnoyers 214d4036e0SJason Yehconfig OPROFILE_EVENT_MULTIPLEX 224d4036e0SJason Yeh bool "OProfile multiplexing support (EXPERIMENTAL)" 234d4036e0SJason Yeh default n 244d4036e0SJason Yeh depends on OPROFILE && X86 254d4036e0SJason Yeh help 264d4036e0SJason Yeh The number of hardware counters is limited. The multiplexing 274d4036e0SJason Yeh feature enables OProfile to gather more events than counters 284d4036e0SJason Yeh are provided by the hardware. This is realized by switching 294d4036e0SJason Yeh between events at an user specified time interval. 304d4036e0SJason Yeh 314d4036e0SJason Yeh If unsure, say N. 324d4036e0SJason Yeh 33125e5645SMathieu Desnoyersconfig HAVE_OPROFILE 349ba16087SJan Beulich bool 35125e5645SMathieu Desnoyers 36dcfce4a0SRobert Richterconfig OPROFILE_NMI_TIMER 37dcfce4a0SRobert Richter def_bool y 38af9feebeSAnton Blanchard depends on PERF_EVENTS && HAVE_PERF_EVENTS_NMI && !PPC64 39dcfce4a0SRobert Richter 40125e5645SMathieu Desnoyersconfig KPROBES 41125e5645SMathieu Desnoyers bool "Kprobes" 4205ed160eSMasami Hiramatsu depends on MODULES 43125e5645SMathieu Desnoyers depends on HAVE_KPROBES 4405ed160eSMasami Hiramatsu select KALLSYMS 45125e5645SMathieu Desnoyers help 46125e5645SMathieu Desnoyers Kprobes allows you to trap at almost any kernel address and 47125e5645SMathieu Desnoyers execute a callback function. register_kprobe() establishes 48125e5645SMathieu Desnoyers a probepoint and specifies the callback. Kprobes is useful 49125e5645SMathieu Desnoyers for kernel debugging, non-intrusive instrumentation and testing. 50125e5645SMathieu Desnoyers If in doubt, say "N". 51125e5645SMathieu Desnoyers 5245f81b1cSSteven Rostedtconfig JUMP_LABEL 53c5905afbSIngo Molnar bool "Optimize very unlikely/likely branches" 5445f81b1cSSteven Rostedt depends on HAVE_ARCH_JUMP_LABEL 5545f81b1cSSteven Rostedt help 56c5905afbSIngo Molnar This option enables a transparent branch optimization that 57c5905afbSIngo Molnar makes certain almost-always-true or almost-always-false branch 58c5905afbSIngo Molnar conditions even cheaper to execute within the kernel. 5945f81b1cSSteven Rostedt 60c5905afbSIngo Molnar Certain performance-sensitive kernel code, such as trace points, 61c5905afbSIngo Molnar scheduler functionality, networking code and KVM have such 62c5905afbSIngo Molnar branches and include support for this optimization technique. 63c5905afbSIngo Molnar 64c5905afbSIngo Molnar If it is detected that the compiler has support for "asm goto", 65c5905afbSIngo Molnar the kernel will compile such branches with just a nop 66c5905afbSIngo Molnar instruction. When the condition flag is toggled to true, the 67c5905afbSIngo Molnar nop will be converted to a jump instruction to execute the 68c5905afbSIngo Molnar conditional block of instructions. 69c5905afbSIngo Molnar 70c5905afbSIngo Molnar This technique lowers overhead and stress on the branch prediction 71c5905afbSIngo Molnar of the processor and generally makes the kernel faster. The update 72c5905afbSIngo Molnar of the condition is slower, but those are always very rare. 73c5905afbSIngo Molnar 74c5905afbSIngo Molnar ( On 32-bit x86, the necessary options added to the compiler 75c5905afbSIngo Molnar flags may increase the size of the kernel slightly. ) 7645f81b1cSSteven Rostedt 771987c947SPeter Zijlstraconfig STATIC_KEYS_SELFTEST 781987c947SPeter Zijlstra bool "Static key selftest" 791987c947SPeter Zijlstra depends on JUMP_LABEL 801987c947SPeter Zijlstra help 811987c947SPeter Zijlstra Boot time self-test of the branch patching code. 821987c947SPeter Zijlstra 83afd66255SMasami Hiramatsuconfig OPTPROBES 845cc718b9SMasami Hiramatsu def_bool y 855cc718b9SMasami Hiramatsu depends on KPROBES && HAVE_OPTPROBES 86afd66255SMasami Hiramatsu depends on !PREEMPT 87afd66255SMasami Hiramatsu 88e7dbfe34SMasami Hiramatsuconfig KPROBES_ON_FTRACE 89e7dbfe34SMasami Hiramatsu def_bool y 90e7dbfe34SMasami Hiramatsu depends on KPROBES && HAVE_KPROBES_ON_FTRACE 91e7dbfe34SMasami Hiramatsu depends on DYNAMIC_FTRACE_WITH_REGS 92e7dbfe34SMasami Hiramatsu help 93e7dbfe34SMasami Hiramatsu If function tracer is enabled and the arch supports full 94e7dbfe34SMasami Hiramatsu passing of pt_regs to function tracing, then kprobes can 95e7dbfe34SMasami Hiramatsu optimize on top of function tracing. 96e7dbfe34SMasami Hiramatsu 972b144498SSrikar Dronamrajuconfig UPROBES 9809294e31SDavid A. Long def_bool n 992b144498SSrikar Dronamraju help 1007b2d81d4SIngo Molnar Uprobes is the user-space counterpart to kprobes: they 1017b2d81d4SIngo Molnar enable instrumentation applications (such as 'perf probe') 1027b2d81d4SIngo Molnar to establish unintrusive probes in user-space binaries and 1037b2d81d4SIngo Molnar libraries, by executing handler functions when the probes 1047b2d81d4SIngo Molnar are hit by user-space applications. 1057b2d81d4SIngo Molnar 1067b2d81d4SIngo Molnar ( These probes come in the form of single-byte breakpoints, 1077b2d81d4SIngo Molnar managed by the kernel and kept transparent to the probed 1087b2d81d4SIngo Molnar application. ) 1092b144498SSrikar Dronamraju 110c19fa94aSJames Hoganconfig HAVE_64BIT_ALIGNED_ACCESS 111c19fa94aSJames Hogan def_bool 64BIT && !HAVE_EFFICIENT_UNALIGNED_ACCESS 112c19fa94aSJames Hogan help 113c19fa94aSJames Hogan Some architectures require 64 bit accesses to be 64 bit 114c19fa94aSJames Hogan aligned, which also requires structs containing 64 bit values 115c19fa94aSJames Hogan to be 64 bit aligned too. This includes some 32 bit 116c19fa94aSJames Hogan architectures which can do 64 bit accesses, as well as 64 bit 117c19fa94aSJames Hogan architectures without unaligned access. 118c19fa94aSJames Hogan 119c19fa94aSJames Hogan This symbol should be selected by an architecture if 64 bit 120c19fa94aSJames Hogan accesses are required to be 64 bit aligned in this way even 121c19fa94aSJames Hogan though it is not a 64 bit architecture. 122c19fa94aSJames Hogan 123c19fa94aSJames Hogan See Documentation/unaligned-memory-access.txt for more 124c19fa94aSJames Hogan information on the topic of unaligned memory accesses. 125c19fa94aSJames Hogan 12658340a07SJohannes Bergconfig HAVE_EFFICIENT_UNALIGNED_ACCESS 1279ba16087SJan Beulich bool 12858340a07SJohannes Berg help 12958340a07SJohannes Berg Some architectures are unable to perform unaligned accesses 13058340a07SJohannes Berg without the use of get_unaligned/put_unaligned. Others are 13158340a07SJohannes Berg unable to perform such accesses efficiently (e.g. trap on 13258340a07SJohannes Berg unaligned access and require fixing it up in the exception 13358340a07SJohannes Berg handler.) 13458340a07SJohannes Berg 13558340a07SJohannes Berg This symbol should be selected by an architecture if it can 13658340a07SJohannes Berg perform unaligned accesses efficiently to allow different 13758340a07SJohannes Berg code paths to be selected for these cases. Some network 13858340a07SJohannes Berg drivers, for example, could opt to not fix up alignment 13958340a07SJohannes Berg problems with received packets if doing so would not help 14058340a07SJohannes Berg much. 14158340a07SJohannes Berg 14258340a07SJohannes Berg See Documentation/unaligned-memory-access.txt for more 14358340a07SJohannes Berg information on the topic of unaligned memory accesses. 14458340a07SJohannes Berg 145cf66bb93SDavid Woodhouseconfig ARCH_USE_BUILTIN_BSWAP 146cf66bb93SDavid Woodhouse bool 147cf66bb93SDavid Woodhouse help 148cf66bb93SDavid Woodhouse Modern versions of GCC (since 4.4) have builtin functions 149cf66bb93SDavid Woodhouse for handling byte-swapping. Using these, instead of the old 150cf66bb93SDavid Woodhouse inline assembler that the architecture code provides in the 151cf66bb93SDavid Woodhouse __arch_bswapXX() macros, allows the compiler to see what's 152cf66bb93SDavid Woodhouse happening and offers more opportunity for optimisation. In 153cf66bb93SDavid Woodhouse particular, the compiler will be able to combine the byteswap 154cf66bb93SDavid Woodhouse with a nearby load or store and use load-and-swap or 155cf66bb93SDavid Woodhouse store-and-swap instructions if the architecture has them. It 156cf66bb93SDavid Woodhouse should almost *never* result in code which is worse than the 157cf66bb93SDavid Woodhouse hand-coded assembler in <asm/swab.h>. But just in case it 158cf66bb93SDavid Woodhouse does, the use of the builtins is optional. 159cf66bb93SDavid Woodhouse 160cf66bb93SDavid Woodhouse Any architecture with load-and-swap or store-and-swap 161cf66bb93SDavid Woodhouse instructions should set this. And it shouldn't hurt to set it 162cf66bb93SDavid Woodhouse on architectures that don't have such instructions. 163cf66bb93SDavid Woodhouse 1649edddaa2SAnanth N Mavinakayanahalliconfig KRETPROBES 1659edddaa2SAnanth N Mavinakayanahalli def_bool y 1669edddaa2SAnanth N Mavinakayanahalli depends on KPROBES && HAVE_KRETPROBES 1679edddaa2SAnanth N Mavinakayanahalli 1687c68af6eSAvi Kivityconfig USER_RETURN_NOTIFIER 1697c68af6eSAvi Kivity bool 1707c68af6eSAvi Kivity depends on HAVE_USER_RETURN_NOTIFIER 1717c68af6eSAvi Kivity help 1727c68af6eSAvi Kivity Provide a kernel-internal notification when a cpu is about to 1737c68af6eSAvi Kivity switch to user mode. 1747c68af6eSAvi Kivity 17528b2ee20SRik van Rielconfig HAVE_IOREMAP_PROT 1769ba16087SJan Beulich bool 17728b2ee20SRik van Riel 178125e5645SMathieu Desnoyersconfig HAVE_KPROBES 1799ba16087SJan Beulich bool 1809edddaa2SAnanth N Mavinakayanahalli 1819edddaa2SAnanth N Mavinakayanahalliconfig HAVE_KRETPROBES 1829ba16087SJan Beulich bool 18374bc7ceeSArthur Kepner 184afd66255SMasami Hiramatsuconfig HAVE_OPTPROBES 185afd66255SMasami Hiramatsu bool 186d314d74cSCong Wang 187e7dbfe34SMasami Hiramatsuconfig HAVE_KPROBES_ON_FTRACE 188e7dbfe34SMasami Hiramatsu bool 189e7dbfe34SMasami Hiramatsu 190d314d74cSCong Wangconfig HAVE_NMI_WATCHDOG 191d314d74cSCong Wang bool 1921f5a4ad9SRoland McGrath# 1931f5a4ad9SRoland McGrath# An arch should select this if it provides all these things: 1941f5a4ad9SRoland McGrath# 1951f5a4ad9SRoland McGrath# task_pt_regs() in asm/processor.h or asm/ptrace.h 1961f5a4ad9SRoland McGrath# arch_has_single_step() if there is hardware single-step support 1971f5a4ad9SRoland McGrath# arch_has_block_step() if there is hardware block-step support 1981f5a4ad9SRoland McGrath# asm/syscall.h supplying asm-generic/syscall.h interface 1991f5a4ad9SRoland McGrath# linux/regset.h user_regset interfaces 2001f5a4ad9SRoland McGrath# CORE_DUMP_USE_REGSET #define'd in linux/elf.h 2011f5a4ad9SRoland McGrath# TIF_SYSCALL_TRACE calls tracehook_report_syscall_{entry,exit} 2021f5a4ad9SRoland McGrath# TIF_NOTIFY_RESUME calls tracehook_notify_resume() 2031f5a4ad9SRoland McGrath# signal delivery calls tracehook_signal_handler() 2041f5a4ad9SRoland McGrath# 2051f5a4ad9SRoland McGrathconfig HAVE_ARCH_TRACEHOOK 2069ba16087SJan Beulich bool 2071f5a4ad9SRoland McGrath 20874bc7ceeSArthur Kepnerconfig HAVE_DMA_ATTRS 2099ba16087SJan Beulich bool 2103d442233SJens Axboe 211c64be2bbSMarek Szyprowskiconfig HAVE_DMA_CONTIGUOUS 212c64be2bbSMarek Szyprowski bool 213c64be2bbSMarek Szyprowski 21429d5e047SThomas Gleixnerconfig GENERIC_SMP_IDLE_THREAD 21529d5e047SThomas Gleixner bool 21629d5e047SThomas Gleixner 217485cf5daSKevin Hilmanconfig GENERIC_IDLE_POLL_SETUP 218485cf5daSKevin Hilman bool 219485cf5daSKevin Hilman 220a6359d1eSThomas Gleixner# Select if arch init_task initializer is different to init/init_task.c 221a6359d1eSThomas Gleixnerconfig ARCH_INIT_TASK 222a4a2eb49SThomas Gleixner bool 223a4a2eb49SThomas Gleixner 224f5e10287SThomas Gleixner# Select if arch has its private alloc_task_struct() function 225f5e10287SThomas Gleixnerconfig ARCH_TASK_STRUCT_ALLOCATOR 226f5e10287SThomas Gleixner bool 227f5e10287SThomas Gleixner 228f5e10287SThomas Gleixner# Select if arch has its private alloc_thread_info() function 229f5e10287SThomas Gleixnerconfig ARCH_THREAD_INFO_ALLOCATOR 230f5e10287SThomas Gleixner bool 231f5e10287SThomas Gleixner 2325aaeb5c0SIngo Molnar# Select if arch wants to size task_struct dynamically via arch_task_struct_size: 2335aaeb5c0SIngo Molnarconfig ARCH_WANTS_DYNAMIC_TASK_STRUCT 2345aaeb5c0SIngo Molnar bool 2355aaeb5c0SIngo Molnar 236f850c30cSHeiko Carstensconfig HAVE_REGS_AND_STACK_ACCESS_API 237f850c30cSHeiko Carstens bool 238e01292b1SHeiko Carstens help 239e01292b1SHeiko Carstens This symbol should be selected by an architecure if it supports 240e01292b1SHeiko Carstens the API needed to access registers and stack entries from pt_regs, 241e01292b1SHeiko Carstens declared in asm/ptrace.h 242e01292b1SHeiko Carstens For example the kprobes-based event tracer needs this API. 243f850c30cSHeiko Carstens 2449483a578SDavid Brownellconfig HAVE_CLK 2459ba16087SJan Beulich bool 2469483a578SDavid Brownell help 2479483a578SDavid Brownell The <linux/clk.h> calls support software clock gating and 2489483a578SDavid Brownell thus are a key power management tool on many systems. 2499483a578SDavid Brownell 2505ee00bd4SJoerg Roedelconfig HAVE_DMA_API_DEBUG 2515ee00bd4SJoerg Roedel bool 25236cd3c9fSHeiko Carstens 25362a038d3SK.Prasadconfig HAVE_HW_BREAKPOINT 25462a038d3SK.Prasad bool 25599e8c5a3SFrederic Weisbecker depends on PERF_EVENTS 25662a038d3SK.Prasad 2570102752eSFrederic Weisbeckerconfig HAVE_MIXED_BREAKPOINTS_REGS 2580102752eSFrederic Weisbecker bool 2590102752eSFrederic Weisbecker depends on HAVE_HW_BREAKPOINT 2600102752eSFrederic Weisbecker help 2610102752eSFrederic Weisbecker Depending on the arch implementation of hardware breakpoints, 2620102752eSFrederic Weisbecker some of them have separate registers for data and instruction 2630102752eSFrederic Weisbecker breakpoints addresses, others have mixed registers to store 2640102752eSFrederic Weisbecker them but define the access type in a control register. 2650102752eSFrederic Weisbecker Select this option if your arch implements breakpoints under the 2660102752eSFrederic Weisbecker latter fashion. 2670102752eSFrederic Weisbecker 2687c68af6eSAvi Kivityconfig HAVE_USER_RETURN_NOTIFIER 2697c68af6eSAvi Kivity bool 270a1922ed6SIngo Molnar 271c01d4323SFrederic Weisbeckerconfig HAVE_PERF_EVENTS_NMI 272c01d4323SFrederic Weisbecker bool 27323637d47SFrederic Weisbecker help 27423637d47SFrederic Weisbecker System hardware can generate an NMI using the perf event 27523637d47SFrederic Weisbecker subsystem. Also has support for calculating CPU cycle events 27623637d47SFrederic Weisbecker to determine how many clock cycles in a given period. 277c01d4323SFrederic Weisbecker 278c5e63197SJiri Olsaconfig HAVE_PERF_REGS 279c5e63197SJiri Olsa bool 280c5e63197SJiri Olsa help 281c5e63197SJiri Olsa Support selective register dumps for perf events. This includes 282c5e63197SJiri Olsa bit-mapping of each registers and a unique architecture id. 283c5e63197SJiri Olsa 284c5ebcedbSJiri Olsaconfig HAVE_PERF_USER_STACK_DUMP 285c5ebcedbSJiri Olsa bool 286c5ebcedbSJiri Olsa help 287c5ebcedbSJiri Olsa Support user stack dumps for perf event samples. This needs 288c5ebcedbSJiri Olsa access to the user stack pointer which is not unified across 289c5ebcedbSJiri Olsa architectures. 290c5ebcedbSJiri Olsa 291bf5438fcSJason Baronconfig HAVE_ARCH_JUMP_LABEL 292bf5438fcSJason Baron bool 293bf5438fcSJason Baron 29426723911SPeter Zijlstraconfig HAVE_RCU_TABLE_FREE 29526723911SPeter Zijlstra bool 29626723911SPeter Zijlstra 297df013ffbSHuang Yingconfig ARCH_HAVE_NMI_SAFE_CMPXCHG 298df013ffbSHuang Ying bool 299df013ffbSHuang Ying 30043570fd2SHeiko Carstensconfig HAVE_ALIGNED_STRUCT_PAGE 30143570fd2SHeiko Carstens bool 30243570fd2SHeiko Carstens help 30343570fd2SHeiko Carstens This makes sure that struct pages are double word aligned and that 30443570fd2SHeiko Carstens e.g. the SLUB allocator can perform double word atomic operations 30543570fd2SHeiko Carstens on a struct page for better performance. However selecting this 30643570fd2SHeiko Carstens might increase the size of a struct page by a word. 30743570fd2SHeiko Carstens 3084156153cSHeiko Carstensconfig HAVE_CMPXCHG_LOCAL 3094156153cSHeiko Carstens bool 3104156153cSHeiko Carstens 3112565409fSHeiko Carstensconfig HAVE_CMPXCHG_DOUBLE 3122565409fSHeiko Carstens bool 3132565409fSHeiko Carstens 314c1d7e01dSWill Deaconconfig ARCH_WANT_IPC_PARSE_VERSION 315c1d7e01dSWill Deacon bool 316c1d7e01dSWill Deacon 317c1d7e01dSWill Deaconconfig ARCH_WANT_COMPAT_IPC_PARSE_VERSION 318c1d7e01dSWill Deacon bool 319c1d7e01dSWill Deacon 32048b25c43SChris Metcalfconfig ARCH_WANT_OLD_COMPAT_IPC 321c1d7e01dSWill Deacon select ARCH_WANT_COMPAT_IPC_PARSE_VERSION 32248b25c43SChris Metcalf bool 32348b25c43SChris Metcalf 324e2cfabdfSWill Drewryconfig HAVE_ARCH_SECCOMP_FILTER 325e2cfabdfSWill Drewry bool 326e2cfabdfSWill Drewry help 327fb0fadf9SWill Drewry An arch should select this symbol if it provides all of these things: 328bb6ea430SWill Drewry - syscall_get_arch() 329bb6ea430SWill Drewry - syscall_get_arguments() 330bb6ea430SWill Drewry - syscall_rollback() 331bb6ea430SWill Drewry - syscall_set_return_value() 332fb0fadf9SWill Drewry - SIGSYS siginfo_t support 333fb0fadf9SWill Drewry - secure_computing is called from a ptrace_event()-safe context 334fb0fadf9SWill Drewry - secure_computing return value is checked and a return value of -1 335fb0fadf9SWill Drewry results in the system call being skipped immediately. 33648dc92b9SKees Cook - seccomp syscall wired up 337e2cfabdfSWill Drewry 338ff27f38eSAndy Lutomirski For best performance, an arch should use seccomp_phase1 and 339ff27f38eSAndy Lutomirski seccomp_phase2 directly. It should call seccomp_phase1 for all 340ff27f38eSAndy Lutomirski syscalls if TIF_SECCOMP is set, but seccomp_phase1 does not 341ff27f38eSAndy Lutomirski need to be called from a ptrace-safe context. It must then 342ff27f38eSAndy Lutomirski call seccomp_phase2 if seccomp_phase1 returns anything other 343ff27f38eSAndy Lutomirski than SECCOMP_PHASE1_OK or SECCOMP_PHASE1_SKIP. 344ff27f38eSAndy Lutomirski 345ff27f38eSAndy Lutomirski As an additional optimization, an arch may provide seccomp_data 346ff27f38eSAndy Lutomirski directly to seccomp_phase1; this avoids multiple calls 347ff27f38eSAndy Lutomirski to the syscall_xyz helpers for every syscall. 348ff27f38eSAndy Lutomirski 349e2cfabdfSWill Drewryconfig SECCOMP_FILTER 350e2cfabdfSWill Drewry def_bool y 351e2cfabdfSWill Drewry depends on HAVE_ARCH_SECCOMP_FILTER && SECCOMP && NET 352e2cfabdfSWill Drewry help 353e2cfabdfSWill Drewry Enable tasks to build secure computing environments defined 354e2cfabdfSWill Drewry in terms of Berkeley Packet Filter programs which implement 355e2cfabdfSWill Drewry task-defined system call filtering polices. 356e2cfabdfSWill Drewry 357e2cfabdfSWill Drewry See Documentation/prctl/seccomp_filter.txt for details. 358e2cfabdfSWill Drewry 35919952a92SKees Cookconfig HAVE_CC_STACKPROTECTOR 36019952a92SKees Cook bool 36119952a92SKees Cook help 36219952a92SKees Cook An arch should select this symbol if: 36319952a92SKees Cook - its compiler supports the -fstack-protector option 36419952a92SKees Cook - it has implemented a stack canary (e.g. __stack_chk_guard) 36519952a92SKees Cook 36619952a92SKees Cookconfig CC_STACKPROTECTOR 3678779657dSKees Cook def_bool n 36819952a92SKees Cook help 3698779657dSKees Cook Set when a stack-protector mode is enabled, so that the build 3708779657dSKees Cook can enable kernel-side support for the GCC feature. 3718779657dSKees Cook 3728779657dSKees Cookchoice 3738779657dSKees Cook prompt "Stack Protector buffer overflow detection" 3748779657dSKees Cook depends on HAVE_CC_STACKPROTECTOR 3758779657dSKees Cook default CC_STACKPROTECTOR_NONE 3768779657dSKees Cook help 3778779657dSKees Cook This option turns on the "stack-protector" GCC feature. This 37819952a92SKees Cook feature puts, at the beginning of functions, a canary value on 37919952a92SKees Cook the stack just before the return address, and validates 38019952a92SKees Cook the value just before actually returning. Stack based buffer 38119952a92SKees Cook overflows (that need to overwrite this return address) now also 38219952a92SKees Cook overwrite the canary, which gets detected and the attack is then 38319952a92SKees Cook neutralized via a kernel panic. 38419952a92SKees Cook 3858779657dSKees Cookconfig CC_STACKPROTECTOR_NONE 3868779657dSKees Cook bool "None" 3878779657dSKees Cook help 3888779657dSKees Cook Disable "stack-protector" GCC feature. 3898779657dSKees Cook 3908779657dSKees Cookconfig CC_STACKPROTECTOR_REGULAR 3918779657dSKees Cook bool "Regular" 3928779657dSKees Cook select CC_STACKPROTECTOR 3938779657dSKees Cook help 3948779657dSKees Cook Functions will have the stack-protector canary logic added if they 3958779657dSKees Cook have an 8-byte or larger character array on the stack. 3968779657dSKees Cook 39719952a92SKees Cook This feature requires gcc version 4.2 or above, or a distribution 3988779657dSKees Cook gcc with the feature backported ("-fstack-protector"). 3998779657dSKees Cook 4008779657dSKees Cook On an x86 "defconfig" build, this feature adds canary checks to 4018779657dSKees Cook about 3% of all kernel functions, which increases kernel code size 4028779657dSKees Cook by about 0.3%. 4038779657dSKees Cook 4048779657dSKees Cookconfig CC_STACKPROTECTOR_STRONG 4058779657dSKees Cook bool "Strong" 4068779657dSKees Cook select CC_STACKPROTECTOR 4078779657dSKees Cook help 4088779657dSKees Cook Functions will have the stack-protector canary logic added in any 4098779657dSKees Cook of the following conditions: 4108779657dSKees Cook 4118779657dSKees Cook - local variable's address used as part of the right hand side of an 4128779657dSKees Cook assignment or function argument 4138779657dSKees Cook - local variable is an array (or union containing an array), 4148779657dSKees Cook regardless of array type or length 4158779657dSKees Cook - uses register local variables 4168779657dSKees Cook 4178779657dSKees Cook This feature requires gcc version 4.9 or above, or a distribution 4188779657dSKees Cook gcc with the feature backported ("-fstack-protector-strong"). 4198779657dSKees Cook 4208779657dSKees Cook On an x86 "defconfig" build, this feature adds canary checks to 4218779657dSKees Cook about 20% of all kernel functions, which increases the kernel code 4228779657dSKees Cook size by about 2%. 4238779657dSKees Cook 4248779657dSKees Cookendchoice 42519952a92SKees Cook 42691d1aa43SFrederic Weisbeckerconfig HAVE_CONTEXT_TRACKING 4272b1d5024SFrederic Weisbecker bool 4282b1d5024SFrederic Weisbecker help 42991d1aa43SFrederic Weisbecker Provide kernel/user boundaries probes necessary for subsystems 43091d1aa43SFrederic Weisbecker that need it, such as userspace RCU extended quiescent state. 43191d1aa43SFrederic Weisbecker Syscalls need to be wrapped inside user_exit()-user_enter() through 43291d1aa43SFrederic Weisbecker the slow path using TIF_NOHZ flag. Exceptions handlers must be 43391d1aa43SFrederic Weisbecker wrapped as well. Irqs are already protected inside 43491d1aa43SFrederic Weisbecker rcu_irq_enter/rcu_irq_exit() but preemption or signal handling on 43591d1aa43SFrederic Weisbecker irq exit still need to be protected. 4362b1d5024SFrederic Weisbecker 437b952741cSFrederic Weisbeckerconfig HAVE_VIRT_CPU_ACCOUNTING 438b952741cSFrederic Weisbecker bool 439b952741cSFrederic Weisbecker 440554b0004SKevin Hilmanconfig HAVE_VIRT_CPU_ACCOUNTING_GEN 441554b0004SKevin Hilman bool 442554b0004SKevin Hilman default y if 64BIT 443554b0004SKevin Hilman help 444554b0004SKevin Hilman With VIRT_CPU_ACCOUNTING_GEN, cputime_t becomes 64-bit. 445554b0004SKevin Hilman Before enabling this option, arch code must be audited 446554b0004SKevin Hilman to ensure there are no races in concurrent read/write of 447554b0004SKevin Hilman cputime_t. For example, reading/writing 64-bit cputime_t on 448554b0004SKevin Hilman some 32-bit arches may require multiple accesses, so proper 449554b0004SKevin Hilman locking is needed to protect against concurrent accesses. 450554b0004SKevin Hilman 451554b0004SKevin Hilman 452fdf9c356SFrederic Weisbeckerconfig HAVE_IRQ_TIME_ACCOUNTING 453fdf9c356SFrederic Weisbecker bool 454fdf9c356SFrederic Weisbecker help 455fdf9c356SFrederic Weisbecker Archs need to ensure they use a high enough resolution clock to 456fdf9c356SFrederic Weisbecker support irq time accounting and then call enable_sched_clock_irqtime(). 457fdf9c356SFrederic Weisbecker 45815626062SGerald Schaeferconfig HAVE_ARCH_TRANSPARENT_HUGEPAGE 45915626062SGerald Schaefer bool 46015626062SGerald Schaefer 4610ddab1d2SToshi Kaniconfig HAVE_ARCH_HUGE_VMAP 4620ddab1d2SToshi Kani bool 4630ddab1d2SToshi Kani 4640f8975ecSPavel Emelyanovconfig HAVE_ARCH_SOFT_DIRTY 4650f8975ecSPavel Emelyanov bool 4660f8975ecSPavel Emelyanov 467786d35d4SDavid Howellsconfig HAVE_MOD_ARCH_SPECIFIC 468786d35d4SDavid Howells bool 469786d35d4SDavid Howells help 470786d35d4SDavid Howells The arch uses struct mod_arch_specific to store data. Many arches 471786d35d4SDavid Howells just need a simple module loader without arch specific data - those 472786d35d4SDavid Howells should not enable this. 473786d35d4SDavid Howells 474786d35d4SDavid Howellsconfig MODULES_USE_ELF_RELA 475786d35d4SDavid Howells bool 476786d35d4SDavid Howells help 477786d35d4SDavid Howells Modules only use ELF RELA relocations. Modules with ELF REL 478786d35d4SDavid Howells relocations will give an error. 479786d35d4SDavid Howells 480786d35d4SDavid Howellsconfig MODULES_USE_ELF_REL 481786d35d4SDavid Howells bool 482786d35d4SDavid Howells help 483786d35d4SDavid Howells Modules only use ELF REL relocations. Modules with ELF RELA 484786d35d4SDavid Howells relocations will give an error. 485786d35d4SDavid Howells 486b92021b0SRusty Russellconfig HAVE_UNDERSCORE_SYMBOL_PREFIX 487b92021b0SRusty Russell bool 488b92021b0SRusty Russell help 489b92021b0SRusty Russell Some architectures generate an _ in front of C symbols; things like 490b92021b0SRusty Russell module loading and assembly files need to know about this. 491b92021b0SRusty Russell 492cc1f0274SFrederic Weisbeckerconfig HAVE_IRQ_EXIT_ON_IRQ_STACK 493cc1f0274SFrederic Weisbecker bool 494cc1f0274SFrederic Weisbecker help 495cc1f0274SFrederic Weisbecker Architecture doesn't only execute the irq handler on the irq stack 496cc1f0274SFrederic Weisbecker but also irq_exit(). This way we can process softirqs on this irq 497cc1f0274SFrederic Weisbecker stack instead of switching to a new one when we call __do_softirq() 498cc1f0274SFrederic Weisbecker in the end of an hardirq. 499cc1f0274SFrederic Weisbecker This spares a stack switch and improves cache usage on softirq 500cc1f0274SFrederic Weisbecker processing. 501cc1f0274SFrederic Weisbecker 502235a8f02SKirill A. Shutemovconfig PGTABLE_LEVELS 503235a8f02SKirill A. Shutemov int 504235a8f02SKirill A. Shutemov default 2 505235a8f02SKirill A. Shutemov 5062b68f6caSKees Cookconfig ARCH_HAS_ELF_RANDOMIZE 5072b68f6caSKees Cook bool 5082b68f6caSKees Cook help 5092b68f6caSKees Cook An architecture supports choosing randomized locations for 5102b68f6caSKees Cook stack, mmap, brk, and ET_DYN. Defined functions: 5112b68f6caSKees Cook - arch_mmap_rnd() 512204db6edSKees Cook - arch_randomize_brk() 5132b68f6caSKees Cook 5143033f14aSJosh Triplettconfig HAVE_COPY_THREAD_TLS 5153033f14aSJosh Triplett bool 5163033f14aSJosh Triplett help 5173033f14aSJosh Triplett Architecture provides copy_thread_tls to accept tls argument via 5183033f14aSJosh Triplett normal C parameter passing, rather than extracting the syscall 5193033f14aSJosh Triplett argument from pt_regs. 5203033f14aSJosh Triplett 521d2125043SAl Viro# 522d2125043SAl Viro# ABI hall of shame 523d2125043SAl Viro# 524d2125043SAl Viroconfig CLONE_BACKWARDS 525d2125043SAl Viro bool 526d2125043SAl Viro help 527d2125043SAl Viro Architecture has tls passed as the 4th argument of clone(2), 528d2125043SAl Viro not the 5th one. 529d2125043SAl Viro 530d2125043SAl Viroconfig CLONE_BACKWARDS2 531d2125043SAl Viro bool 532d2125043SAl Viro help 533d2125043SAl Viro Architecture has the first two arguments of clone(2) swapped. 534d2125043SAl Viro 535dfa9771aSMichal Simekconfig CLONE_BACKWARDS3 536dfa9771aSMichal Simek bool 537dfa9771aSMichal Simek help 538dfa9771aSMichal Simek Architecture has tls passed as the 3rd argument of clone(2), 539dfa9771aSMichal Simek not the 5th one. 540dfa9771aSMichal Simek 541eaca6eaeSAl Viroconfig ODD_RT_SIGACTION 542eaca6eaeSAl Viro bool 543eaca6eaeSAl Viro help 544eaca6eaeSAl Viro Architecture has unusual rt_sigaction(2) arguments 545eaca6eaeSAl Viro 5460a0e8cdfSAl Viroconfig OLD_SIGSUSPEND 5470a0e8cdfSAl Viro bool 5480a0e8cdfSAl Viro help 5490a0e8cdfSAl Viro Architecture has old sigsuspend(2) syscall, of one-argument variety 5500a0e8cdfSAl Viro 5510a0e8cdfSAl Viroconfig OLD_SIGSUSPEND3 5520a0e8cdfSAl Viro bool 5530a0e8cdfSAl Viro help 5540a0e8cdfSAl Viro Even weirder antique ABI - three-argument sigsuspend(2) 5550a0e8cdfSAl Viro 556495dfbf7SAl Viroconfig OLD_SIGACTION 557495dfbf7SAl Viro bool 558495dfbf7SAl Viro help 559495dfbf7SAl Viro Architecture has old sigaction(2) syscall. Nope, not the same 560495dfbf7SAl Viro as OLD_SIGSUSPEND | OLD_SIGSUSPEND3 - alpha has sigsuspend(2), 561495dfbf7SAl Viro but fairly different variant of sigaction(2), thanks to OSF/1 562495dfbf7SAl Viro compatibility... 563495dfbf7SAl Viro 564495dfbf7SAl Viroconfig COMPAT_OLD_SIGACTION 565495dfbf7SAl Viro bool 566495dfbf7SAl Viro 5672521f2c2SPeter Oberparleitersource "kernel/gcov/Kconfig" 568