1b2441318SGreg Kroah-Hartman# SPDX-License-Identifier: GPL-2.0 2fb32e03fSMathieu Desnoyers# 3fb32e03fSMathieu Desnoyers# General architecture dependent options 4fb32e03fSMathieu Desnoyers# 5125e5645SMathieu Desnoyers 61572497cSChristoph Hellwig# 71572497cSChristoph Hellwig# Note: arch/$(SRCARCH)/Kconfig needs to be included first so that it can 81572497cSChristoph Hellwig# override the default values in this file. 91572497cSChristoph Hellwig# 101572497cSChristoph Hellwigsource "arch/$(SRCARCH)/Kconfig" 111572497cSChristoph Hellwig 12fe42754bSSean Christophersonconfig ARCH_CONFIGURES_CPU_MITIGATIONS 13fe42754bSSean Christopherson bool 14fe42754bSSean Christopherson 15fe42754bSSean Christophersonif !ARCH_CONFIGURES_CPU_MITIGATIONS 16fe42754bSSean Christophersonconfig CPU_MITIGATIONS 17fe42754bSSean Christopherson def_bool y 18fe42754bSSean Christophersonendif 19fe42754bSSean Christopherson 20*de6c85bfSChristoph Hellwig# 21*de6c85bfSChristoph Hellwig# Selected by architectures that need custom DMA operations for e.g. legacy 22*de6c85bfSChristoph Hellwig# IOMMUs not handled by dma-iommu. Drivers must never select this symbol. 23*de6c85bfSChristoph Hellwig# 24*de6c85bfSChristoph Hellwigconfig ARCH_HAS_DMA_OPS 25*de6c85bfSChristoph Hellwig depends on HAS_DMA 26*de6c85bfSChristoph Hellwig select DMA_OPS_HELPERS 27*de6c85bfSChristoph Hellwig bool 28*de6c85bfSChristoph Hellwig 2922471e13SRandy Dunlapmenu "General architecture-dependent options" 3022471e13SRandy Dunlap 31da32b581SCatalin Marinasconfig ARCH_HAS_SUBPAGE_FAULTS 32da32b581SCatalin Marinas bool 33da32b581SCatalin Marinas help 34da32b581SCatalin Marinas Select if the architecture can check permissions at sub-page 35da32b581SCatalin Marinas granularity (e.g. arm64 MTE). The probe_user_*() functions 36da32b581SCatalin Marinas must be implemented. 37da32b581SCatalin Marinas 3805736e4aSThomas Gleixnerconfig HOTPLUG_SMT 3905736e4aSThomas Gleixner bool 4005736e4aSThomas Gleixner 4138253464SMichael Ellermanconfig SMT_NUM_THREADS_DYNAMIC 4238253464SMichael Ellerman bool 4338253464SMichael Ellerman 446f062123SThomas Gleixner# Selected by HOTPLUG_CORE_SYNC_DEAD or HOTPLUG_CORE_SYNC_FULL 456f062123SThomas Gleixnerconfig HOTPLUG_CORE_SYNC 466f062123SThomas Gleixner bool 476f062123SThomas Gleixner 486f062123SThomas Gleixner# Basic CPU dead synchronization selected by architecture 496f062123SThomas Gleixnerconfig HOTPLUG_CORE_SYNC_DEAD 506f062123SThomas Gleixner bool 516f062123SThomas Gleixner select HOTPLUG_CORE_SYNC 526f062123SThomas Gleixner 536f062123SThomas Gleixner# Full CPU synchronization with alive state selected by architecture 546f062123SThomas Gleixnerconfig HOTPLUG_CORE_SYNC_FULL 556f062123SThomas Gleixner bool 566f062123SThomas Gleixner select HOTPLUG_CORE_SYNC_DEAD if HOTPLUG_CPU 576f062123SThomas Gleixner select HOTPLUG_CORE_SYNC 586f062123SThomas Gleixner 59a631be92SThomas Gleixnerconfig HOTPLUG_SPLIT_STARTUP 60a631be92SThomas Gleixner bool 61a631be92SThomas Gleixner select HOTPLUG_CORE_SYNC_FULL 62a631be92SThomas Gleixner 6318415f33SThomas Gleixnerconfig HOTPLUG_PARALLEL 6418415f33SThomas Gleixner bool 6518415f33SThomas Gleixner select HOTPLUG_SPLIT_STARTUP 6618415f33SThomas Gleixner 67142781e1SThomas Gleixnerconfig GENERIC_ENTRY 68142781e1SThomas Gleixner bool 69142781e1SThomas Gleixner 70125e5645SMathieu Desnoyersconfig KPROBES 71125e5645SMathieu Desnoyers bool "Kprobes" 72125e5645SMathieu Desnoyers depends on HAVE_KPROBES 7305ed160eSMasami Hiramatsu select KALLSYMS 747582b7beSMike Rapoport (IBM) select EXECMEM 75900da4d2SPaul E. McKenney select NEED_TASKS_RCU 76125e5645SMathieu Desnoyers help 77125e5645SMathieu Desnoyers Kprobes allows you to trap at almost any kernel address and 78125e5645SMathieu Desnoyers execute a callback function. register_kprobe() establishes 79125e5645SMathieu Desnoyers a probepoint and specifies the callback. Kprobes is useful 80125e5645SMathieu Desnoyers for kernel debugging, non-intrusive instrumentation and testing. 81125e5645SMathieu Desnoyers If in doubt, say "N". 82125e5645SMathieu Desnoyers 8345f81b1cSSteven Rostedtconfig JUMP_LABEL 84c5905afbSIngo Molnar bool "Optimize very unlikely/likely branches" 8545f81b1cSSteven Rostedt depends on HAVE_ARCH_JUMP_LABEL 864ab7674fSJosh Poimboeuf select OBJTOOL if HAVE_JUMP_LABEL_HACK 8745f81b1cSSteven Rostedt help 88c5905afbSIngo Molnar This option enables a transparent branch optimization that 89c5905afbSIngo Molnar makes certain almost-always-true or almost-always-false branch 90c5905afbSIngo Molnar conditions even cheaper to execute within the kernel. 9145f81b1cSSteven Rostedt 92c5905afbSIngo Molnar Certain performance-sensitive kernel code, such as trace points, 93c5905afbSIngo Molnar scheduler functionality, networking code and KVM have such 94c5905afbSIngo Molnar branches and include support for this optimization technique. 95c5905afbSIngo Molnar 96c5905afbSIngo Molnar If it is detected that the compiler has support for "asm goto", 97c5905afbSIngo Molnar the kernel will compile such branches with just a nop 98c5905afbSIngo Molnar instruction. When the condition flag is toggled to true, the 99c5905afbSIngo Molnar nop will be converted to a jump instruction to execute the 100c5905afbSIngo Molnar conditional block of instructions. 101c5905afbSIngo Molnar 102c5905afbSIngo Molnar This technique lowers overhead and stress on the branch prediction 103c5905afbSIngo Molnar of the processor and generally makes the kernel faster. The update 104c5905afbSIngo Molnar of the condition is slower, but those are always very rare. 105c5905afbSIngo Molnar 106c5905afbSIngo Molnar ( On 32-bit x86, the necessary options added to the compiler 107c5905afbSIngo Molnar flags may increase the size of the kernel slightly. ) 10845f81b1cSSteven Rostedt 1091987c947SPeter Zijlstraconfig STATIC_KEYS_SELFTEST 1101987c947SPeter Zijlstra bool "Static key selftest" 1111987c947SPeter Zijlstra depends on JUMP_LABEL 1121987c947SPeter Zijlstra help 1131987c947SPeter Zijlstra Boot time self-test of the branch patching code. 1141987c947SPeter Zijlstra 115f03c4129SPeter Zijlstraconfig STATIC_CALL_SELFTEST 116f03c4129SPeter Zijlstra bool "Static call selftest" 117f03c4129SPeter Zijlstra depends on HAVE_STATIC_CALL 118f03c4129SPeter Zijlstra help 119f03c4129SPeter Zijlstra Boot time self-test of the call patching code. 120f03c4129SPeter Zijlstra 121afd66255SMasami Hiramatsuconfig OPTPROBES 1225cc718b9SMasami Hiramatsu def_bool y 1235cc718b9SMasami Hiramatsu depends on KPROBES && HAVE_OPTPROBES 124900da4d2SPaul E. McKenney select NEED_TASKS_RCU 125afd66255SMasami Hiramatsu 126e7dbfe34SMasami Hiramatsuconfig KPROBES_ON_FTRACE 127e7dbfe34SMasami Hiramatsu def_bool y 128e7dbfe34SMasami Hiramatsu depends on KPROBES && HAVE_KPROBES_ON_FTRACE 129e7dbfe34SMasami Hiramatsu depends on DYNAMIC_FTRACE_WITH_REGS 130e7dbfe34SMasami Hiramatsu help 131e7dbfe34SMasami Hiramatsu If function tracer is enabled and the arch supports full 132e7dbfe34SMasami Hiramatsu passing of pt_regs to function tracing, then kprobes can 133e7dbfe34SMasami Hiramatsu optimize on top of function tracing. 134e7dbfe34SMasami Hiramatsu 1352b144498SSrikar Dronamrajuconfig UPROBES 13609294e31SDavid A. Long def_bool n 137e8f4aa60SAllen Pais depends on ARCH_SUPPORTS_UPROBES 1382b144498SSrikar Dronamraju help 1397b2d81d4SIngo Molnar Uprobes is the user-space counterpart to kprobes: they 1407b2d81d4SIngo Molnar enable instrumentation applications (such as 'perf probe') 1417b2d81d4SIngo Molnar to establish unintrusive probes in user-space binaries and 1427b2d81d4SIngo Molnar libraries, by executing handler functions when the probes 1437b2d81d4SIngo Molnar are hit by user-space applications. 1447b2d81d4SIngo Molnar 1457b2d81d4SIngo Molnar ( These probes come in the form of single-byte breakpoints, 1467b2d81d4SIngo Molnar managed by the kernel and kept transparent to the probed 1477b2d81d4SIngo Molnar application. ) 1482b144498SSrikar Dronamraju 149adab66b7SSteven Rostedt (VMware)config HAVE_64BIT_ALIGNED_ACCESS 150adab66b7SSteven Rostedt (VMware) def_bool 64BIT && !HAVE_EFFICIENT_UNALIGNED_ACCESS 151adab66b7SSteven Rostedt (VMware) help 152adab66b7SSteven Rostedt (VMware) Some architectures require 64 bit accesses to be 64 bit 153adab66b7SSteven Rostedt (VMware) aligned, which also requires structs containing 64 bit values 154adab66b7SSteven Rostedt (VMware) to be 64 bit aligned too. This includes some 32 bit 155adab66b7SSteven Rostedt (VMware) architectures which can do 64 bit accesses, as well as 64 bit 156adab66b7SSteven Rostedt (VMware) architectures without unaligned access. 157adab66b7SSteven Rostedt (VMware) 158adab66b7SSteven Rostedt (VMware) This symbol should be selected by an architecture if 64 bit 159adab66b7SSteven Rostedt (VMware) accesses are required to be 64 bit aligned in this way even 160adab66b7SSteven Rostedt (VMware) though it is not a 64 bit architecture. 161adab66b7SSteven Rostedt (VMware) 162ba1a297dSLukas Bulwahn See Documentation/core-api/unaligned-memory-access.rst for 163ba1a297dSLukas Bulwahn more information on the topic of unaligned memory accesses. 164adab66b7SSteven Rostedt (VMware) 16558340a07SJohannes Bergconfig HAVE_EFFICIENT_UNALIGNED_ACCESS 1669ba16087SJan Beulich bool 16758340a07SJohannes Berg help 16858340a07SJohannes Berg Some architectures are unable to perform unaligned accesses 16958340a07SJohannes Berg without the use of get_unaligned/put_unaligned. Others are 17058340a07SJohannes Berg unable to perform such accesses efficiently (e.g. trap on 17158340a07SJohannes Berg unaligned access and require fixing it up in the exception 17258340a07SJohannes Berg handler.) 17358340a07SJohannes Berg 17458340a07SJohannes Berg This symbol should be selected by an architecture if it can 17558340a07SJohannes Berg perform unaligned accesses efficiently to allow different 17658340a07SJohannes Berg code paths to be selected for these cases. Some network 17758340a07SJohannes Berg drivers, for example, could opt to not fix up alignment 17858340a07SJohannes Berg problems with received packets if doing so would not help 17958340a07SJohannes Berg much. 18058340a07SJohannes Berg 181c9b54d6fSMauro Carvalho Chehab See Documentation/core-api/unaligned-memory-access.rst for more 18258340a07SJohannes Berg information on the topic of unaligned memory accesses. 18358340a07SJohannes Berg 184cf66bb93SDavid Woodhouseconfig ARCH_USE_BUILTIN_BSWAP 185cf66bb93SDavid Woodhouse bool 186cf66bb93SDavid Woodhouse help 187cf66bb93SDavid Woodhouse Modern versions of GCC (since 4.4) have builtin functions 188cf66bb93SDavid Woodhouse for handling byte-swapping. Using these, instead of the old 189cf66bb93SDavid Woodhouse inline assembler that the architecture code provides in the 190cf66bb93SDavid Woodhouse __arch_bswapXX() macros, allows the compiler to see what's 191cf66bb93SDavid Woodhouse happening and offers more opportunity for optimisation. In 192cf66bb93SDavid Woodhouse particular, the compiler will be able to combine the byteswap 193cf66bb93SDavid Woodhouse with a nearby load or store and use load-and-swap or 194cf66bb93SDavid Woodhouse store-and-swap instructions if the architecture has them. It 195cf66bb93SDavid Woodhouse should almost *never* result in code which is worse than the 196cf66bb93SDavid Woodhouse hand-coded assembler in <asm/swab.h>. But just in case it 197cf66bb93SDavid Woodhouse does, the use of the builtins is optional. 198cf66bb93SDavid Woodhouse 199cf66bb93SDavid Woodhouse Any architecture with load-and-swap or store-and-swap 200cf66bb93SDavid Woodhouse instructions should set this. And it shouldn't hurt to set it 201cf66bb93SDavid Woodhouse on architectures that don't have such instructions. 202cf66bb93SDavid Woodhouse 2039edddaa2SAnanth N Mavinakayanahalliconfig KRETPROBES 2049edddaa2SAnanth N Mavinakayanahalli def_bool y 20573f9b911SMasami Hiramatsu depends on KPROBES && (HAVE_KRETPROBES || HAVE_RETHOOK) 20673f9b911SMasami Hiramatsu 20773f9b911SMasami Hiramatsuconfig KRETPROBE_ON_RETHOOK 20873f9b911SMasami Hiramatsu def_bool y 20973f9b911SMasami Hiramatsu depends on HAVE_RETHOOK 21073f9b911SMasami Hiramatsu depends on KRETPROBES 21173f9b911SMasami Hiramatsu select RETHOOK 2129edddaa2SAnanth N Mavinakayanahalli 2137c68af6eSAvi Kivityconfig USER_RETURN_NOTIFIER 2147c68af6eSAvi Kivity bool 2157c68af6eSAvi Kivity depends on HAVE_USER_RETURN_NOTIFIER 2167c68af6eSAvi Kivity help 2177c68af6eSAvi Kivity Provide a kernel-internal notification when a cpu is about to 2187c68af6eSAvi Kivity switch to user mode. 2197c68af6eSAvi Kivity 22028b2ee20SRik van Rielconfig HAVE_IOREMAP_PROT 2219ba16087SJan Beulich bool 22228b2ee20SRik van Riel 223125e5645SMathieu Desnoyersconfig HAVE_KPROBES 2249ba16087SJan Beulich bool 2259edddaa2SAnanth N Mavinakayanahalli 2269edddaa2SAnanth N Mavinakayanahalliconfig HAVE_KRETPROBES 2279ba16087SJan Beulich bool 22874bc7ceeSArthur Kepner 229afd66255SMasami Hiramatsuconfig HAVE_OPTPROBES 230afd66255SMasami Hiramatsu bool 231d314d74cSCong Wang 232e7dbfe34SMasami Hiramatsuconfig HAVE_KPROBES_ON_FTRACE 233e7dbfe34SMasami Hiramatsu bool 234e7dbfe34SMasami Hiramatsu 2351f6d3a8fSMasami Hiramatsuconfig ARCH_CORRECT_STACKTRACE_ON_KRETPROBE 2361f6d3a8fSMasami Hiramatsu bool 2371f6d3a8fSMasami Hiramatsu help 2381f6d3a8fSMasami Hiramatsu Since kretprobes modifies return address on the stack, the 2391f6d3a8fSMasami Hiramatsu stacktrace may see the kretprobe trampoline address instead 2401f6d3a8fSMasami Hiramatsu of correct one. If the architecture stacktrace code and 2411f6d3a8fSMasami Hiramatsu unwinder can adjust such entries, select this configuration. 2421f6d3a8fSMasami Hiramatsu 243540adea3SMasami Hiramatsuconfig HAVE_FUNCTION_ERROR_INJECTION 2449802d865SJosef Bacik bool 2459802d865SJosef Bacik 24642a0bb3fSPetr Mladekconfig HAVE_NMI 24742a0bb3fSPetr Mladek bool 24842a0bb3fSPetr Mladek 249a257caccSChristophe Leroyconfig HAVE_FUNCTION_DESCRIPTORS 250a257caccSChristophe Leroy bool 251a257caccSChristophe Leroy 2524aae683fSMasahiro Yamadaconfig TRACE_IRQFLAGS_SUPPORT 2534aae683fSMasahiro Yamada bool 2544aae683fSMasahiro Yamada 2554510bffbSMark Rutlandconfig TRACE_IRQFLAGS_NMI_SUPPORT 2564510bffbSMark Rutland bool 2574510bffbSMark Rutland 2581f5a4ad9SRoland McGrath# 2591f5a4ad9SRoland McGrath# An arch should select this if it provides all these things: 2601f5a4ad9SRoland McGrath# 2611f5a4ad9SRoland McGrath# task_pt_regs() in asm/processor.h or asm/ptrace.h 2621f5a4ad9SRoland McGrath# arch_has_single_step() if there is hardware single-step support 2631f5a4ad9SRoland McGrath# arch_has_block_step() if there is hardware block-step support 2641f5a4ad9SRoland McGrath# asm/syscall.h supplying asm-generic/syscall.h interface 2651f5a4ad9SRoland McGrath# linux/regset.h user_regset interfaces 2661f5a4ad9SRoland McGrath# CORE_DUMP_USE_REGSET #define'd in linux/elf.h 267153474baSEric W. Biederman# TIF_SYSCALL_TRACE calls ptrace_report_syscall_{entry,exit} 26803248addSEric W. Biederman# TIF_NOTIFY_RESUME calls resume_user_mode_work() 2691f5a4ad9SRoland McGrath# 2701f5a4ad9SRoland McGrathconfig HAVE_ARCH_TRACEHOOK 2719ba16087SJan Beulich bool 2721f5a4ad9SRoland McGrath 273c64be2bbSMarek Szyprowskiconfig HAVE_DMA_CONTIGUOUS 274c64be2bbSMarek Szyprowski bool 275c64be2bbSMarek Szyprowski 27629d5e047SThomas Gleixnerconfig GENERIC_SMP_IDLE_THREAD 27729d5e047SThomas Gleixner bool 27829d5e047SThomas Gleixner 279485cf5daSKevin Hilmanconfig GENERIC_IDLE_POLL_SETUP 280485cf5daSKevin Hilman bool 281485cf5daSKevin Hilman 2826974f0c4SDaniel Micayconfig ARCH_HAS_FORTIFY_SOURCE 2836974f0c4SDaniel Micay bool 2846974f0c4SDaniel Micay help 2856974f0c4SDaniel Micay An architecture should select this when it can successfully 2866974f0c4SDaniel Micay build and run with CONFIG_FORTIFY_SOURCE. 2876974f0c4SDaniel Micay 288d8ae8a37SChristoph Hellwig# 289d8ae8a37SChristoph Hellwig# Select if the arch provides a historic keepinit alias for the retain_initrd 290d8ae8a37SChristoph Hellwig# command line option 291d8ae8a37SChristoph Hellwig# 292d8ae8a37SChristoph Hellwigconfig ARCH_HAS_KEEPINITRD 293d8ae8a37SChristoph Hellwig bool 294d8ae8a37SChristoph Hellwig 295d2852a22SDaniel Borkmann# Select if arch has all set_memory_ro/rw/x/nx() functions in asm/cacheflush.h 296d2852a22SDaniel Borkmannconfig ARCH_HAS_SET_MEMORY 297d2852a22SDaniel Borkmann bool 298d2852a22SDaniel Borkmann 299d253ca0cSRick Edgecombe# Select if arch has all set_direct_map_invalid/default() functions 300d253ca0cSRick Edgecombeconfig ARCH_HAS_SET_DIRECT_MAP 301d253ca0cSRick Edgecombe bool 302d253ca0cSRick Edgecombe 303c30700dbSChristoph Hellwig# 304fa7e2247SChristoph Hellwig# Select if the architecture provides the arch_dma_set_uncached symbol to 305a86ecfa6SColin Ian King# either provide an uncached segment alias for a DMA allocation, or 306fa7e2247SChristoph Hellwig# to remap the page tables in place. 307c30700dbSChristoph Hellwig# 308fa7e2247SChristoph Hellwigconfig ARCH_HAS_DMA_SET_UNCACHED 309c30700dbSChristoph Hellwig bool 310c30700dbSChristoph Hellwig 311999a5d12SChristoph Hellwig# 312999a5d12SChristoph Hellwig# Select if the architectures provides the arch_dma_clear_uncached symbol 313999a5d12SChristoph Hellwig# to undo an in-place page table remap for uncached access. 314999a5d12SChristoph Hellwig# 315999a5d12SChristoph Hellwigconfig ARCH_HAS_DMA_CLEAR_UNCACHED 316f5e10287SThomas Gleixner bool 317f5e10287SThomas Gleixner 3187725acaaSThomas Gleixnerconfig ARCH_HAS_CPU_FINALIZE_INIT 3197725acaaSThomas Gleixner bool 3207725acaaSThomas Gleixner 3218f23f5dbSJason Gunthorpe# The architecture has a per-task state that includes the mm's PASID 3228f23f5dbSJason Gunthorpeconfig ARCH_HAS_CPU_PASID 3238f23f5dbSJason Gunthorpe bool 3248f23f5dbSJason Gunthorpe select IOMMU_MM_DATA 3258f23f5dbSJason Gunthorpe 3265905429aSKees Cookconfig HAVE_ARCH_THREAD_STRUCT_WHITELIST 3275905429aSKees Cook bool 3285905429aSKees Cook help 3295905429aSKees Cook An architecture should select this to provide hardened usercopy 3305905429aSKees Cook knowledge about what region of the thread_struct should be 3315905429aSKees Cook whitelisted for copying to userspace. Normally this is only the 3325905429aSKees Cook FPU registers. Specifically, arch_thread_struct_whitelist() 3335905429aSKees Cook should be implemented. Without this, the entire thread_struct 3345905429aSKees Cook field in task_struct will be left whitelisted. 3355905429aSKees Cook 3365aaeb5c0SIngo Molnar# Select if arch wants to size task_struct dynamically via arch_task_struct_size: 3375aaeb5c0SIngo Molnarconfig ARCH_WANTS_DYNAMIC_TASK_STRUCT 3385aaeb5c0SIngo Molnar bool 3395aaeb5c0SIngo Molnar 34051c2ee6dSNick Desaulniersconfig ARCH_WANTS_NO_INSTR 34151c2ee6dSNick Desaulniers bool 34251c2ee6dSNick Desaulniers help 34351c2ee6dSNick Desaulniers An architecture should select this if the noinstr macro is being used on 34451c2ee6dSNick Desaulniers functions to denote that the toolchain should avoid instrumenting such 34551c2ee6dSNick Desaulniers functions and is required for correctness. 34651c2ee6dSNick Desaulniers 347942fa985SYury Norovconfig ARCH_32BIT_OFF_T 348942fa985SYury Norov bool 349942fa985SYury Norov depends on !64BIT 350942fa985SYury Norov help 351942fa985SYury Norov All new 32-bit architectures should have 64-bit off_t type on 352942fa985SYury Norov userspace side which corresponds to the loff_t kernel type. This 353942fa985SYury Norov is the requirement for modern ABIs. Some existing architectures 354942fa985SYury Norov still support 32-bit off_t. This option is enabled for all such 355942fa985SYury Norov architectures explicitly. 356942fa985SYury Norov 35796c0a6a7SHeiko Carstens# Selected by 64 bit architectures which have a 32 bit f_tinode in struct ustat 35896c0a6a7SHeiko Carstensconfig ARCH_32BIT_USTAT_F_TINODE 35996c0a6a7SHeiko Carstens bool 36096c0a6a7SHeiko Carstens 3612ff2b7ecSMasahiro Yamadaconfig HAVE_ASM_MODVERSIONS 3622ff2b7ecSMasahiro Yamada bool 3632ff2b7ecSMasahiro Yamada help 364a86ecfa6SColin Ian King This symbol should be selected by an architecture if it provides 3652ff2b7ecSMasahiro Yamada <asm/asm-prototypes.h> to support the module versioning for symbols 3662ff2b7ecSMasahiro Yamada exported from assembly code. 3672ff2b7ecSMasahiro Yamada 368f850c30cSHeiko Carstensconfig HAVE_REGS_AND_STACK_ACCESS_API 369f850c30cSHeiko Carstens bool 370e01292b1SHeiko Carstens help 371a86ecfa6SColin Ian King This symbol should be selected by an architecture if it supports 372e01292b1SHeiko Carstens the API needed to access registers and stack entries from pt_regs, 373e01292b1SHeiko Carstens declared in asm/ptrace.h 374e01292b1SHeiko Carstens For example the kprobes-based event tracer needs this API. 375f850c30cSHeiko Carstens 376d7822b1eSMathieu Desnoyersconfig HAVE_RSEQ 377d7822b1eSMathieu Desnoyers bool 378d7822b1eSMathieu Desnoyers depends on HAVE_REGS_AND_STACK_ACCESS_API 379d7822b1eSMathieu Desnoyers help 380d7822b1eSMathieu Desnoyers This symbol should be selected by an architecture if it 381d7822b1eSMathieu Desnoyers supports an implementation of restartable sequences. 382d7822b1eSMathieu Desnoyers 3832f7ab126SMiguel Ojedaconfig HAVE_RUST 3842f7ab126SMiguel Ojeda bool 3852f7ab126SMiguel Ojeda help 3862f7ab126SMiguel Ojeda This symbol should be selected by an architecture if it 3872f7ab126SMiguel Ojeda supports Rust. 3882f7ab126SMiguel Ojeda 3893c88ee19SMasami Hiramatsuconfig HAVE_FUNCTION_ARG_ACCESS_API 3903c88ee19SMasami Hiramatsu bool 3913c88ee19SMasami Hiramatsu help 392a86ecfa6SColin Ian King This symbol should be selected by an architecture if it supports 3933c88ee19SMasami Hiramatsu the API needed to access function arguments from pt_regs, 3943c88ee19SMasami Hiramatsu declared in asm/ptrace.h 3953c88ee19SMasami Hiramatsu 39662a038d3SK.Prasadconfig HAVE_HW_BREAKPOINT 39762a038d3SK.Prasad bool 39899e8c5a3SFrederic Weisbecker depends on PERF_EVENTS 39962a038d3SK.Prasad 4000102752eSFrederic Weisbeckerconfig HAVE_MIXED_BREAKPOINTS_REGS 4010102752eSFrederic Weisbecker bool 4020102752eSFrederic Weisbecker depends on HAVE_HW_BREAKPOINT 4030102752eSFrederic Weisbecker help 4040102752eSFrederic Weisbecker Depending on the arch implementation of hardware breakpoints, 4050102752eSFrederic Weisbecker some of them have separate registers for data and instruction 4060102752eSFrederic Weisbecker breakpoints addresses, others have mixed registers to store 4070102752eSFrederic Weisbecker them but define the access type in a control register. 4080102752eSFrederic Weisbecker Select this option if your arch implements breakpoints under the 4090102752eSFrederic Weisbecker latter fashion. 4100102752eSFrederic Weisbecker 4117c68af6eSAvi Kivityconfig HAVE_USER_RETURN_NOTIFIER 4127c68af6eSAvi Kivity bool 413a1922ed6SIngo Molnar 414c01d4323SFrederic Weisbeckerconfig HAVE_PERF_EVENTS_NMI 415c01d4323SFrederic Weisbecker bool 41623637d47SFrederic Weisbecker help 41723637d47SFrederic Weisbecker System hardware can generate an NMI using the perf event 41823637d47SFrederic Weisbecker subsystem. Also has support for calculating CPU cycle events 41923637d47SFrederic Weisbecker to determine how many clock cycles in a given period. 420c01d4323SFrederic Weisbecker 42105a4a952SNicholas Pigginconfig HAVE_HARDLOCKUP_DETECTOR_PERF 42205a4a952SNicholas Piggin bool 42305a4a952SNicholas Piggin depends on HAVE_PERF_EVENTS_NMI 42405a4a952SNicholas Piggin help 42505a4a952SNicholas Piggin The arch chooses to use the generic perf-NMI-based hardlockup 42605a4a952SNicholas Piggin detector. Must define HAVE_PERF_EVENTS_NMI. 42705a4a952SNicholas Piggin 42805a4a952SNicholas Pigginconfig HAVE_HARDLOCKUP_DETECTOR_ARCH 42905a4a952SNicholas Piggin bool 43005a4a952SNicholas Piggin help 4311356d0b9SPetr Mladek The arch provides its own hardlockup detector implementation instead 4321356d0b9SPetr Mladek of the generic ones. 4331356d0b9SPetr Mladek 4341356d0b9SPetr Mladek It uses the same command line parameters, and sysctl interface, 4351356d0b9SPetr Mladek as the generic hardlockup detectors. 43605a4a952SNicholas Piggin 437c5e63197SJiri Olsaconfig HAVE_PERF_REGS 438c5e63197SJiri Olsa bool 439c5e63197SJiri Olsa help 440c5e63197SJiri Olsa Support selective register dumps for perf events. This includes 441c5e63197SJiri Olsa bit-mapping of each registers and a unique architecture id. 442c5e63197SJiri Olsa 443c5ebcedbSJiri Olsaconfig HAVE_PERF_USER_STACK_DUMP 444c5ebcedbSJiri Olsa bool 445c5ebcedbSJiri Olsa help 446c5ebcedbSJiri Olsa Support user stack dumps for perf event samples. This needs 447c5ebcedbSJiri Olsa access to the user stack pointer which is not unified across 448c5ebcedbSJiri Olsa architectures. 449c5ebcedbSJiri Olsa 450bf5438fcSJason Baronconfig HAVE_ARCH_JUMP_LABEL 451bf5438fcSJason Baron bool 452bf5438fcSJason Baron 45350ff18abSArd Biesheuvelconfig HAVE_ARCH_JUMP_LABEL_RELATIVE 45450ff18abSArd Biesheuvel bool 45550ff18abSArd Biesheuvel 4560d6e24d4SPeter Zijlstraconfig MMU_GATHER_TABLE_FREE 4570d6e24d4SPeter Zijlstra bool 4580d6e24d4SPeter Zijlstra 459ff2e6d72SPeter Zijlstraconfig MMU_GATHER_RCU_TABLE_FREE 46026723911SPeter Zijlstra bool 4610d6e24d4SPeter Zijlstra select MMU_GATHER_TABLE_FREE 46226723911SPeter Zijlstra 4633af4bd03SPeter Zijlstraconfig MMU_GATHER_PAGE_SIZE 464ed6a7935SPeter Zijlstra bool 465ed6a7935SPeter Zijlstra 46627796d03SPeter Zijlstraconfig MMU_GATHER_NO_RANGE 46727796d03SPeter Zijlstra bool 4681e9fdf21SPeter Zijlstra select MMU_GATHER_MERGE_VMAS 4691e9fdf21SPeter Zijlstra 4701e9fdf21SPeter Zijlstraconfig MMU_GATHER_NO_FLUSH_CACHE 4711e9fdf21SPeter Zijlstra bool 4721e9fdf21SPeter Zijlstra 4731e9fdf21SPeter Zijlstraconfig MMU_GATHER_MERGE_VMAS 4741e9fdf21SPeter Zijlstra bool 47527796d03SPeter Zijlstra 476580a586cSPeter Zijlstraconfig MMU_GATHER_NO_GATHER 477952a31c9SMartin Schwidefsky bool 4780d6e24d4SPeter Zijlstra depends on MMU_GATHER_TABLE_FREE 479952a31c9SMartin Schwidefsky 480d53c3dfbSNicholas Pigginconfig ARCH_WANT_IRQS_OFF_ACTIVATE_MM 481d53c3dfbSNicholas Piggin bool 482d53c3dfbSNicholas Piggin help 483d53c3dfbSNicholas Piggin Temporary select until all architectures can be converted to have 484d53c3dfbSNicholas Piggin irqs disabled over activate_mm. Architectures that do IPI based TLB 485d53c3dfbSNicholas Piggin shootdowns should enable this. 486d53c3dfbSNicholas Piggin 48788e3009bSNicholas Piggin# Use normal mm refcounting for MMU_LAZY_TLB kernel thread references. 48888e3009bSNicholas Piggin# MMU_LAZY_TLB_REFCOUNT=n can improve the scalability of context switching 48988e3009bSNicholas Piggin# to/from kernel threads when the same mm is running on a lot of CPUs (a large 49088e3009bSNicholas Piggin# multi-threaded application), by reducing contention on the mm refcount. 49188e3009bSNicholas Piggin# 49288e3009bSNicholas Piggin# This can be disabled if the architecture ensures no CPUs are using an mm as a 49388e3009bSNicholas Piggin# "lazy tlb" beyond its final refcount (i.e., by the time __mmdrop frees the mm 49488e3009bSNicholas Piggin# or its kernel page tables). This could be arranged by arch_exit_mmap(), or 49588e3009bSNicholas Piggin# final exit(2) TLB flush, for example. 49688e3009bSNicholas Piggin# 49788e3009bSNicholas Piggin# To implement this, an arch *must*: 49888e3009bSNicholas Piggin# Ensure the _lazy_tlb variants of mmgrab/mmdrop are used when manipulating 49988e3009bSNicholas Piggin# the lazy tlb reference of a kthread's ->active_mm (non-arch code has been 50088e3009bSNicholas Piggin# converted already). 50188e3009bSNicholas Pigginconfig MMU_LAZY_TLB_REFCOUNT 50288e3009bSNicholas Piggin def_bool y 5032655421aSNicholas Piggin depends on !MMU_LAZY_TLB_SHOOTDOWN 5042655421aSNicholas Piggin 5052655421aSNicholas Piggin# This option allows MMU_LAZY_TLB_REFCOUNT=n. It ensures no CPUs are using an 5062655421aSNicholas Piggin# mm as a lazy tlb beyond its last reference count, by shooting down these 5072655421aSNicholas Piggin# users before the mm is deallocated. __mmdrop() first IPIs all CPUs that may 5082655421aSNicholas Piggin# be using the mm as a lazy tlb, so that they may switch themselves to using 5092655421aSNicholas Piggin# init_mm for their active mm. mm_cpumask(mm) is used to determine which CPUs 5102655421aSNicholas Piggin# may be using mm as a lazy tlb mm. 5112655421aSNicholas Piggin# 5122655421aSNicholas Piggin# To implement this, an arch *must*: 5132655421aSNicholas Piggin# - At the time of the final mmdrop of the mm, ensure mm_cpumask(mm) contains 5142655421aSNicholas Piggin# at least all possible CPUs in which the mm is lazy. 5152655421aSNicholas Piggin# - It must meet the requirements for MMU_LAZY_TLB_REFCOUNT=n (see above). 5162655421aSNicholas Pigginconfig MMU_LAZY_TLB_SHOOTDOWN 5172655421aSNicholas Piggin bool 51888e3009bSNicholas Piggin 519df013ffbSHuang Yingconfig ARCH_HAVE_NMI_SAFE_CMPXCHG 520df013ffbSHuang Ying bool 521df013ffbSHuang Ying 522a9c3475dSVignesh Balasubramanianconfig ARCH_HAVE_EXTRA_ELF_NOTES 523a9c3475dSVignesh Balasubramanian bool 524a9c3475dSVignesh Balasubramanian help 525a9c3475dSVignesh Balasubramanian An architecture should select this in order to enable adding an 526a9c3475dSVignesh Balasubramanian arch-specific ELF note section to core files. It must provide two 527a9c3475dSVignesh Balasubramanian functions: elf_coredump_extra_notes_size() and 528a9c3475dSVignesh Balasubramanian elf_coredump_extra_notes_write() which are invoked by the ELF core 529a9c3475dSVignesh Balasubramanian dumper. 530a9c3475dSVignesh Balasubramanian 5312e83b879SPaul E. McKenneyconfig ARCH_HAS_NMI_SAFE_THIS_CPU_OPS 5322e83b879SPaul E. McKenney bool 5332e83b879SPaul E. McKenney 53443570fd2SHeiko Carstensconfig HAVE_ALIGNED_STRUCT_PAGE 53543570fd2SHeiko Carstens bool 53643570fd2SHeiko Carstens help 53743570fd2SHeiko Carstens This makes sure that struct pages are double word aligned and that 53843570fd2SHeiko Carstens e.g. the SLUB allocator can perform double word atomic operations 53943570fd2SHeiko Carstens on a struct page for better performance. However selecting this 54043570fd2SHeiko Carstens might increase the size of a struct page by a word. 54143570fd2SHeiko Carstens 5424156153cSHeiko Carstensconfig HAVE_CMPXCHG_LOCAL 5434156153cSHeiko Carstens bool 5444156153cSHeiko Carstens 5452565409fSHeiko Carstensconfig HAVE_CMPXCHG_DOUBLE 5462565409fSHeiko Carstens bool 5472565409fSHeiko Carstens 54877e58496SPaul E. McKenneyconfig ARCH_WEAK_RELEASE_ACQUIRE 54977e58496SPaul E. McKenney bool 55077e58496SPaul E. McKenney 551c1d7e01dSWill Deaconconfig ARCH_WANT_IPC_PARSE_VERSION 552c1d7e01dSWill Deacon bool 553c1d7e01dSWill Deacon 554c1d7e01dSWill Deaconconfig ARCH_WANT_COMPAT_IPC_PARSE_VERSION 555c1d7e01dSWill Deacon bool 556c1d7e01dSWill Deacon 55748b25c43SChris Metcalfconfig ARCH_WANT_OLD_COMPAT_IPC 558c1d7e01dSWill Deacon select ARCH_WANT_COMPAT_IPC_PARSE_VERSION 55948b25c43SChris Metcalf bool 56048b25c43SChris Metcalf 561282a181bSYiFei Zhuconfig HAVE_ARCH_SECCOMP 562e2cfabdfSWill Drewry bool 563e2cfabdfSWill Drewry help 564282a181bSYiFei Zhu An arch should select this symbol to support seccomp mode 1 (the fixed 565282a181bSYiFei Zhu syscall policy), and must provide an overrides for __NR_seccomp_sigreturn, 566282a181bSYiFei Zhu and compat syscalls if the asm-generic/seccomp.h defaults need adjustment: 567282a181bSYiFei Zhu - __NR_seccomp_read_32 568282a181bSYiFei Zhu - __NR_seccomp_write_32 569282a181bSYiFei Zhu - __NR_seccomp_exit_32 570282a181bSYiFei Zhu - __NR_seccomp_sigreturn_32 571282a181bSYiFei Zhu 572282a181bSYiFei Zhuconfig HAVE_ARCH_SECCOMP_FILTER 573282a181bSYiFei Zhu bool 574282a181bSYiFei Zhu select HAVE_ARCH_SECCOMP 575282a181bSYiFei Zhu help 576fb0fadf9SWill Drewry An arch should select this symbol if it provides all of these things: 577282a181bSYiFei Zhu - all the requirements for HAVE_ARCH_SECCOMP 578bb6ea430SWill Drewry - syscall_get_arch() 579bb6ea430SWill Drewry - syscall_get_arguments() 580bb6ea430SWill Drewry - syscall_rollback() 581bb6ea430SWill Drewry - syscall_set_return_value() 582fb0fadf9SWill Drewry - SIGSYS siginfo_t support 583fb0fadf9SWill Drewry - secure_computing is called from a ptrace_event()-safe context 584fb0fadf9SWill Drewry - secure_computing return value is checked and a return value of -1 585fb0fadf9SWill Drewry results in the system call being skipped immediately. 58648dc92b9SKees Cook - seccomp syscall wired up 5870d8315ddSYiFei Zhu - if !HAVE_SPARSE_SYSCALL_NR, have SECCOMP_ARCH_NATIVE, 5880d8315ddSYiFei Zhu SECCOMP_ARCH_NATIVE_NR, SECCOMP_ARCH_NATIVE_NAME defined. If 5890d8315ddSYiFei Zhu COMPAT is supported, have the SECCOMP_ARCH_COMPAT* defines too. 590e2cfabdfSWill Drewry 591282a181bSYiFei Zhuconfig SECCOMP 592282a181bSYiFei Zhu prompt "Enable seccomp to safely execute untrusted bytecode" 593282a181bSYiFei Zhu def_bool y 594282a181bSYiFei Zhu depends on HAVE_ARCH_SECCOMP 595282a181bSYiFei Zhu help 596282a181bSYiFei Zhu This kernel feature is useful for number crunching applications 597282a181bSYiFei Zhu that may need to handle untrusted bytecode during their 598282a181bSYiFei Zhu execution. By using pipes or other transports made available 599282a181bSYiFei Zhu to the process as file descriptors supporting the read/write 600282a181bSYiFei Zhu syscalls, it's possible to isolate those applications in their 601282a181bSYiFei Zhu own address space using seccomp. Once seccomp is enabled via 602282a181bSYiFei Zhu prctl(PR_SET_SECCOMP) or the seccomp() syscall, it cannot be 603282a181bSYiFei Zhu disabled and the task is only allowed to execute a few safe 604282a181bSYiFei Zhu syscalls defined by each seccomp mode. 605282a181bSYiFei Zhu 606282a181bSYiFei Zhu If unsure, say Y. 607282a181bSYiFei Zhu 608e2cfabdfSWill Drewryconfig SECCOMP_FILTER 609e2cfabdfSWill Drewry def_bool y 610e2cfabdfSWill Drewry depends on HAVE_ARCH_SECCOMP_FILTER && SECCOMP && NET 611e2cfabdfSWill Drewry help 612e2cfabdfSWill Drewry Enable tasks to build secure computing environments defined 613e2cfabdfSWill Drewry in terms of Berkeley Packet Filter programs which implement 614e2cfabdfSWill Drewry task-defined system call filtering polices. 615e2cfabdfSWill Drewry 6165fb94e9cSMauro Carvalho Chehab See Documentation/userspace-api/seccomp_filter.rst for details. 617e2cfabdfSWill Drewry 6180d8315ddSYiFei Zhuconfig SECCOMP_CACHE_DEBUG 6190d8315ddSYiFei Zhu bool "Show seccomp filter cache status in /proc/pid/seccomp_cache" 6200d8315ddSYiFei Zhu depends on SECCOMP_FILTER && !HAVE_SPARSE_SYSCALL_NR 6210d8315ddSYiFei Zhu depends on PROC_FS 6220d8315ddSYiFei Zhu help 6230d8315ddSYiFei Zhu This enables the /proc/pid/seccomp_cache interface to monitor 6240d8315ddSYiFei Zhu seccomp cache data. The file format is subject to change. Reading 6250d8315ddSYiFei Zhu the file requires CAP_SYS_ADMIN. 6260d8315ddSYiFei Zhu 6270d8315ddSYiFei Zhu This option is for debugging only. Enabling presents the risk that 6280d8315ddSYiFei Zhu an adversary may be able to infer the seccomp filter logic. 6290d8315ddSYiFei Zhu 6300d8315ddSYiFei Zhu If unsure, say N. 6310d8315ddSYiFei Zhu 632afaef01cSAlexander Popovconfig HAVE_ARCH_STACKLEAK 633afaef01cSAlexander Popov bool 634afaef01cSAlexander Popov help 635afaef01cSAlexander Popov An architecture should select this if it has the code which 636afaef01cSAlexander Popov fills the used part of the kernel stack with the STACKLEAK_POISON 637afaef01cSAlexander Popov value before returning from system calls. 638afaef01cSAlexander Popov 639d148eac0SMasahiro Yamadaconfig HAVE_STACKPROTECTOR 64019952a92SKees Cook bool 64119952a92SKees Cook help 64219952a92SKees Cook An arch should select this symbol if: 64319952a92SKees Cook - it has implemented a stack canary (e.g. __stack_chk_guard) 64419952a92SKees Cook 645050e9baaSLinus Torvaldsconfig STACKPROTECTOR 6462a61f474SMasahiro Yamada bool "Stack Protector buffer overflow detection" 647d148eac0SMasahiro Yamada depends on HAVE_STACKPROTECTOR 6482a61f474SMasahiro Yamada depends on $(cc-option,-fstack-protector) 6492a61f474SMasahiro Yamada default y 6508779657dSKees Cook help 6518779657dSKees Cook This option turns on the "stack-protector" GCC feature. This 65219952a92SKees Cook feature puts, at the beginning of functions, a canary value on 65319952a92SKees Cook the stack just before the return address, and validates 65419952a92SKees Cook the value just before actually returning. Stack based buffer 65519952a92SKees Cook overflows (that need to overwrite this return address) now also 65619952a92SKees Cook overwrite the canary, which gets detected and the attack is then 65719952a92SKees Cook neutralized via a kernel panic. 65819952a92SKees Cook 6598779657dSKees Cook Functions will have the stack-protector canary logic added if they 6608779657dSKees Cook have an 8-byte or larger character array on the stack. 6618779657dSKees Cook 66219952a92SKees Cook This feature requires gcc version 4.2 or above, or a distribution 6638779657dSKees Cook gcc with the feature backported ("-fstack-protector"). 6648779657dSKees Cook 6658779657dSKees Cook On an x86 "defconfig" build, this feature adds canary checks to 6668779657dSKees Cook about 3% of all kernel functions, which increases kernel code size 6678779657dSKees Cook by about 0.3%. 6688779657dSKees Cook 669050e9baaSLinus Torvaldsconfig STACKPROTECTOR_STRONG 6702a61f474SMasahiro Yamada bool "Strong Stack Protector" 671050e9baaSLinus Torvalds depends on STACKPROTECTOR 6722a61f474SMasahiro Yamada depends on $(cc-option,-fstack-protector-strong) 6732a61f474SMasahiro Yamada default y 6748779657dSKees Cook help 6758779657dSKees Cook Functions will have the stack-protector canary logic added in any 6768779657dSKees Cook of the following conditions: 6778779657dSKees Cook 6788779657dSKees Cook - local variable's address used as part of the right hand side of an 6798779657dSKees Cook assignment or function argument 6808779657dSKees Cook - local variable is an array (or union containing an array), 6818779657dSKees Cook regardless of array type or length 6828779657dSKees Cook - uses register local variables 6838779657dSKees Cook 6848779657dSKees Cook This feature requires gcc version 4.9 or above, or a distribution 6858779657dSKees Cook gcc with the feature backported ("-fstack-protector-strong"). 6868779657dSKees Cook 6878779657dSKees Cook On an x86 "defconfig" build, this feature adds canary checks to 6888779657dSKees Cook about 20% of all kernel functions, which increases the kernel code 6898779657dSKees Cook size by about 2%. 6908779657dSKees Cook 691d08b9f0cSSami Tolvanenconfig ARCH_SUPPORTS_SHADOW_CALL_STACK 692d08b9f0cSSami Tolvanen bool 693d08b9f0cSSami Tolvanen help 694afcf5441SDan Li An architecture should select this if it supports the compiler's 695afcf5441SDan Li Shadow Call Stack and implements runtime support for shadow stack 696aa7a65aeSWill Deacon switching. 697d08b9f0cSSami Tolvanen 698d08b9f0cSSami Tolvanenconfig SHADOW_CALL_STACK 699afcf5441SDan Li bool "Shadow Call Stack" 700afcf5441SDan Li depends on ARCH_SUPPORTS_SHADOW_CALL_STACK 70138792972SArd Biesheuvel depends on DYNAMIC_FTRACE_WITH_ARGS || DYNAMIC_FTRACE_WITH_REGS || !FUNCTION_GRAPH_TRACER 7026f9dc684SSamuel Holland depends on MMU 703d08b9f0cSSami Tolvanen help 704afcf5441SDan Li This option enables the compiler's Shadow Call Stack, which 705afcf5441SDan Li uses a shadow stack to protect function return addresses from 706afcf5441SDan Li being overwritten by an attacker. More information can be found 707afcf5441SDan Li in the compiler's documentation: 708d08b9f0cSSami Tolvanen 709afcf5441SDan Li - Clang: https://clang.llvm.org/docs/ShadowCallStack.html 710afcf5441SDan Li - GCC: https://gcc.gnu.org/onlinedocs/gcc/Instrumentation-Options.html#Instrumentation-Options 711d08b9f0cSSami Tolvanen 712d08b9f0cSSami Tolvanen Note that security guarantees in the kernel differ from the 713d08b9f0cSSami Tolvanen ones documented for user space. The kernel must store addresses 714d08b9f0cSSami Tolvanen of shadow stacks in memory, which means an attacker capable of 715d08b9f0cSSami Tolvanen reading and writing arbitrary memory may be able to locate them 716d08b9f0cSSami Tolvanen and hijack control flow by modifying the stacks. 717d08b9f0cSSami Tolvanen 7189beccca0SArd Biesheuvelconfig DYNAMIC_SCS 7199beccca0SArd Biesheuvel bool 7209beccca0SArd Biesheuvel help 7219beccca0SArd Biesheuvel Set by the arch code if it relies on code patching to insert the 7229beccca0SArd Biesheuvel shadow call stack push and pop instructions rather than on the 7239beccca0SArd Biesheuvel compiler. 7249beccca0SArd Biesheuvel 725dc5723b0SSami Tolvanenconfig LTO 726dc5723b0SSami Tolvanen bool 727dc5723b0SSami Tolvanen help 728dc5723b0SSami Tolvanen Selected if the kernel will be built using the compiler's LTO feature. 729dc5723b0SSami Tolvanen 730dc5723b0SSami Tolvanenconfig LTO_CLANG 731dc5723b0SSami Tolvanen bool 732dc5723b0SSami Tolvanen select LTO 733dc5723b0SSami Tolvanen help 734dc5723b0SSami Tolvanen Selected if the kernel will be built using Clang's LTO feature. 735dc5723b0SSami Tolvanen 736dc5723b0SSami Tolvanenconfig ARCH_SUPPORTS_LTO_CLANG 737dc5723b0SSami Tolvanen bool 738dc5723b0SSami Tolvanen help 739dc5723b0SSami Tolvanen An architecture should select this option if it supports: 740dc5723b0SSami Tolvanen - compiling with Clang, 741dc5723b0SSami Tolvanen - compiling inline assembly with Clang's integrated assembler, 742dc5723b0SSami Tolvanen - and linking with LLD. 743dc5723b0SSami Tolvanen 744dc5723b0SSami Tolvanenconfig ARCH_SUPPORTS_LTO_CLANG_THIN 745dc5723b0SSami Tolvanen bool 746dc5723b0SSami Tolvanen help 747dc5723b0SSami Tolvanen An architecture should select this option if it can support Clang's 748dc5723b0SSami Tolvanen ThinLTO mode. 749dc5723b0SSami Tolvanen 750dc5723b0SSami Tolvanenconfig HAS_LTO_CLANG 751dc5723b0SSami Tolvanen def_bool y 7521e68a8afSNathan Chancellor depends on CC_IS_CLANG && LD_IS_LLD && AS_IS_LLVM 753dc5723b0SSami Tolvanen depends on $(success,$(NM) --help | head -n 1 | grep -qi llvm) 754dc5723b0SSami Tolvanen depends on $(success,$(AR) --help | head -n 1 | grep -qi llvm) 755dc5723b0SSami Tolvanen depends on ARCH_SUPPORTS_LTO_CLANG 756dc5723b0SSami Tolvanen depends on !FTRACE_MCOUNT_USE_RECORDMCOUNT 757349fde59SJakob Koschel # https://github.com/ClangBuiltLinux/linux/issues/1721 758349fde59SJakob Koschel depends on (!KASAN || KASAN_HW_TAGS || CLANG_VERSION >= 170000) || !DEBUG_INFO 759349fde59SJakob Koschel depends on (!KCOV || CLANG_VERSION >= 170000) || !DEBUG_INFO 760dc5723b0SSami Tolvanen depends on !GCOV_KERNEL 761dc5723b0SSami Tolvanen help 762dc5723b0SSami Tolvanen The compiler and Kconfig options support building with Clang's 763dc5723b0SSami Tolvanen LTO. 764dc5723b0SSami Tolvanen 765dc5723b0SSami Tolvanenchoice 766dc5723b0SSami Tolvanen prompt "Link Time Optimization (LTO)" 767dc5723b0SSami Tolvanen default LTO_NONE 768dc5723b0SSami Tolvanen help 769dc5723b0SSami Tolvanen This option enables Link Time Optimization (LTO), which allows the 770dc5723b0SSami Tolvanen compiler to optimize binaries globally. 771dc5723b0SSami Tolvanen 772dc5723b0SSami Tolvanen If unsure, select LTO_NONE. Note that LTO is very resource-intensive 773dc5723b0SSami Tolvanen so it's disabled by default. 774dc5723b0SSami Tolvanen 775dc5723b0SSami Tolvanenconfig LTO_NONE 776dc5723b0SSami Tolvanen bool "None" 777dc5723b0SSami Tolvanen help 778dc5723b0SSami Tolvanen Build the kernel normally, without Link Time Optimization (LTO). 779dc5723b0SSami Tolvanen 780dc5723b0SSami Tolvanenconfig LTO_CLANG_FULL 781dc5723b0SSami Tolvanen bool "Clang Full LTO (EXPERIMENTAL)" 782dc5723b0SSami Tolvanen depends on HAS_LTO_CLANG 783dc5723b0SSami Tolvanen depends on !COMPILE_TEST 784dc5723b0SSami Tolvanen select LTO_CLANG 785dc5723b0SSami Tolvanen help 786dc5723b0SSami Tolvanen This option enables Clang's full Link Time Optimization (LTO), which 787dc5723b0SSami Tolvanen allows the compiler to optimize the kernel globally. If you enable 788dc5723b0SSami Tolvanen this option, the compiler generates LLVM bitcode instead of ELF 789dc5723b0SSami Tolvanen object files, and the actual compilation from bitcode happens at 790dc5723b0SSami Tolvanen the LTO link step, which may take several minutes depending on the 791dc5723b0SSami Tolvanen kernel configuration. More information can be found from LLVM's 792dc5723b0SSami Tolvanen documentation: 793dc5723b0SSami Tolvanen 794dc5723b0SSami Tolvanen https://llvm.org/docs/LinkTimeOptimization.html 795dc5723b0SSami Tolvanen 796dc5723b0SSami Tolvanen During link time, this option can use a large amount of RAM, and 797dc5723b0SSami Tolvanen may take much longer than the ThinLTO option. 798dc5723b0SSami Tolvanen 799dc5723b0SSami Tolvanenconfig LTO_CLANG_THIN 800dc5723b0SSami Tolvanen bool "Clang ThinLTO (EXPERIMENTAL)" 801dc5723b0SSami Tolvanen depends on HAS_LTO_CLANG && ARCH_SUPPORTS_LTO_CLANG_THIN 802dc5723b0SSami Tolvanen select LTO_CLANG 803dc5723b0SSami Tolvanen help 804dc5723b0SSami Tolvanen This option enables Clang's ThinLTO, which allows for parallel 805dc5723b0SSami Tolvanen optimization and faster incremental compiles compared to the 806dc5723b0SSami Tolvanen CONFIG_LTO_CLANG_FULL option. More information can be found 807dc5723b0SSami Tolvanen from Clang's documentation: 808dc5723b0SSami Tolvanen 809dc5723b0SSami Tolvanen https://clang.llvm.org/docs/ThinLTO.html 810dc5723b0SSami Tolvanen 811dc5723b0SSami Tolvanen If unsure, say Y. 812dc5723b0SSami Tolvanenendchoice 813dc5723b0SSami Tolvanen 814cf68fffbSSami Tolvanenconfig ARCH_SUPPORTS_CFI_CLANG 815cf68fffbSSami Tolvanen bool 816cf68fffbSSami Tolvanen help 817cf68fffbSSami Tolvanen An architecture should select this option if it can support Clang's 818cf68fffbSSami Tolvanen Control-Flow Integrity (CFI) checking. 819cf68fffbSSami Tolvanen 82089245600SSami Tolvanenconfig ARCH_USES_CFI_TRAPS 82189245600SSami Tolvanen bool 82289245600SSami Tolvanen 823cf68fffbSSami Tolvanenconfig CFI_CLANG 824cf68fffbSSami Tolvanen bool "Use Clang's Control Flow Integrity (CFI)" 82589245600SSami Tolvanen depends on ARCH_SUPPORTS_CFI_CLANG 82689245600SSami Tolvanen depends on $(cc-option,-fsanitize=kcfi) 827cf68fffbSSami Tolvanen help 828c4ca2276SLiu Song This option enables Clang's forward-edge Control Flow Integrity 829cf68fffbSSami Tolvanen (CFI) checking, where the compiler injects a runtime check to each 830cf68fffbSSami Tolvanen indirect function call to ensure the target is a valid function with 831cf68fffbSSami Tolvanen the correct static type. This restricts possible call targets and 832cf68fffbSSami Tolvanen makes it more difficult for an attacker to exploit bugs that allow 833cf68fffbSSami Tolvanen the modification of stored function pointers. More information can be 834cf68fffbSSami Tolvanen found from Clang's documentation: 835cf68fffbSSami Tolvanen 836cf68fffbSSami Tolvanen https://clang.llvm.org/docs/ControlFlowIntegrity.html 837cf68fffbSSami Tolvanen 838cf68fffbSSami Tolvanenconfig CFI_PERMISSIVE 839cf68fffbSSami Tolvanen bool "Use CFI in permissive mode" 840cf68fffbSSami Tolvanen depends on CFI_CLANG 841cf68fffbSSami Tolvanen help 842cf68fffbSSami Tolvanen When selected, Control Flow Integrity (CFI) violations result in a 843cf68fffbSSami Tolvanen warning instead of a kernel panic. This option should only be used 844cf68fffbSSami Tolvanen for finding indirect call type mismatches during development. 845cf68fffbSSami Tolvanen 846cf68fffbSSami Tolvanen If unsure, say N. 847cf68fffbSSami Tolvanen 8480f60a8efSKees Cookconfig HAVE_ARCH_WITHIN_STACK_FRAMES 8490f60a8efSKees Cook bool 8500f60a8efSKees Cook help 8510f60a8efSKees Cook An architecture should select this if it can walk the kernel stack 8520f60a8efSKees Cook frames to determine if an object is part of either the arguments 8530f60a8efSKees Cook or local variables (i.e. that it excludes saved return addresses, 8540f60a8efSKees Cook and similar) by implementing an inline arch_within_stack_frames(), 8550f60a8efSKees Cook which is used by CONFIG_HARDENED_USERCOPY. 8560f60a8efSKees Cook 85724a9c541SFrederic Weisbeckerconfig HAVE_CONTEXT_TRACKING_USER 8582b1d5024SFrederic Weisbecker bool 8592b1d5024SFrederic Weisbecker help 86091d1aa43SFrederic Weisbecker Provide kernel/user boundaries probes necessary for subsystems 86191d1aa43SFrederic Weisbecker that need it, such as userspace RCU extended quiescent state. 862490f561bSFrederic Weisbecker Syscalls need to be wrapped inside user_exit()-user_enter(), either 863490f561bSFrederic Weisbecker optimized behind static key or through the slow path using TIF_NOHZ 864490f561bSFrederic Weisbecker flag. Exceptions handlers must be wrapped as well. Irqs are already 8656f0e6c15SFrederic Weisbecker protected inside ct_irq_enter/ct_irq_exit() but preemption or signal 866490f561bSFrederic Weisbecker handling on irq exit still need to be protected. 867490f561bSFrederic Weisbecker 86824a9c541SFrederic Weisbeckerconfig HAVE_CONTEXT_TRACKING_USER_OFFSTACK 86983c2da2eSFrederic Weisbecker bool 87083c2da2eSFrederic Weisbecker help 87183c2da2eSFrederic Weisbecker Architecture neither relies on exception_enter()/exception_exit() 87283c2da2eSFrederic Weisbecker nor on schedule_user(). Also preempt_schedule_notrace() and 87383c2da2eSFrederic Weisbecker preempt_schedule_irq() can't be called in a preemptible section 87483c2da2eSFrederic Weisbecker while context tracking is CONTEXT_USER. This feature reflects a sane 87583c2da2eSFrederic Weisbecker entry implementation where the following requirements are met on 87683c2da2eSFrederic Weisbecker critical entry code, ie: before user_exit() or after user_enter(): 87783c2da2eSFrederic Weisbecker 87883c2da2eSFrederic Weisbecker - Critical entry code isn't preemptible (or better yet: 87983c2da2eSFrederic Weisbecker not interruptible). 880493c1822SFrederic Weisbecker - No use of RCU read side critical sections, unless ct_nmi_enter() 88183c2da2eSFrederic Weisbecker got called. 88283c2da2eSFrederic Weisbecker - No use of instrumentation, unless instrumentation_begin() got 88383c2da2eSFrederic Weisbecker called. 88483c2da2eSFrederic Weisbecker 885490f561bSFrederic Weisbeckerconfig HAVE_TIF_NOHZ 886490f561bSFrederic Weisbecker bool 887490f561bSFrederic Weisbecker help 888490f561bSFrederic Weisbecker Arch relies on TIF_NOHZ and syscall slow path to implement context 889490f561bSFrederic Weisbecker tracking calls to user_enter()/user_exit(). 8902b1d5024SFrederic Weisbecker 891b952741cSFrederic Weisbeckerconfig HAVE_VIRT_CPU_ACCOUNTING 892b952741cSFrederic Weisbecker bool 893b952741cSFrederic Weisbecker 8942b91ec9fSFrederic Weisbeckerconfig HAVE_VIRT_CPU_ACCOUNTING_IDLE 8952b91ec9fSFrederic Weisbecker bool 8962b91ec9fSFrederic Weisbecker help 8972b91ec9fSFrederic Weisbecker Architecture has its own way to account idle CPU time and therefore 8982b91ec9fSFrederic Weisbecker doesn't implement vtime_account_idle(). 8992b91ec9fSFrederic Weisbecker 90040565b5aSStanislaw Gruszkaconfig ARCH_HAS_SCALED_CPUTIME 90140565b5aSStanislaw Gruszka bool 90240565b5aSStanislaw Gruszka 903554b0004SKevin Hilmanconfig HAVE_VIRT_CPU_ACCOUNTING_GEN 904554b0004SKevin Hilman bool 905554b0004SKevin Hilman default y if 64BIT 906554b0004SKevin Hilman help 907554b0004SKevin Hilman With VIRT_CPU_ACCOUNTING_GEN, cputime_t becomes 64-bit. 908554b0004SKevin Hilman Before enabling this option, arch code must be audited 909554b0004SKevin Hilman to ensure there are no races in concurrent read/write of 910554b0004SKevin Hilman cputime_t. For example, reading/writing 64-bit cputime_t on 911554b0004SKevin Hilman some 32-bit arches may require multiple accesses, so proper 912554b0004SKevin Hilman locking is needed to protect against concurrent accesses. 913554b0004SKevin Hilman 914fdf9c356SFrederic Weisbeckerconfig HAVE_IRQ_TIME_ACCOUNTING 915fdf9c356SFrederic Weisbecker bool 916fdf9c356SFrederic Weisbecker help 917fdf9c356SFrederic Weisbecker Archs need to ensure they use a high enough resolution clock to 918fdf9c356SFrederic Weisbecker support irq time accounting and then call enable_sched_clock_irqtime(). 919fdf9c356SFrederic Weisbecker 920c49dd340SKalesh Singhconfig HAVE_MOVE_PUD 921c49dd340SKalesh Singh bool 922c49dd340SKalesh Singh help 923c49dd340SKalesh Singh Architectures that select this are able to move page tables at the 924c49dd340SKalesh Singh PUD level. If there are only 3 page table levels, the move effectively 925c49dd340SKalesh Singh happens at the PGD level. 926c49dd340SKalesh Singh 9272c91bd4aSJoel Fernandes (Google)config HAVE_MOVE_PMD 9282c91bd4aSJoel Fernandes (Google) bool 9292c91bd4aSJoel Fernandes (Google) help 9302c91bd4aSJoel Fernandes (Google) Archs that select this are able to move page tables at the PMD level. 9312c91bd4aSJoel Fernandes (Google) 93215626062SGerald Schaeferconfig HAVE_ARCH_TRANSPARENT_HUGEPAGE 93315626062SGerald Schaefer bool 93415626062SGerald Schaefer 935a00cc7d9SMatthew Wilcoxconfig HAVE_ARCH_TRANSPARENT_HUGEPAGE_PUD 936a00cc7d9SMatthew Wilcox bool 937a00cc7d9SMatthew Wilcox 9380ddab1d2SToshi Kaniconfig HAVE_ARCH_HUGE_VMAP 9390ddab1d2SToshi Kani bool 9400ddab1d2SToshi Kani 941121e6f32SNicholas Piggin# 942121e6f32SNicholas Piggin# Archs that select this would be capable of PMD-sized vmaps (i.e., 943559089e0SSong Liu# arch_vmap_pmd_supported() returns true). The VM_ALLOW_HUGE_VMAP flag 944559089e0SSong Liu# must be used to enable allocations to use hugepages. 945121e6f32SNicholas Piggin# 946121e6f32SNicholas Pigginconfig HAVE_ARCH_HUGE_VMALLOC 947121e6f32SNicholas Piggin depends on HAVE_ARCH_HUGE_VMAP 948121e6f32SNicholas Piggin bool 949121e6f32SNicholas Piggin 9503876d4a3SAlexandre Ghiticonfig ARCH_WANT_HUGE_PMD_SHARE 9513876d4a3SAlexandre Ghiti bool 9523876d4a3SAlexandre Ghiti 9532f0584f3SRick Edgecombe# Archs that want to use pmd_mkwrite on kernel memory need it defined even 9542f0584f3SRick Edgecombe# if there are no userspace memory management features that use it 9552f0584f3SRick Edgecombeconfig ARCH_WANT_KERNEL_PMD_MKWRITE 9562f0584f3SRick Edgecombe bool 9572f0584f3SRick Edgecombe 9582f0584f3SRick Edgecombeconfig ARCH_WANT_PMD_MKWRITE 9592f0584f3SRick Edgecombe def_bool TRANSPARENT_HUGEPAGE || ARCH_WANT_KERNEL_PMD_MKWRITE 9602f0584f3SRick Edgecombe 9610f8975ecSPavel Emelyanovconfig HAVE_ARCH_SOFT_DIRTY 9620f8975ecSPavel Emelyanov bool 9630f8975ecSPavel Emelyanov 964786d35d4SDavid Howellsconfig HAVE_MOD_ARCH_SPECIFIC 965786d35d4SDavid Howells bool 966786d35d4SDavid Howells help 967786d35d4SDavid Howells The arch uses struct mod_arch_specific to store data. Many arches 968786d35d4SDavid Howells just need a simple module loader without arch specific data - those 969786d35d4SDavid Howells should not enable this. 970786d35d4SDavid Howells 971786d35d4SDavid Howellsconfig MODULES_USE_ELF_RELA 972786d35d4SDavid Howells bool 973786d35d4SDavid Howells help 974786d35d4SDavid Howells Modules only use ELF RELA relocations. Modules with ELF REL 975786d35d4SDavid Howells relocations will give an error. 976786d35d4SDavid Howells 977786d35d4SDavid Howellsconfig MODULES_USE_ELF_REL 978786d35d4SDavid Howells bool 979786d35d4SDavid Howells help 980786d35d4SDavid Howells Modules only use ELF REL relocations. Modules with ELF RELA 981786d35d4SDavid Howells relocations will give an error. 982786d35d4SDavid Howells 98301dc0386SChristophe Leroyconfig ARCH_WANTS_MODULES_DATA_IN_VMALLOC 98401dc0386SChristophe Leroy bool 98501dc0386SChristophe Leroy help 98601dc0386SChristophe Leroy For architectures like powerpc/32 which have constraints on module 98701dc0386SChristophe Leroy allocation and need to allocate module data outside of module area. 98801dc0386SChristophe Leroy 989223b5e57SMike Rapoport (IBM)config ARCH_WANTS_EXECMEM_LATE 990223b5e57SMike Rapoport (IBM) bool 991223b5e57SMike Rapoport (IBM) help 992223b5e57SMike Rapoport (IBM) For architectures that do not allocate executable memory early on 993223b5e57SMike Rapoport (IBM) boot, but rather require its initialization late when there is 994223b5e57SMike Rapoport (IBM) enough entropy for module space randomization, for instance 995223b5e57SMike Rapoport (IBM) arm64. 996223b5e57SMike Rapoport (IBM) 997cc1f0274SFrederic Weisbeckerconfig HAVE_IRQ_EXIT_ON_IRQ_STACK 998cc1f0274SFrederic Weisbecker bool 999cc1f0274SFrederic Weisbecker help 1000cc1f0274SFrederic Weisbecker Architecture doesn't only execute the irq handler on the irq stack 1001cc1f0274SFrederic Weisbecker but also irq_exit(). This way we can process softirqs on this irq 1002cc1f0274SFrederic Weisbecker stack instead of switching to a new one when we call __do_softirq() 1003cc1f0274SFrederic Weisbecker in the end of an hardirq. 1004cc1f0274SFrederic Weisbecker This spares a stack switch and improves cache usage on softirq 1005cc1f0274SFrederic Weisbecker processing. 1006cc1f0274SFrederic Weisbecker 1007cd1a41ceSThomas Gleixnerconfig HAVE_SOFTIRQ_ON_OWN_STACK 1008cd1a41ceSThomas Gleixner bool 1009cd1a41ceSThomas Gleixner help 1010cd1a41ceSThomas Gleixner Architecture provides a function to run __do_softirq() on a 1011c226bc3cSColin Ian King separate stack. 1012cd1a41ceSThomas Gleixner 10138cbb2b50SSebastian Andrzej Siewiorconfig SOFTIRQ_ON_OWN_STACK 10148cbb2b50SSebastian Andrzej Siewior def_bool HAVE_SOFTIRQ_ON_OWN_STACK && !PREEMPT_RT 10158cbb2b50SSebastian Andrzej Siewior 101612700c17SArnd Bergmannconfig ALTERNATE_USER_ADDRESS_SPACE 101712700c17SArnd Bergmann bool 101812700c17SArnd Bergmann help 101912700c17SArnd Bergmann Architectures set this when the CPU uses separate address 102012700c17SArnd Bergmann spaces for kernel and user space pointers. In this case, the 102112700c17SArnd Bergmann access_ok() check on a __user pointer is skipped. 102212700c17SArnd Bergmann 1023235a8f02SKirill A. Shutemovconfig PGTABLE_LEVELS 1024235a8f02SKirill A. Shutemov int 1025235a8f02SKirill A. Shutemov default 2 1026235a8f02SKirill A. Shutemov 10272b68f6caSKees Cookconfig ARCH_HAS_ELF_RANDOMIZE 10282b68f6caSKees Cook bool 10292b68f6caSKees Cook help 10302b68f6caSKees Cook An architecture supports choosing randomized locations for 10312b68f6caSKees Cook stack, mmap, brk, and ET_DYN. Defined functions: 10322b68f6caSKees Cook - arch_mmap_rnd() 1033204db6edSKees Cook - arch_randomize_brk() 10342b68f6caSKees Cook 1035d07e2259SDaniel Cashmanconfig HAVE_ARCH_MMAP_RND_BITS 1036d07e2259SDaniel Cashman bool 1037d07e2259SDaniel Cashman help 1038d07e2259SDaniel Cashman An arch should select this symbol if it supports setting a variable 1039d07e2259SDaniel Cashman number of bits for use in establishing the base address for mmap 1040d07e2259SDaniel Cashman allocations, has MMU enabled and provides values for both: 1041d07e2259SDaniel Cashman - ARCH_MMAP_RND_BITS_MIN 1042d07e2259SDaniel Cashman - ARCH_MMAP_RND_BITS_MAX 1043d07e2259SDaniel Cashman 10445f56a5dfSJiri Slabyconfig HAVE_EXIT_THREAD 10455f56a5dfSJiri Slaby bool 10465f56a5dfSJiri Slaby help 10475f56a5dfSJiri Slaby An architecture implements exit_thread. 10485f56a5dfSJiri Slaby 1049d07e2259SDaniel Cashmanconfig ARCH_MMAP_RND_BITS_MIN 1050d07e2259SDaniel Cashman int 1051d07e2259SDaniel Cashman 1052d07e2259SDaniel Cashmanconfig ARCH_MMAP_RND_BITS_MAX 1053d07e2259SDaniel Cashman int 1054d07e2259SDaniel Cashman 1055d07e2259SDaniel Cashmanconfig ARCH_MMAP_RND_BITS_DEFAULT 1056d07e2259SDaniel Cashman int 1057d07e2259SDaniel Cashman 1058d07e2259SDaniel Cashmanconfig ARCH_MMAP_RND_BITS 1059d07e2259SDaniel Cashman int "Number of bits to use for ASLR of mmap base address" if EXPERT 1060d07e2259SDaniel Cashman range ARCH_MMAP_RND_BITS_MIN ARCH_MMAP_RND_BITS_MAX 1061d07e2259SDaniel Cashman default ARCH_MMAP_RND_BITS_DEFAULT if ARCH_MMAP_RND_BITS_DEFAULT 1062d07e2259SDaniel Cashman default ARCH_MMAP_RND_BITS_MIN 1063d07e2259SDaniel Cashman depends on HAVE_ARCH_MMAP_RND_BITS 1064d07e2259SDaniel Cashman help 1065d07e2259SDaniel Cashman This value can be used to select the number of bits to use to 1066d07e2259SDaniel Cashman determine the random offset to the base address of vma regions 1067d07e2259SDaniel Cashman resulting from mmap allocations. This value will be bounded 1068d07e2259SDaniel Cashman by the architecture's minimum and maximum supported values. 1069d07e2259SDaniel Cashman 1070d07e2259SDaniel Cashman This value can be changed after boot using the 1071d07e2259SDaniel Cashman /proc/sys/vm/mmap_rnd_bits tunable 1072d07e2259SDaniel Cashman 1073d07e2259SDaniel Cashmanconfig HAVE_ARCH_MMAP_RND_COMPAT_BITS 1074d07e2259SDaniel Cashman bool 1075d07e2259SDaniel Cashman help 1076d07e2259SDaniel Cashman An arch should select this symbol if it supports running applications 1077d07e2259SDaniel Cashman in compatibility mode, supports setting a variable number of bits for 1078d07e2259SDaniel Cashman use in establishing the base address for mmap allocations, has MMU 1079d07e2259SDaniel Cashman enabled and provides values for both: 1080d07e2259SDaniel Cashman - ARCH_MMAP_RND_COMPAT_BITS_MIN 1081d07e2259SDaniel Cashman - ARCH_MMAP_RND_COMPAT_BITS_MAX 1082d07e2259SDaniel Cashman 1083d07e2259SDaniel Cashmanconfig ARCH_MMAP_RND_COMPAT_BITS_MIN 1084d07e2259SDaniel Cashman int 1085d07e2259SDaniel Cashman 1086d07e2259SDaniel Cashmanconfig ARCH_MMAP_RND_COMPAT_BITS_MAX 1087d07e2259SDaniel Cashman int 1088d07e2259SDaniel Cashman 1089d07e2259SDaniel Cashmanconfig ARCH_MMAP_RND_COMPAT_BITS_DEFAULT 1090d07e2259SDaniel Cashman int 1091d07e2259SDaniel Cashman 1092d07e2259SDaniel Cashmanconfig ARCH_MMAP_RND_COMPAT_BITS 1093d07e2259SDaniel Cashman int "Number of bits to use for ASLR of mmap base address for compatible applications" if EXPERT 1094d07e2259SDaniel Cashman range ARCH_MMAP_RND_COMPAT_BITS_MIN ARCH_MMAP_RND_COMPAT_BITS_MAX 1095d07e2259SDaniel Cashman default ARCH_MMAP_RND_COMPAT_BITS_DEFAULT if ARCH_MMAP_RND_COMPAT_BITS_DEFAULT 1096d07e2259SDaniel Cashman default ARCH_MMAP_RND_COMPAT_BITS_MIN 1097d07e2259SDaniel Cashman depends on HAVE_ARCH_MMAP_RND_COMPAT_BITS 1098d07e2259SDaniel Cashman help 1099d07e2259SDaniel Cashman This value can be used to select the number of bits to use to 1100d07e2259SDaniel Cashman determine the random offset to the base address of vma regions 1101d07e2259SDaniel Cashman resulting from mmap allocations for compatible applications This 1102d07e2259SDaniel Cashman value will be bounded by the architecture's minimum and maximum 1103d07e2259SDaniel Cashman supported values. 1104d07e2259SDaniel Cashman 1105d07e2259SDaniel Cashman This value can be changed after boot using the 1106d07e2259SDaniel Cashman /proc/sys/vm/mmap_rnd_compat_bits tunable 1107d07e2259SDaniel Cashman 11081b028f78SDmitry Safonovconfig HAVE_ARCH_COMPAT_MMAP_BASES 11091b028f78SDmitry Safonov bool 11101b028f78SDmitry Safonov help 11111b028f78SDmitry Safonov This allows 64bit applications to invoke 32-bit mmap() syscall 11121b028f78SDmitry Safonov and vice-versa 32-bit applications to call 64-bit mmap(). 11131b028f78SDmitry Safonov Required for applications doing different bitness syscalls. 11141b028f78SDmitry Safonov 1115ba89f9c8SArnd Bergmannconfig HAVE_PAGE_SIZE_4KB 1116ba89f9c8SArnd Bergmann bool 1117ba89f9c8SArnd Bergmann 1118ba89f9c8SArnd Bergmannconfig HAVE_PAGE_SIZE_8KB 1119ba89f9c8SArnd Bergmann bool 1120ba89f9c8SArnd Bergmann 1121ba89f9c8SArnd Bergmannconfig HAVE_PAGE_SIZE_16KB 1122ba89f9c8SArnd Bergmann bool 1123ba89f9c8SArnd Bergmann 1124ba89f9c8SArnd Bergmannconfig HAVE_PAGE_SIZE_32KB 1125ba89f9c8SArnd Bergmann bool 1126ba89f9c8SArnd Bergmann 1127ba89f9c8SArnd Bergmannconfig HAVE_PAGE_SIZE_64KB 1128ba89f9c8SArnd Bergmann bool 1129ba89f9c8SArnd Bergmann 1130ba89f9c8SArnd Bergmannconfig HAVE_PAGE_SIZE_256KB 1131ba89f9c8SArnd Bergmann bool 1132ba89f9c8SArnd Bergmann 1133ba89f9c8SArnd Bergmannchoice 1134ba89f9c8SArnd Bergmann prompt "MMU page size" 1135ba89f9c8SArnd Bergmann 1136ba89f9c8SArnd Bergmannconfig PAGE_SIZE_4KB 1137ba89f9c8SArnd Bergmann bool "4KiB pages" 1138ba89f9c8SArnd Bergmann depends on HAVE_PAGE_SIZE_4KB 1139ba89f9c8SArnd Bergmann help 1140ba89f9c8SArnd Bergmann This option select the standard 4KiB Linux page size and the only 1141ba89f9c8SArnd Bergmann available option on many architectures. Using 4KiB page size will 1142ba89f9c8SArnd Bergmann minimize memory consumption and is therefore recommended for low 1143ba89f9c8SArnd Bergmann memory systems. 1144ba89f9c8SArnd Bergmann Some software that is written for x86 systems makes incorrect 1145ba89f9c8SArnd Bergmann assumptions about the page size and only runs on 4KiB pages. 1146ba89f9c8SArnd Bergmann 1147ba89f9c8SArnd Bergmannconfig PAGE_SIZE_8KB 1148ba89f9c8SArnd Bergmann bool "8KiB pages" 1149ba89f9c8SArnd Bergmann depends on HAVE_PAGE_SIZE_8KB 1150ba89f9c8SArnd Bergmann help 1151ba89f9c8SArnd Bergmann This option is the only supported page size on a few older 1152ba89f9c8SArnd Bergmann processors, and can be slightly faster than 4KiB pages. 1153ba89f9c8SArnd Bergmann 1154ba89f9c8SArnd Bergmannconfig PAGE_SIZE_16KB 1155ba89f9c8SArnd Bergmann bool "16KiB pages" 1156ba89f9c8SArnd Bergmann depends on HAVE_PAGE_SIZE_16KB 1157ba89f9c8SArnd Bergmann help 1158ba89f9c8SArnd Bergmann This option is usually a good compromise between memory 1159ba89f9c8SArnd Bergmann consumption and performance for typical desktop and server 1160ba89f9c8SArnd Bergmann workloads, often saving a level of page table lookups compared 1161ba89f9c8SArnd Bergmann to 4KB pages as well as reducing TLB pressure and overhead of 1162ba89f9c8SArnd Bergmann per-page operations in the kernel at the expense of a larger 1163ba89f9c8SArnd Bergmann page cache. 1164ba89f9c8SArnd Bergmann 1165ba89f9c8SArnd Bergmannconfig PAGE_SIZE_32KB 1166ba89f9c8SArnd Bergmann bool "32KiB pages" 1167ba89f9c8SArnd Bergmann depends on HAVE_PAGE_SIZE_32KB 1168ba89f9c8SArnd Bergmann help 1169ba89f9c8SArnd Bergmann Using 32KiB page size will result in slightly higher performance 1170ba89f9c8SArnd Bergmann kernel at the price of higher memory consumption compared to 1171ba89f9c8SArnd Bergmann 16KiB pages. This option is available only on cnMIPS cores. 1172ba89f9c8SArnd Bergmann Note that you will need a suitable Linux distribution to 1173ba89f9c8SArnd Bergmann support this. 1174ba89f9c8SArnd Bergmann 1175ba89f9c8SArnd Bergmannconfig PAGE_SIZE_64KB 1176ba89f9c8SArnd Bergmann bool "64KiB pages" 1177ba89f9c8SArnd Bergmann depends on HAVE_PAGE_SIZE_64KB 1178ba89f9c8SArnd Bergmann help 1179ba89f9c8SArnd Bergmann Using 64KiB page size will result in slightly higher performance 1180ba89f9c8SArnd Bergmann kernel at the price of much higher memory consumption compared to 1181ba89f9c8SArnd Bergmann 4KiB or 16KiB pages. 1182ba89f9c8SArnd Bergmann This is not suitable for general-purpose workloads but the 1183ba89f9c8SArnd Bergmann better performance may be worth the cost for certain types of 1184ba89f9c8SArnd Bergmann supercomputing or database applications that work mostly with 1185ba89f9c8SArnd Bergmann large in-memory data rather than small files. 1186ba89f9c8SArnd Bergmann 1187ba89f9c8SArnd Bergmannconfig PAGE_SIZE_256KB 1188ba89f9c8SArnd Bergmann bool "256KiB pages" 1189ba89f9c8SArnd Bergmann depends on HAVE_PAGE_SIZE_256KB 1190ba89f9c8SArnd Bergmann help 1191ba89f9c8SArnd Bergmann 256KiB pages have little practical value due to their extreme 1192ba89f9c8SArnd Bergmann memory usage. The kernel will only be able to run applications 1193ba89f9c8SArnd Bergmann that have been compiled with '-zmax-page-size' set to 256KiB 1194ba89f9c8SArnd Bergmann (the default is 64KiB or 4KiB on most architectures). 1195ba89f9c8SArnd Bergmann 1196ba89f9c8SArnd Bergmannendchoice 1197ba89f9c8SArnd Bergmann 11981f0e290cSGuenter Roeckconfig PAGE_SIZE_LESS_THAN_64KB 11991f0e290cSGuenter Roeck def_bool y 12001f0e290cSGuenter Roeck depends on !PAGE_SIZE_64KB 1201e4bbd20dSNathan Chancellor depends on PAGE_SIZE_LESS_THAN_256KB 1202e4bbd20dSNathan Chancellor 1203e4bbd20dSNathan Chancellorconfig PAGE_SIZE_LESS_THAN_256KB 1204e4bbd20dSNathan Chancellor def_bool y 12051f0e290cSGuenter Roeck depends on !PAGE_SIZE_256KB 12061f0e290cSGuenter Roeck 1207ba89f9c8SArnd Bergmannconfig PAGE_SHIFT 1208ba89f9c8SArnd Bergmann int 1209ba89f9c8SArnd Bergmann default 12 if PAGE_SIZE_4KB 1210ba89f9c8SArnd Bergmann default 13 if PAGE_SIZE_8KB 1211ba89f9c8SArnd Bergmann default 14 if PAGE_SIZE_16KB 1212ba89f9c8SArnd Bergmann default 15 if PAGE_SIZE_32KB 1213ba89f9c8SArnd Bergmann default 16 if PAGE_SIZE_64KB 1214ba89f9c8SArnd Bergmann default 18 if PAGE_SIZE_256KB 1215ba89f9c8SArnd Bergmann 121667f3977fSAlexandre Ghiti# This allows to use a set of generic functions to determine mmap base 121767f3977fSAlexandre Ghiti# address by giving priority to top-down scheme only if the process 121867f3977fSAlexandre Ghiti# is not in legacy mode (compat task, unlimited stack size or 121967f3977fSAlexandre Ghiti# sysctl_legacy_va_layout). 122067f3977fSAlexandre Ghiti# Architecture that selects this option can provide its own version of: 122167f3977fSAlexandre Ghiti# - STACK_RND_MASK 122267f3977fSAlexandre Ghiticonfig ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT 122367f3977fSAlexandre Ghiti bool 122467f3977fSAlexandre Ghiti depends on MMU 1225e7142bf5SAlexandre Ghiti select ARCH_HAS_ELF_RANDOMIZE 122667f3977fSAlexandre Ghiti 122703f16cd0SJosh Poimboeufconfig HAVE_OBJTOOL 122803f16cd0SJosh Poimboeuf bool 122903f16cd0SJosh Poimboeuf 12304ab7674fSJosh Poimboeufconfig HAVE_JUMP_LABEL_HACK 12314ab7674fSJosh Poimboeuf bool 12324ab7674fSJosh Poimboeuf 123322102f45SJosh Poimboeufconfig HAVE_NOINSTR_HACK 123422102f45SJosh Poimboeuf bool 123522102f45SJosh Poimboeuf 1236489e355bSJosh Poimboeufconfig HAVE_NOINSTR_VALIDATION 1237489e355bSJosh Poimboeuf bool 1238489e355bSJosh Poimboeuf 12395f3da8c0SJosh Poimboeufconfig HAVE_UACCESS_VALIDATION 12405f3da8c0SJosh Poimboeuf bool 12415f3da8c0SJosh Poimboeuf select OBJTOOL 12425f3da8c0SJosh Poimboeuf 1243b9ab5ebbSJosh Poimboeufconfig HAVE_STACK_VALIDATION 1244b9ab5ebbSJosh Poimboeuf bool 1245b9ab5ebbSJosh Poimboeuf help 124603f16cd0SJosh Poimboeuf Architecture supports objtool compile-time frame pointer rule 124703f16cd0SJosh Poimboeuf validation. 1248b9ab5ebbSJosh Poimboeuf 1249af085d90SJosh Poimboeufconfig HAVE_RELIABLE_STACKTRACE 1250af085d90SJosh Poimboeuf bool 1251af085d90SJosh Poimboeuf help 1252140d7e88SMiroslav Benes Architecture has either save_stack_trace_tsk_reliable() or 1253140d7e88SMiroslav Benes arch_stack_walk_reliable() function which only returns a stack trace 1254140d7e88SMiroslav Benes if it can guarantee the trace is reliable. 1255af085d90SJosh Poimboeuf 1256468a9428SGeorge Spelvinconfig HAVE_ARCH_HASH 1257468a9428SGeorge Spelvin bool 1258468a9428SGeorge Spelvin default n 1259468a9428SGeorge Spelvin help 1260468a9428SGeorge Spelvin If this is set, the architecture provides an <asm/hash.h> 1261468a9428SGeorge Spelvin file which provides platform-specific implementations of some 1262468a9428SGeorge Spelvin functions in <linux/hash.h> or fs/namei.c. 1263468a9428SGeorge Spelvin 1264666047feSFinn Thainconfig HAVE_ARCH_NVRAM_OPS 1265666047feSFinn Thain bool 1266666047feSFinn Thain 12673a495511SWilliam Breathitt Grayconfig ISA_BUS_API 12683a495511SWilliam Breathitt Gray def_bool ISA 12693a495511SWilliam Breathitt Gray 1270d2125043SAl Viro# 1271d2125043SAl Viro# ABI hall of shame 1272d2125043SAl Viro# 1273d2125043SAl Viroconfig CLONE_BACKWARDS 1274d2125043SAl Viro bool 1275d2125043SAl Viro help 1276d2125043SAl Viro Architecture has tls passed as the 4th argument of clone(2), 1277d2125043SAl Viro not the 5th one. 1278d2125043SAl Viro 1279d2125043SAl Viroconfig CLONE_BACKWARDS2 1280d2125043SAl Viro bool 1281d2125043SAl Viro help 1282d2125043SAl Viro Architecture has the first two arguments of clone(2) swapped. 1283d2125043SAl Viro 1284dfa9771aSMichal Simekconfig CLONE_BACKWARDS3 1285dfa9771aSMichal Simek bool 1286dfa9771aSMichal Simek help 1287dfa9771aSMichal Simek Architecture has tls passed as the 3rd argument of clone(2), 1288dfa9771aSMichal Simek not the 5th one. 1289dfa9771aSMichal Simek 1290eaca6eaeSAl Viroconfig ODD_RT_SIGACTION 1291eaca6eaeSAl Viro bool 1292eaca6eaeSAl Viro help 1293eaca6eaeSAl Viro Architecture has unusual rt_sigaction(2) arguments 1294eaca6eaeSAl Viro 12950a0e8cdfSAl Viroconfig OLD_SIGSUSPEND 12960a0e8cdfSAl Viro bool 12970a0e8cdfSAl Viro help 12980a0e8cdfSAl Viro Architecture has old sigsuspend(2) syscall, of one-argument variety 12990a0e8cdfSAl Viro 13000a0e8cdfSAl Viroconfig OLD_SIGSUSPEND3 13010a0e8cdfSAl Viro bool 13020a0e8cdfSAl Viro help 13030a0e8cdfSAl Viro Even weirder antique ABI - three-argument sigsuspend(2) 13040a0e8cdfSAl Viro 1305495dfbf7SAl Viroconfig OLD_SIGACTION 1306495dfbf7SAl Viro bool 1307495dfbf7SAl Viro help 1308495dfbf7SAl Viro Architecture has old sigaction(2) syscall. Nope, not the same 1309495dfbf7SAl Viro as OLD_SIGSUSPEND | OLD_SIGSUSPEND3 - alpha has sigsuspend(2), 1310495dfbf7SAl Viro but fairly different variant of sigaction(2), thanks to OSF/1 1311495dfbf7SAl Viro compatibility... 1312495dfbf7SAl Viro 1313495dfbf7SAl Viroconfig COMPAT_OLD_SIGACTION 1314495dfbf7SAl Viro bool 1315495dfbf7SAl Viro 131617435e5fSDeepa Dinamaniconfig COMPAT_32BIT_TIME 1317942437c9SArnd Bergmann bool "Provide system calls for 32-bit time_t" 1318942437c9SArnd Bergmann default !64BIT || COMPAT 131917435e5fSDeepa Dinamani help 132017435e5fSDeepa Dinamani This enables 32 bit time_t support in addition to 64 bit time_t support. 132117435e5fSDeepa Dinamani This is relevant on all 32-bit architectures, and 64-bit architectures 132217435e5fSDeepa Dinamani as part of compat syscall handling. 132317435e5fSDeepa Dinamani 132487a4c375SChristoph Hellwigconfig ARCH_NO_PREEMPT 132587a4c375SChristoph Hellwig bool 132687a4c375SChristoph Hellwig 1327a50a3f4bSThomas Gleixnerconfig ARCH_SUPPORTS_RT 1328a50a3f4bSThomas Gleixner bool 1329a50a3f4bSThomas Gleixner 1330fff7fb0bSZhaoxiu Zengconfig CPU_NO_EFFICIENT_FFS 1331fff7fb0bSZhaoxiu Zeng def_bool n 1332fff7fb0bSZhaoxiu Zeng 1333ba14a194SAndy Lutomirskiconfig HAVE_ARCH_VMAP_STACK 1334ba14a194SAndy Lutomirski def_bool n 1335ba14a194SAndy Lutomirski help 1336ba14a194SAndy Lutomirski An arch should select this symbol if it can support kernel stacks 1337ba14a194SAndy Lutomirski in vmalloc space. This means: 1338ba14a194SAndy Lutomirski 1339ba14a194SAndy Lutomirski - vmalloc space must be large enough to hold many kernel stacks. 1340ba14a194SAndy Lutomirski This may rule out many 32-bit architectures. 1341ba14a194SAndy Lutomirski 1342ba14a194SAndy Lutomirski - Stacks in vmalloc space need to work reliably. For example, if 1343ba14a194SAndy Lutomirski vmap page tables are created on demand, either this mechanism 1344ba14a194SAndy Lutomirski needs to work while the stack points to a virtual address with 1345ba14a194SAndy Lutomirski unpopulated page tables or arch code (switch_to() and switch_mm(), 1346ba14a194SAndy Lutomirski most likely) needs to ensure that the stack's page table entries 1347ba14a194SAndy Lutomirski are populated before running on a possibly unpopulated stack. 1348ba14a194SAndy Lutomirski 1349ba14a194SAndy Lutomirski - If the stack overflows into a guard page, something reasonable 1350ba14a194SAndy Lutomirski should happen. The definition of "reasonable" is flexible, but 1351ba14a194SAndy Lutomirski instantly rebooting without logging anything would be unfriendly. 1352ba14a194SAndy Lutomirski 1353ba14a194SAndy Lutomirskiconfig VMAP_STACK 1354ba14a194SAndy Lutomirski default y 1355ba14a194SAndy Lutomirski bool "Use a virtually-mapped stack" 1356eafb149eSDaniel Axtens depends on HAVE_ARCH_VMAP_STACK 135738dd767dSAndrey Konovalov depends on !KASAN || KASAN_HW_TAGS || KASAN_VMALLOC 1358a7f7f624SMasahiro Yamada help 1359ba14a194SAndy Lutomirski Enable this if you want the use virtually-mapped kernel stacks 1360ba14a194SAndy Lutomirski with guard pages. This causes kernel stack overflows to be 1361ba14a194SAndy Lutomirski caught immediately rather than causing difficult-to-diagnose 1362ba14a194SAndy Lutomirski corruption. 1363ba14a194SAndy Lutomirski 136438dd767dSAndrey Konovalov To use this with software KASAN modes, the architecture must support 136538dd767dSAndrey Konovalov backing virtual mappings with real shadow memory, and KASAN_VMALLOC 136638dd767dSAndrey Konovalov must be enabled. 1367ba14a194SAndy Lutomirski 136839218ff4SKees Cookconfig HAVE_ARCH_RANDOMIZE_KSTACK_OFFSET 136939218ff4SKees Cook def_bool n 137039218ff4SKees Cook help 137139218ff4SKees Cook An arch should select this symbol if it can support kernel stack 137239218ff4SKees Cook offset randomization with calls to add_random_kstack_offset() 137339218ff4SKees Cook during syscall entry and choose_random_kstack_offset() during 137439218ff4SKees Cook syscall exit. Careful removal of -fstack-protector-strong and 137539218ff4SKees Cook -fstack-protector should also be applied to the entry code and 137639218ff4SKees Cook closely examined, as the artificial stack bump looks like an array 137739218ff4SKees Cook to the compiler, so it will attempt to add canary checks regardless 137839218ff4SKees Cook of the static branch state. 137939218ff4SKees Cook 13808cb37a59SMarco Elverconfig RANDOMIZE_KSTACK_OFFSET 13818cb37a59SMarco Elver bool "Support for randomizing kernel stack offset on syscall entry" if EXPERT 13828cb37a59SMarco Elver default y 138339218ff4SKees Cook depends on HAVE_ARCH_RANDOMIZE_KSTACK_OFFSET 1384efa90c11SMarco Elver depends on INIT_STACK_NONE || !CC_IS_CLANG || CLANG_VERSION >= 140000 138539218ff4SKees Cook help 138639218ff4SKees Cook The kernel stack offset can be randomized (after pt_regs) by 138739218ff4SKees Cook roughly 5 bits of entropy, frustrating memory corruption 138839218ff4SKees Cook attacks that depend on stack address determinism or 13898cb37a59SMarco Elver cross-syscall address exposures. 13908cb37a59SMarco Elver 13918cb37a59SMarco Elver The feature is controlled via the "randomize_kstack_offset=on/off" 13928cb37a59SMarco Elver kernel boot param, and if turned off has zero overhead due to its use 13938cb37a59SMarco Elver of static branches (see JUMP_LABEL). 13948cb37a59SMarco Elver 13958cb37a59SMarco Elver If unsure, say Y. 13968cb37a59SMarco Elver 13978cb37a59SMarco Elverconfig RANDOMIZE_KSTACK_OFFSET_DEFAULT 13988cb37a59SMarco Elver bool "Default state of kernel stack offset randomization" 13998cb37a59SMarco Elver depends on RANDOMIZE_KSTACK_OFFSET 14008cb37a59SMarco Elver help 14018cb37a59SMarco Elver Kernel stack offset randomization is controlled by kernel boot param 14028cb37a59SMarco Elver "randomize_kstack_offset=on/off", and this config chooses the default 14038cb37a59SMarco Elver boot state. 140439218ff4SKees Cook 1405ad21fc4fSLaura Abbottconfig ARCH_OPTIONAL_KERNEL_RWX 1406ad21fc4fSLaura Abbott def_bool n 1407ad21fc4fSLaura Abbott 1408ad21fc4fSLaura Abbottconfig ARCH_OPTIONAL_KERNEL_RWX_DEFAULT 1409ad21fc4fSLaura Abbott def_bool n 1410ad21fc4fSLaura Abbott 1411ad21fc4fSLaura Abbottconfig ARCH_HAS_STRICT_KERNEL_RWX 1412ad21fc4fSLaura Abbott def_bool n 1413ad21fc4fSLaura Abbott 14140f5bf6d0SLaura Abbottconfig STRICT_KERNEL_RWX 1415ad21fc4fSLaura Abbott bool "Make kernel text and rodata read-only" if ARCH_OPTIONAL_KERNEL_RWX 1416ad21fc4fSLaura Abbott depends on ARCH_HAS_STRICT_KERNEL_RWX 1417ad21fc4fSLaura Abbott default !ARCH_OPTIONAL_KERNEL_RWX || ARCH_OPTIONAL_KERNEL_RWX_DEFAULT 1418ad21fc4fSLaura Abbott help 1419ad21fc4fSLaura Abbott If this is set, kernel text and rodata memory will be made read-only, 1420ad21fc4fSLaura Abbott and non-text memory will be made non-executable. This provides 1421ad21fc4fSLaura Abbott protection against certain security exploits (e.g. executing the heap 1422ad21fc4fSLaura Abbott or modifying text) 1423ad21fc4fSLaura Abbott 1424ad21fc4fSLaura Abbott These features are considered standard security practice these days. 1425ad21fc4fSLaura Abbott You should say Y here in almost all cases. 1426ad21fc4fSLaura Abbott 1427ad21fc4fSLaura Abbottconfig ARCH_HAS_STRICT_MODULE_RWX 1428ad21fc4fSLaura Abbott def_bool n 1429ad21fc4fSLaura Abbott 14300f5bf6d0SLaura Abbottconfig STRICT_MODULE_RWX 1431ad21fc4fSLaura Abbott bool "Set loadable kernel module data as NX and text as RO" if ARCH_OPTIONAL_KERNEL_RWX 1432ad21fc4fSLaura Abbott depends on ARCH_HAS_STRICT_MODULE_RWX && MODULES 1433ad21fc4fSLaura Abbott default !ARCH_OPTIONAL_KERNEL_RWX || ARCH_OPTIONAL_KERNEL_RWX_DEFAULT 1434ad21fc4fSLaura Abbott help 1435ad21fc4fSLaura Abbott If this is set, module text and rodata memory will be made read-only, 1436ad21fc4fSLaura Abbott and non-text memory will be made non-executable. This provides 1437ad21fc4fSLaura Abbott protection against certain security exploits (e.g. writing to text) 1438ad21fc4fSLaura Abbott 1439ea8c64acSChristoph Hellwig# select if the architecture provides an asm/dma-direct.h header 1440ea8c64acSChristoph Hellwigconfig ARCH_HAS_PHYS_TO_DMA 1441ea8c64acSChristoph Hellwig bool 1442ea8c64acSChristoph Hellwig 144304f264d3SPaul Burtonconfig HAVE_ARCH_COMPILER_H 144404f264d3SPaul Burton bool 144504f264d3SPaul Burton help 144604f264d3SPaul Burton An architecture can select this if it provides an 144704f264d3SPaul Burton asm/compiler.h header that should be included after 144804f264d3SPaul Burton linux/compiler-*.h in order to override macro definitions that those 144904f264d3SPaul Burton headers generally provide. 145004f264d3SPaul Burton 1451271ca788SArd Biesheuvelconfig HAVE_ARCH_PREL32_RELOCATIONS 1452271ca788SArd Biesheuvel bool 1453271ca788SArd Biesheuvel help 1454271ca788SArd Biesheuvel May be selected by an architecture if it supports place-relative 1455271ca788SArd Biesheuvel 32-bit relocations, both in the toolchain and in the module loader, 1456271ca788SArd Biesheuvel in which case relative references can be used in special sections 1457271ca788SArd Biesheuvel for PCI fixup, initcalls etc which are only half the size on 64 bit 1458271ca788SArd Biesheuvel architectures, and don't require runtime relocation on relocatable 1459271ca788SArd Biesheuvel kernels. 1460271ca788SArd Biesheuvel 1461ce9084baSArd Biesheuvelconfig ARCH_USE_MEMREMAP_PROT 1462ce9084baSArd Biesheuvel bool 1463ce9084baSArd Biesheuvel 1464fb346fd9SWaiman Longconfig LOCK_EVENT_COUNTS 1465fb346fd9SWaiman Long bool "Locking event counts collection" 1466fb346fd9SWaiman Long depends on DEBUG_FS 1467a7f7f624SMasahiro Yamada help 1468fb346fd9SWaiman Long Enable light-weight counting of various locking related events 1469fb346fd9SWaiman Long in the system with minimal performance impact. This reduces 1470fb346fd9SWaiman Long the chance of application behavior change because of timing 1471fb346fd9SWaiman Long differences. The counts are reported via debugfs. 1472fb346fd9SWaiman Long 14735cf896fbSPeter Collingbourne# Select if the architecture has support for applying RELR relocations. 14745cf896fbSPeter Collingbourneconfig ARCH_HAS_RELR 14755cf896fbSPeter Collingbourne bool 14765cf896fbSPeter Collingbourne 14775cf896fbSPeter Collingbourneconfig RELR 14785cf896fbSPeter Collingbourne bool "Use RELR relocation packing" 14795cf896fbSPeter Collingbourne depends on ARCH_HAS_RELR && TOOLS_SUPPORT_RELR 14805cf896fbSPeter Collingbourne default y 14815cf896fbSPeter Collingbourne help 14825cf896fbSPeter Collingbourne Store the kernel's dynamic relocations in the RELR relocation packing 14835cf896fbSPeter Collingbourne format. Requires a compatible linker (LLD supports this feature), as 14845cf896fbSPeter Collingbourne well as compatible NM and OBJCOPY utilities (llvm-nm and llvm-objcopy 14855cf896fbSPeter Collingbourne are compatible). 14865cf896fbSPeter Collingbourne 14870c9c1d56SThiago Jung Bauermannconfig ARCH_HAS_MEM_ENCRYPT 14880c9c1d56SThiago Jung Bauermann bool 14890c9c1d56SThiago Jung Bauermann 149046b49b12STom Lendackyconfig ARCH_HAS_CC_PLATFORM 149146b49b12STom Lendacky bool 149246b49b12STom Lendacky 14930e242208SHassan Naveedconfig HAVE_SPARSE_SYSCALL_NR 14940e242208SHassan Naveed bool 14950e242208SHassan Naveed help 14960e242208SHassan Naveed An architecture should select this if its syscall numbering is sparse 14970e242208SHassan Naveed to save space. For example, MIPS architecture has a syscall array with 14980e242208SHassan Naveed entries at 4000, 5000 and 6000 locations. This option turns on syscall 14990e242208SHassan Naveed related optimizations for a given architecture. 15000e242208SHassan Naveed 1501d60d7de3SSven Schnelleconfig ARCH_HAS_VDSO_DATA 1502d60d7de3SSven Schnelle bool 1503d60d7de3SSven Schnelle 1504115284d8SJosh Poimboeufconfig HAVE_STATIC_CALL 1505115284d8SJosh Poimboeuf bool 1506115284d8SJosh Poimboeuf 15079183c3f9SJosh Poimboeufconfig HAVE_STATIC_CALL_INLINE 15089183c3f9SJosh Poimboeuf bool 15099183c3f9SJosh Poimboeuf depends on HAVE_STATIC_CALL 151003f16cd0SJosh Poimboeuf select OBJTOOL 15119183c3f9SJosh Poimboeuf 15126ef869e0SMichal Hockoconfig HAVE_PREEMPT_DYNAMIC 15136ef869e0SMichal Hocko bool 151499cf983cSMark Rutland 151599cf983cSMark Rutlandconfig HAVE_PREEMPT_DYNAMIC_CALL 151699cf983cSMark Rutland bool 15176ef869e0SMichal Hocko depends on HAVE_STATIC_CALL 151899cf983cSMark Rutland select HAVE_PREEMPT_DYNAMIC 15196ef869e0SMichal Hocko help 152099cf983cSMark Rutland An architecture should select this if it can handle the preemption 152199cf983cSMark Rutland model being selected at boot time using static calls. 152299cf983cSMark Rutland 152399cf983cSMark Rutland Where an architecture selects HAVE_STATIC_CALL_INLINE, any call to a 152499cf983cSMark Rutland preemption function will be patched directly. 152599cf983cSMark Rutland 152699cf983cSMark Rutland Where an architecture does not select HAVE_STATIC_CALL_INLINE, any 152799cf983cSMark Rutland call to a preemption function will go through a trampoline, and the 152899cf983cSMark Rutland trampoline will be patched. 152999cf983cSMark Rutland 153099cf983cSMark Rutland It is strongly advised to support inline static call to avoid any 153199cf983cSMark Rutland overhead. 153299cf983cSMark Rutland 153399cf983cSMark Rutlandconfig HAVE_PREEMPT_DYNAMIC_KEY 153499cf983cSMark Rutland bool 1535a0a12c3eSNick Desaulniers depends on HAVE_ARCH_JUMP_LABEL 153699cf983cSMark Rutland select HAVE_PREEMPT_DYNAMIC 153799cf983cSMark Rutland help 153899cf983cSMark Rutland An architecture should select this if it can handle the preemption 153999cf983cSMark Rutland model being selected at boot time using static keys. 154099cf983cSMark Rutland 154199cf983cSMark Rutland Each preemption function will be given an early return based on a 154299cf983cSMark Rutland static key. This should have slightly lower overhead than non-inline 154399cf983cSMark Rutland static calls, as this effectively inlines each trampoline into the 154499cf983cSMark Rutland start of its callee. This may avoid redundant work, and may 154599cf983cSMark Rutland integrate better with CFI schemes. 154699cf983cSMark Rutland 154799cf983cSMark Rutland This will have greater overhead than using inline static calls as 154899cf983cSMark Rutland the call to the preemption function cannot be entirely elided. 15496ef869e0SMichal Hocko 155059612b24SNathan Chancellorconfig ARCH_WANT_LD_ORPHAN_WARN 155159612b24SNathan Chancellor bool 155259612b24SNathan Chancellor help 155359612b24SNathan Chancellor An arch should select this symbol once all linker sections are explicitly 155459612b24SNathan Chancellor included, size-asserted, or discarded in the linker scripts. This is 155559612b24SNathan Chancellor important because we never want expected sections to be placed heuristically 155659612b24SNathan Chancellor by the linker, since the locations of such sections can change between linker 155759612b24SNathan Chancellor versions. 155859612b24SNathan Chancellor 15594f5b0c17SMike Rapoportconfig HAVE_ARCH_PFN_VALID 15604f5b0c17SMike Rapoport bool 15614f5b0c17SMike Rapoport 15625d6ad668SMike Rapoportconfig ARCH_SUPPORTS_DEBUG_PAGEALLOC 15635d6ad668SMike Rapoport bool 15645d6ad668SMike Rapoport 1565df4e817bSPasha Tatashinconfig ARCH_SUPPORTS_PAGE_TABLE_CHECK 1566df4e817bSPasha Tatashin bool 1567df4e817bSPasha Tatashin 15682ca408d9SBrian Gerstconfig ARCH_SPLIT_ARG64 15692ca408d9SBrian Gerst bool 15702ca408d9SBrian Gerst help 15712ca408d9SBrian Gerst If a 32-bit architecture requires 64-bit arguments to be split into 15722ca408d9SBrian Gerst pairs of 32-bit arguments, select this option. 15732ca408d9SBrian Gerst 15747facdc42SAl Viroconfig ARCH_HAS_ELFCORE_COMPAT 15757facdc42SAl Viro bool 15767facdc42SAl Viro 157758e106e7SBalbir Singhconfig ARCH_HAS_PARANOID_L1D_FLUSH 157858e106e7SBalbir Singh bool 157958e106e7SBalbir Singh 1580d593d64fSPrasad Sodagudiconfig ARCH_HAVE_TRACE_MMIO_ACCESS 1581d593d64fSPrasad Sodagudi bool 1582d593d64fSPrasad Sodagudi 15831bdda24cSThomas Gleixnerconfig DYNAMIC_SIGFRAME 15841bdda24cSThomas Gleixner bool 15851bdda24cSThomas Gleixner 158650468e43SJarkko Sakkinen# Select, if arch has a named attribute group bound to NUMA device nodes. 158750468e43SJarkko Sakkinenconfig HAVE_ARCH_NODE_DEV_GROUP 158850468e43SJarkko Sakkinen bool 158950468e43SJarkko Sakkinen 159071ce1ab5SKinsey Hoconfig ARCH_HAS_HW_PTE_YOUNG 159171ce1ab5SKinsey Ho bool 159271ce1ab5SKinsey Ho help 159371ce1ab5SKinsey Ho Architectures that select this option are capable of setting the 159471ce1ab5SKinsey Ho accessed bit in PTE entries when using them as part of linear address 159571ce1ab5SKinsey Ho translations. Architectures that require runtime check should select 159671ce1ab5SKinsey Ho this option and override arch_has_hw_pte_young(). 159771ce1ab5SKinsey Ho 1598eed9a328SYu Zhaoconfig ARCH_HAS_NONLEAF_PMD_YOUNG 1599eed9a328SYu Zhao bool 1600eed9a328SYu Zhao help 1601eed9a328SYu Zhao Architectures that select this option are capable of setting the 1602eed9a328SYu Zhao accessed bit in non-leaf PMD entries when using them as part of linear 1603eed9a328SYu Zhao address translations. Page table walkers that clear the accessed bit 1604eed9a328SYu Zhao may use this capability to reduce their search space. 1605eed9a328SYu Zhao 16066cbd1d6dSSamuel Hollandconfig ARCH_HAS_KERNEL_FPU_SUPPORT 16076cbd1d6dSSamuel Holland bool 16086cbd1d6dSSamuel Holland help 16096cbd1d6dSSamuel Holland Architectures that select this option can run floating-point code in 16106cbd1d6dSSamuel Holland the kernel, as described in Documentation/core-api/floating-point.rst. 16116cbd1d6dSSamuel Holland 16122521f2c2SPeter Oberparleitersource "kernel/gcov/Kconfig" 161345332b1bSMasahiro Yamada 161445332b1bSMasahiro Yamadasource "scripts/gcc-plugins/Kconfig" 1615fa1b5d09SLinus Torvalds 1616d49a0626SPeter Zijlstraconfig FUNCTION_ALIGNMENT_4B 1617d49a0626SPeter Zijlstra bool 1618d49a0626SPeter Zijlstra 1619d49a0626SPeter Zijlstraconfig FUNCTION_ALIGNMENT_8B 1620d49a0626SPeter Zijlstra bool 1621d49a0626SPeter Zijlstra 1622d49a0626SPeter Zijlstraconfig FUNCTION_ALIGNMENT_16B 1623d49a0626SPeter Zijlstra bool 1624d49a0626SPeter Zijlstra 1625d49a0626SPeter Zijlstraconfig FUNCTION_ALIGNMENT_32B 1626d49a0626SPeter Zijlstra bool 1627d49a0626SPeter Zijlstra 1628d49a0626SPeter Zijlstraconfig FUNCTION_ALIGNMENT_64B 1629d49a0626SPeter Zijlstra bool 1630d49a0626SPeter Zijlstra 1631d49a0626SPeter Zijlstraconfig FUNCTION_ALIGNMENT 1632d49a0626SPeter Zijlstra int 1633d49a0626SPeter Zijlstra default 64 if FUNCTION_ALIGNMENT_64B 1634d49a0626SPeter Zijlstra default 32 if FUNCTION_ALIGNMENT_32B 1635d49a0626SPeter Zijlstra default 16 if FUNCTION_ALIGNMENT_16B 1636d49a0626SPeter Zijlstra default 8 if FUNCTION_ALIGNMENT_8B 1637d49a0626SPeter Zijlstra default 4 if FUNCTION_ALIGNMENT_4B 1638d49a0626SPeter Zijlstra default 0 1639d49a0626SPeter Zijlstra 16405270316cSPetr Pavluconfig CC_HAS_MIN_FUNCTION_ALIGNMENT 16415270316cSPetr Pavlu # Detect availability of the GCC option -fmin-function-alignment which 16425270316cSPetr Pavlu # guarantees minimal alignment for all functions, unlike 16435270316cSPetr Pavlu # -falign-functions which the compiler ignores for cold functions. 16445270316cSPetr Pavlu def_bool $(cc-option, -fmin-function-alignment=8) 16455270316cSPetr Pavlu 16465270316cSPetr Pavluconfig CC_HAS_SANE_FUNCTION_ALIGNMENT 16475270316cSPetr Pavlu # Set if the guaranteed alignment with -fmin-function-alignment is 16485270316cSPetr Pavlu # available or extra care is required in the kernel. Clang provides 16495270316cSPetr Pavlu # strict alignment always, even with -falign-functions. 16505270316cSPetr Pavlu def_bool CC_HAS_MIN_FUNCTION_ALIGNMENT || CC_IS_CLANG 16515270316cSPetr Pavlu 1652a88d970cSPaul E. McKenneyconfig ARCH_NEED_CMPXCHG_1_EMU 1653a88d970cSPaul E. McKenney bool 1654a88d970cSPaul E. McKenney 165522471e13SRandy Dunlapendmenu 1656