xref: /linux/arch/Kconfig (revision de6c85bf918ea52d5c680f0d130b37ee2ff152d6)
1b2441318SGreg Kroah-Hartman# SPDX-License-Identifier: GPL-2.0
2fb32e03fSMathieu Desnoyers#
3fb32e03fSMathieu Desnoyers# General architecture dependent options
4fb32e03fSMathieu Desnoyers#
5125e5645SMathieu Desnoyers
61572497cSChristoph Hellwig#
71572497cSChristoph Hellwig# Note: arch/$(SRCARCH)/Kconfig needs to be included first so that it can
81572497cSChristoph Hellwig# override the default values in this file.
91572497cSChristoph Hellwig#
101572497cSChristoph Hellwigsource "arch/$(SRCARCH)/Kconfig"
111572497cSChristoph Hellwig
12fe42754bSSean Christophersonconfig ARCH_CONFIGURES_CPU_MITIGATIONS
13fe42754bSSean Christopherson	bool
14fe42754bSSean Christopherson
15fe42754bSSean Christophersonif !ARCH_CONFIGURES_CPU_MITIGATIONS
16fe42754bSSean Christophersonconfig CPU_MITIGATIONS
17fe42754bSSean Christopherson	def_bool y
18fe42754bSSean Christophersonendif
19fe42754bSSean Christopherson
20*de6c85bfSChristoph Hellwig#
21*de6c85bfSChristoph Hellwig# Selected by architectures that need custom DMA operations for e.g. legacy
22*de6c85bfSChristoph Hellwig# IOMMUs not handled by dma-iommu.  Drivers must never select this symbol.
23*de6c85bfSChristoph Hellwig#
24*de6c85bfSChristoph Hellwigconfig ARCH_HAS_DMA_OPS
25*de6c85bfSChristoph Hellwig	depends on HAS_DMA
26*de6c85bfSChristoph Hellwig	select DMA_OPS_HELPERS
27*de6c85bfSChristoph Hellwig	bool
28*de6c85bfSChristoph Hellwig
2922471e13SRandy Dunlapmenu "General architecture-dependent options"
3022471e13SRandy Dunlap
31da32b581SCatalin Marinasconfig ARCH_HAS_SUBPAGE_FAULTS
32da32b581SCatalin Marinas	bool
33da32b581SCatalin Marinas	help
34da32b581SCatalin Marinas	  Select if the architecture can check permissions at sub-page
35da32b581SCatalin Marinas	  granularity (e.g. arm64 MTE). The probe_user_*() functions
36da32b581SCatalin Marinas	  must be implemented.
37da32b581SCatalin Marinas
3805736e4aSThomas Gleixnerconfig HOTPLUG_SMT
3905736e4aSThomas Gleixner	bool
4005736e4aSThomas Gleixner
4138253464SMichael Ellermanconfig SMT_NUM_THREADS_DYNAMIC
4238253464SMichael Ellerman	bool
4338253464SMichael Ellerman
446f062123SThomas Gleixner# Selected by HOTPLUG_CORE_SYNC_DEAD or HOTPLUG_CORE_SYNC_FULL
456f062123SThomas Gleixnerconfig HOTPLUG_CORE_SYNC
466f062123SThomas Gleixner	bool
476f062123SThomas Gleixner
486f062123SThomas Gleixner# Basic CPU dead synchronization selected by architecture
496f062123SThomas Gleixnerconfig HOTPLUG_CORE_SYNC_DEAD
506f062123SThomas Gleixner	bool
516f062123SThomas Gleixner	select HOTPLUG_CORE_SYNC
526f062123SThomas Gleixner
536f062123SThomas Gleixner# Full CPU synchronization with alive state selected by architecture
546f062123SThomas Gleixnerconfig HOTPLUG_CORE_SYNC_FULL
556f062123SThomas Gleixner	bool
566f062123SThomas Gleixner	select HOTPLUG_CORE_SYNC_DEAD if HOTPLUG_CPU
576f062123SThomas Gleixner	select HOTPLUG_CORE_SYNC
586f062123SThomas Gleixner
59a631be92SThomas Gleixnerconfig HOTPLUG_SPLIT_STARTUP
60a631be92SThomas Gleixner	bool
61a631be92SThomas Gleixner	select HOTPLUG_CORE_SYNC_FULL
62a631be92SThomas Gleixner
6318415f33SThomas Gleixnerconfig HOTPLUG_PARALLEL
6418415f33SThomas Gleixner	bool
6518415f33SThomas Gleixner	select HOTPLUG_SPLIT_STARTUP
6618415f33SThomas Gleixner
67142781e1SThomas Gleixnerconfig GENERIC_ENTRY
68142781e1SThomas Gleixner	bool
69142781e1SThomas Gleixner
70125e5645SMathieu Desnoyersconfig KPROBES
71125e5645SMathieu Desnoyers	bool "Kprobes"
72125e5645SMathieu Desnoyers	depends on HAVE_KPROBES
7305ed160eSMasami Hiramatsu	select KALLSYMS
747582b7beSMike Rapoport (IBM)	select EXECMEM
75900da4d2SPaul E. McKenney	select NEED_TASKS_RCU
76125e5645SMathieu Desnoyers	help
77125e5645SMathieu Desnoyers	  Kprobes allows you to trap at almost any kernel address and
78125e5645SMathieu Desnoyers	  execute a callback function.  register_kprobe() establishes
79125e5645SMathieu Desnoyers	  a probepoint and specifies the callback.  Kprobes is useful
80125e5645SMathieu Desnoyers	  for kernel debugging, non-intrusive instrumentation and testing.
81125e5645SMathieu Desnoyers	  If in doubt, say "N".
82125e5645SMathieu Desnoyers
8345f81b1cSSteven Rostedtconfig JUMP_LABEL
84c5905afbSIngo Molnar	bool "Optimize very unlikely/likely branches"
8545f81b1cSSteven Rostedt	depends on HAVE_ARCH_JUMP_LABEL
864ab7674fSJosh Poimboeuf	select OBJTOOL if HAVE_JUMP_LABEL_HACK
8745f81b1cSSteven Rostedt	help
88c5905afbSIngo Molnar	  This option enables a transparent branch optimization that
89c5905afbSIngo Molnar	  makes certain almost-always-true or almost-always-false branch
90c5905afbSIngo Molnar	  conditions even cheaper to execute within the kernel.
9145f81b1cSSteven Rostedt
92c5905afbSIngo Molnar	  Certain performance-sensitive kernel code, such as trace points,
93c5905afbSIngo Molnar	  scheduler functionality, networking code and KVM have such
94c5905afbSIngo Molnar	  branches and include support for this optimization technique.
95c5905afbSIngo Molnar
96c5905afbSIngo Molnar	  If it is detected that the compiler has support for "asm goto",
97c5905afbSIngo Molnar	  the kernel will compile such branches with just a nop
98c5905afbSIngo Molnar	  instruction. When the condition flag is toggled to true, the
99c5905afbSIngo Molnar	  nop will be converted to a jump instruction to execute the
100c5905afbSIngo Molnar	  conditional block of instructions.
101c5905afbSIngo Molnar
102c5905afbSIngo Molnar	  This technique lowers overhead and stress on the branch prediction
103c5905afbSIngo Molnar	  of the processor and generally makes the kernel faster. The update
104c5905afbSIngo Molnar	  of the condition is slower, but those are always very rare.
105c5905afbSIngo Molnar
106c5905afbSIngo Molnar	  ( On 32-bit x86, the necessary options added to the compiler
107c5905afbSIngo Molnar	    flags may increase the size of the kernel slightly. )
10845f81b1cSSteven Rostedt
1091987c947SPeter Zijlstraconfig STATIC_KEYS_SELFTEST
1101987c947SPeter Zijlstra	bool "Static key selftest"
1111987c947SPeter Zijlstra	depends on JUMP_LABEL
1121987c947SPeter Zijlstra	help
1131987c947SPeter Zijlstra	  Boot time self-test of the branch patching code.
1141987c947SPeter Zijlstra
115f03c4129SPeter Zijlstraconfig STATIC_CALL_SELFTEST
116f03c4129SPeter Zijlstra	bool "Static call selftest"
117f03c4129SPeter Zijlstra	depends on HAVE_STATIC_CALL
118f03c4129SPeter Zijlstra	help
119f03c4129SPeter Zijlstra	  Boot time self-test of the call patching code.
120f03c4129SPeter Zijlstra
121afd66255SMasami Hiramatsuconfig OPTPROBES
1225cc718b9SMasami Hiramatsu	def_bool y
1235cc718b9SMasami Hiramatsu	depends on KPROBES && HAVE_OPTPROBES
124900da4d2SPaul E. McKenney	select NEED_TASKS_RCU
125afd66255SMasami Hiramatsu
126e7dbfe34SMasami Hiramatsuconfig KPROBES_ON_FTRACE
127e7dbfe34SMasami Hiramatsu	def_bool y
128e7dbfe34SMasami Hiramatsu	depends on KPROBES && HAVE_KPROBES_ON_FTRACE
129e7dbfe34SMasami Hiramatsu	depends on DYNAMIC_FTRACE_WITH_REGS
130e7dbfe34SMasami Hiramatsu	help
131e7dbfe34SMasami Hiramatsu	  If function tracer is enabled and the arch supports full
132e7dbfe34SMasami Hiramatsu	  passing of pt_regs to function tracing, then kprobes can
133e7dbfe34SMasami Hiramatsu	  optimize on top of function tracing.
134e7dbfe34SMasami Hiramatsu
1352b144498SSrikar Dronamrajuconfig UPROBES
13609294e31SDavid A. Long	def_bool n
137e8f4aa60SAllen Pais	depends on ARCH_SUPPORTS_UPROBES
1382b144498SSrikar Dronamraju	help
1397b2d81d4SIngo Molnar	  Uprobes is the user-space counterpart to kprobes: they
1407b2d81d4SIngo Molnar	  enable instrumentation applications (such as 'perf probe')
1417b2d81d4SIngo Molnar	  to establish unintrusive probes in user-space binaries and
1427b2d81d4SIngo Molnar	  libraries, by executing handler functions when the probes
1437b2d81d4SIngo Molnar	  are hit by user-space applications.
1447b2d81d4SIngo Molnar
1457b2d81d4SIngo Molnar	  ( These probes come in the form of single-byte breakpoints,
1467b2d81d4SIngo Molnar	    managed by the kernel and kept transparent to the probed
1477b2d81d4SIngo Molnar	    application. )
1482b144498SSrikar Dronamraju
149adab66b7SSteven Rostedt (VMware)config HAVE_64BIT_ALIGNED_ACCESS
150adab66b7SSteven Rostedt (VMware)	def_bool 64BIT && !HAVE_EFFICIENT_UNALIGNED_ACCESS
151adab66b7SSteven Rostedt (VMware)	help
152adab66b7SSteven Rostedt (VMware)	  Some architectures require 64 bit accesses to be 64 bit
153adab66b7SSteven Rostedt (VMware)	  aligned, which also requires structs containing 64 bit values
154adab66b7SSteven Rostedt (VMware)	  to be 64 bit aligned too. This includes some 32 bit
155adab66b7SSteven Rostedt (VMware)	  architectures which can do 64 bit accesses, as well as 64 bit
156adab66b7SSteven Rostedt (VMware)	  architectures without unaligned access.
157adab66b7SSteven Rostedt (VMware)
158adab66b7SSteven Rostedt (VMware)	  This symbol should be selected by an architecture if 64 bit
159adab66b7SSteven Rostedt (VMware)	  accesses are required to be 64 bit aligned in this way even
160adab66b7SSteven Rostedt (VMware)	  though it is not a 64 bit architecture.
161adab66b7SSteven Rostedt (VMware)
162ba1a297dSLukas Bulwahn	  See Documentation/core-api/unaligned-memory-access.rst for
163ba1a297dSLukas Bulwahn	  more information on the topic of unaligned memory accesses.
164adab66b7SSteven Rostedt (VMware)
16558340a07SJohannes Bergconfig HAVE_EFFICIENT_UNALIGNED_ACCESS
1669ba16087SJan Beulich	bool
16758340a07SJohannes Berg	help
16858340a07SJohannes Berg	  Some architectures are unable to perform unaligned accesses
16958340a07SJohannes Berg	  without the use of get_unaligned/put_unaligned. Others are
17058340a07SJohannes Berg	  unable to perform such accesses efficiently (e.g. trap on
17158340a07SJohannes Berg	  unaligned access and require fixing it up in the exception
17258340a07SJohannes Berg	  handler.)
17358340a07SJohannes Berg
17458340a07SJohannes Berg	  This symbol should be selected by an architecture if it can
17558340a07SJohannes Berg	  perform unaligned accesses efficiently to allow different
17658340a07SJohannes Berg	  code paths to be selected for these cases. Some network
17758340a07SJohannes Berg	  drivers, for example, could opt to not fix up alignment
17858340a07SJohannes Berg	  problems with received packets if doing so would not help
17958340a07SJohannes Berg	  much.
18058340a07SJohannes Berg
181c9b54d6fSMauro Carvalho Chehab	  See Documentation/core-api/unaligned-memory-access.rst for more
18258340a07SJohannes Berg	  information on the topic of unaligned memory accesses.
18358340a07SJohannes Berg
184cf66bb93SDavid Woodhouseconfig ARCH_USE_BUILTIN_BSWAP
185cf66bb93SDavid Woodhouse	bool
186cf66bb93SDavid Woodhouse	help
187cf66bb93SDavid Woodhouse	  Modern versions of GCC (since 4.4) have builtin functions
188cf66bb93SDavid Woodhouse	  for handling byte-swapping. Using these, instead of the old
189cf66bb93SDavid Woodhouse	  inline assembler that the architecture code provides in the
190cf66bb93SDavid Woodhouse	  __arch_bswapXX() macros, allows the compiler to see what's
191cf66bb93SDavid Woodhouse	  happening and offers more opportunity for optimisation. In
192cf66bb93SDavid Woodhouse	  particular, the compiler will be able to combine the byteswap
193cf66bb93SDavid Woodhouse	  with a nearby load or store and use load-and-swap or
194cf66bb93SDavid Woodhouse	  store-and-swap instructions if the architecture has them. It
195cf66bb93SDavid Woodhouse	  should almost *never* result in code which is worse than the
196cf66bb93SDavid Woodhouse	  hand-coded assembler in <asm/swab.h>.  But just in case it
197cf66bb93SDavid Woodhouse	  does, the use of the builtins is optional.
198cf66bb93SDavid Woodhouse
199cf66bb93SDavid Woodhouse	  Any architecture with load-and-swap or store-and-swap
200cf66bb93SDavid Woodhouse	  instructions should set this. And it shouldn't hurt to set it
201cf66bb93SDavid Woodhouse	  on architectures that don't have such instructions.
202cf66bb93SDavid Woodhouse
2039edddaa2SAnanth N Mavinakayanahalliconfig KRETPROBES
2049edddaa2SAnanth N Mavinakayanahalli	def_bool y
20573f9b911SMasami Hiramatsu	depends on KPROBES && (HAVE_KRETPROBES || HAVE_RETHOOK)
20673f9b911SMasami Hiramatsu
20773f9b911SMasami Hiramatsuconfig KRETPROBE_ON_RETHOOK
20873f9b911SMasami Hiramatsu	def_bool y
20973f9b911SMasami Hiramatsu	depends on HAVE_RETHOOK
21073f9b911SMasami Hiramatsu	depends on KRETPROBES
21173f9b911SMasami Hiramatsu	select RETHOOK
2129edddaa2SAnanth N Mavinakayanahalli
2137c68af6eSAvi Kivityconfig USER_RETURN_NOTIFIER
2147c68af6eSAvi Kivity	bool
2157c68af6eSAvi Kivity	depends on HAVE_USER_RETURN_NOTIFIER
2167c68af6eSAvi Kivity	help
2177c68af6eSAvi Kivity	  Provide a kernel-internal notification when a cpu is about to
2187c68af6eSAvi Kivity	  switch to user mode.
2197c68af6eSAvi Kivity
22028b2ee20SRik van Rielconfig HAVE_IOREMAP_PROT
2219ba16087SJan Beulich	bool
22228b2ee20SRik van Riel
223125e5645SMathieu Desnoyersconfig HAVE_KPROBES
2249ba16087SJan Beulich	bool
2259edddaa2SAnanth N Mavinakayanahalli
2269edddaa2SAnanth N Mavinakayanahalliconfig HAVE_KRETPROBES
2279ba16087SJan Beulich	bool
22874bc7ceeSArthur Kepner
229afd66255SMasami Hiramatsuconfig HAVE_OPTPROBES
230afd66255SMasami Hiramatsu	bool
231d314d74cSCong Wang
232e7dbfe34SMasami Hiramatsuconfig HAVE_KPROBES_ON_FTRACE
233e7dbfe34SMasami Hiramatsu	bool
234e7dbfe34SMasami Hiramatsu
2351f6d3a8fSMasami Hiramatsuconfig ARCH_CORRECT_STACKTRACE_ON_KRETPROBE
2361f6d3a8fSMasami Hiramatsu	bool
2371f6d3a8fSMasami Hiramatsu	help
2381f6d3a8fSMasami Hiramatsu	  Since kretprobes modifies return address on the stack, the
2391f6d3a8fSMasami Hiramatsu	  stacktrace may see the kretprobe trampoline address instead
2401f6d3a8fSMasami Hiramatsu	  of correct one. If the architecture stacktrace code and
2411f6d3a8fSMasami Hiramatsu	  unwinder can adjust such entries, select this configuration.
2421f6d3a8fSMasami Hiramatsu
243540adea3SMasami Hiramatsuconfig HAVE_FUNCTION_ERROR_INJECTION
2449802d865SJosef Bacik	bool
2459802d865SJosef Bacik
24642a0bb3fSPetr Mladekconfig HAVE_NMI
24742a0bb3fSPetr Mladek	bool
24842a0bb3fSPetr Mladek
249a257caccSChristophe Leroyconfig HAVE_FUNCTION_DESCRIPTORS
250a257caccSChristophe Leroy	bool
251a257caccSChristophe Leroy
2524aae683fSMasahiro Yamadaconfig TRACE_IRQFLAGS_SUPPORT
2534aae683fSMasahiro Yamada	bool
2544aae683fSMasahiro Yamada
2554510bffbSMark Rutlandconfig TRACE_IRQFLAGS_NMI_SUPPORT
2564510bffbSMark Rutland	bool
2574510bffbSMark Rutland
2581f5a4ad9SRoland McGrath#
2591f5a4ad9SRoland McGrath# An arch should select this if it provides all these things:
2601f5a4ad9SRoland McGrath#
2611f5a4ad9SRoland McGrath#	task_pt_regs()		in asm/processor.h or asm/ptrace.h
2621f5a4ad9SRoland McGrath#	arch_has_single_step()	if there is hardware single-step support
2631f5a4ad9SRoland McGrath#	arch_has_block_step()	if there is hardware block-step support
2641f5a4ad9SRoland McGrath#	asm/syscall.h		supplying asm-generic/syscall.h interface
2651f5a4ad9SRoland McGrath#	linux/regset.h		user_regset interfaces
2661f5a4ad9SRoland McGrath#	CORE_DUMP_USE_REGSET	#define'd in linux/elf.h
267153474baSEric W. Biederman#	TIF_SYSCALL_TRACE	calls ptrace_report_syscall_{entry,exit}
26803248addSEric W. Biederman#	TIF_NOTIFY_RESUME	calls resume_user_mode_work()
2691f5a4ad9SRoland McGrath#
2701f5a4ad9SRoland McGrathconfig HAVE_ARCH_TRACEHOOK
2719ba16087SJan Beulich	bool
2721f5a4ad9SRoland McGrath
273c64be2bbSMarek Szyprowskiconfig HAVE_DMA_CONTIGUOUS
274c64be2bbSMarek Szyprowski	bool
275c64be2bbSMarek Szyprowski
27629d5e047SThomas Gleixnerconfig GENERIC_SMP_IDLE_THREAD
27729d5e047SThomas Gleixner	bool
27829d5e047SThomas Gleixner
279485cf5daSKevin Hilmanconfig GENERIC_IDLE_POLL_SETUP
280485cf5daSKevin Hilman	bool
281485cf5daSKevin Hilman
2826974f0c4SDaniel Micayconfig ARCH_HAS_FORTIFY_SOURCE
2836974f0c4SDaniel Micay	bool
2846974f0c4SDaniel Micay	help
2856974f0c4SDaniel Micay	  An architecture should select this when it can successfully
2866974f0c4SDaniel Micay	  build and run with CONFIG_FORTIFY_SOURCE.
2876974f0c4SDaniel Micay
288d8ae8a37SChristoph Hellwig#
289d8ae8a37SChristoph Hellwig# Select if the arch provides a historic keepinit alias for the retain_initrd
290d8ae8a37SChristoph Hellwig# command line option
291d8ae8a37SChristoph Hellwig#
292d8ae8a37SChristoph Hellwigconfig ARCH_HAS_KEEPINITRD
293d8ae8a37SChristoph Hellwig	bool
294d8ae8a37SChristoph Hellwig
295d2852a22SDaniel Borkmann# Select if arch has all set_memory_ro/rw/x/nx() functions in asm/cacheflush.h
296d2852a22SDaniel Borkmannconfig ARCH_HAS_SET_MEMORY
297d2852a22SDaniel Borkmann	bool
298d2852a22SDaniel Borkmann
299d253ca0cSRick Edgecombe# Select if arch has all set_direct_map_invalid/default() functions
300d253ca0cSRick Edgecombeconfig ARCH_HAS_SET_DIRECT_MAP
301d253ca0cSRick Edgecombe	bool
302d253ca0cSRick Edgecombe
303c30700dbSChristoph Hellwig#
304fa7e2247SChristoph Hellwig# Select if the architecture provides the arch_dma_set_uncached symbol to
305a86ecfa6SColin Ian King# either provide an uncached segment alias for a DMA allocation, or
306fa7e2247SChristoph Hellwig# to remap the page tables in place.
307c30700dbSChristoph Hellwig#
308fa7e2247SChristoph Hellwigconfig ARCH_HAS_DMA_SET_UNCACHED
309c30700dbSChristoph Hellwig	bool
310c30700dbSChristoph Hellwig
311999a5d12SChristoph Hellwig#
312999a5d12SChristoph Hellwig# Select if the architectures provides the arch_dma_clear_uncached symbol
313999a5d12SChristoph Hellwig# to undo an in-place page table remap for uncached access.
314999a5d12SChristoph Hellwig#
315999a5d12SChristoph Hellwigconfig ARCH_HAS_DMA_CLEAR_UNCACHED
316f5e10287SThomas Gleixner	bool
317f5e10287SThomas Gleixner
3187725acaaSThomas Gleixnerconfig ARCH_HAS_CPU_FINALIZE_INIT
3197725acaaSThomas Gleixner	bool
3207725acaaSThomas Gleixner
3218f23f5dbSJason Gunthorpe# The architecture has a per-task state that includes the mm's PASID
3228f23f5dbSJason Gunthorpeconfig ARCH_HAS_CPU_PASID
3238f23f5dbSJason Gunthorpe	bool
3248f23f5dbSJason Gunthorpe	select IOMMU_MM_DATA
3258f23f5dbSJason Gunthorpe
3265905429aSKees Cookconfig HAVE_ARCH_THREAD_STRUCT_WHITELIST
3275905429aSKees Cook	bool
3285905429aSKees Cook	help
3295905429aSKees Cook	  An architecture should select this to provide hardened usercopy
3305905429aSKees Cook	  knowledge about what region of the thread_struct should be
3315905429aSKees Cook	  whitelisted for copying to userspace. Normally this is only the
3325905429aSKees Cook	  FPU registers. Specifically, arch_thread_struct_whitelist()
3335905429aSKees Cook	  should be implemented. Without this, the entire thread_struct
3345905429aSKees Cook	  field in task_struct will be left whitelisted.
3355905429aSKees Cook
3365aaeb5c0SIngo Molnar# Select if arch wants to size task_struct dynamically via arch_task_struct_size:
3375aaeb5c0SIngo Molnarconfig ARCH_WANTS_DYNAMIC_TASK_STRUCT
3385aaeb5c0SIngo Molnar	bool
3395aaeb5c0SIngo Molnar
34051c2ee6dSNick Desaulniersconfig ARCH_WANTS_NO_INSTR
34151c2ee6dSNick Desaulniers	bool
34251c2ee6dSNick Desaulniers	help
34351c2ee6dSNick Desaulniers	  An architecture should select this if the noinstr macro is being used on
34451c2ee6dSNick Desaulniers	  functions to denote that the toolchain should avoid instrumenting such
34551c2ee6dSNick Desaulniers	  functions and is required for correctness.
34651c2ee6dSNick Desaulniers
347942fa985SYury Norovconfig ARCH_32BIT_OFF_T
348942fa985SYury Norov	bool
349942fa985SYury Norov	depends on !64BIT
350942fa985SYury Norov	help
351942fa985SYury Norov	  All new 32-bit architectures should have 64-bit off_t type on
352942fa985SYury Norov	  userspace side which corresponds to the loff_t kernel type. This
353942fa985SYury Norov	  is the requirement for modern ABIs. Some existing architectures
354942fa985SYury Norov	  still support 32-bit off_t. This option is enabled for all such
355942fa985SYury Norov	  architectures explicitly.
356942fa985SYury Norov
35796c0a6a7SHeiko Carstens# Selected by 64 bit architectures which have a 32 bit f_tinode in struct ustat
35896c0a6a7SHeiko Carstensconfig ARCH_32BIT_USTAT_F_TINODE
35996c0a6a7SHeiko Carstens	bool
36096c0a6a7SHeiko Carstens
3612ff2b7ecSMasahiro Yamadaconfig HAVE_ASM_MODVERSIONS
3622ff2b7ecSMasahiro Yamada	bool
3632ff2b7ecSMasahiro Yamada	help
364a86ecfa6SColin Ian King	  This symbol should be selected by an architecture if it provides
3652ff2b7ecSMasahiro Yamada	  <asm/asm-prototypes.h> to support the module versioning for symbols
3662ff2b7ecSMasahiro Yamada	  exported from assembly code.
3672ff2b7ecSMasahiro Yamada
368f850c30cSHeiko Carstensconfig HAVE_REGS_AND_STACK_ACCESS_API
369f850c30cSHeiko Carstens	bool
370e01292b1SHeiko Carstens	help
371a86ecfa6SColin Ian King	  This symbol should be selected by an architecture if it supports
372e01292b1SHeiko Carstens	  the API needed to access registers and stack entries from pt_regs,
373e01292b1SHeiko Carstens	  declared in asm/ptrace.h
374e01292b1SHeiko Carstens	  For example the kprobes-based event tracer needs this API.
375f850c30cSHeiko Carstens
376d7822b1eSMathieu Desnoyersconfig HAVE_RSEQ
377d7822b1eSMathieu Desnoyers	bool
378d7822b1eSMathieu Desnoyers	depends on HAVE_REGS_AND_STACK_ACCESS_API
379d7822b1eSMathieu Desnoyers	help
380d7822b1eSMathieu Desnoyers	  This symbol should be selected by an architecture if it
381d7822b1eSMathieu Desnoyers	  supports an implementation of restartable sequences.
382d7822b1eSMathieu Desnoyers
3832f7ab126SMiguel Ojedaconfig HAVE_RUST
3842f7ab126SMiguel Ojeda	bool
3852f7ab126SMiguel Ojeda	help
3862f7ab126SMiguel Ojeda	  This symbol should be selected by an architecture if it
3872f7ab126SMiguel Ojeda	  supports Rust.
3882f7ab126SMiguel Ojeda
3893c88ee19SMasami Hiramatsuconfig HAVE_FUNCTION_ARG_ACCESS_API
3903c88ee19SMasami Hiramatsu	bool
3913c88ee19SMasami Hiramatsu	help
392a86ecfa6SColin Ian King	  This symbol should be selected by an architecture if it supports
3933c88ee19SMasami Hiramatsu	  the API needed to access function arguments from pt_regs,
3943c88ee19SMasami Hiramatsu	  declared in asm/ptrace.h
3953c88ee19SMasami Hiramatsu
39662a038d3SK.Prasadconfig HAVE_HW_BREAKPOINT
39762a038d3SK.Prasad	bool
39899e8c5a3SFrederic Weisbecker	depends on PERF_EVENTS
39962a038d3SK.Prasad
4000102752eSFrederic Weisbeckerconfig HAVE_MIXED_BREAKPOINTS_REGS
4010102752eSFrederic Weisbecker	bool
4020102752eSFrederic Weisbecker	depends on HAVE_HW_BREAKPOINT
4030102752eSFrederic Weisbecker	help
4040102752eSFrederic Weisbecker	  Depending on the arch implementation of hardware breakpoints,
4050102752eSFrederic Weisbecker	  some of them have separate registers for data and instruction
4060102752eSFrederic Weisbecker	  breakpoints addresses, others have mixed registers to store
4070102752eSFrederic Weisbecker	  them but define the access type in a control register.
4080102752eSFrederic Weisbecker	  Select this option if your arch implements breakpoints under the
4090102752eSFrederic Weisbecker	  latter fashion.
4100102752eSFrederic Weisbecker
4117c68af6eSAvi Kivityconfig HAVE_USER_RETURN_NOTIFIER
4127c68af6eSAvi Kivity	bool
413a1922ed6SIngo Molnar
414c01d4323SFrederic Weisbeckerconfig HAVE_PERF_EVENTS_NMI
415c01d4323SFrederic Weisbecker	bool
41623637d47SFrederic Weisbecker	help
41723637d47SFrederic Weisbecker	  System hardware can generate an NMI using the perf event
41823637d47SFrederic Weisbecker	  subsystem.  Also has support for calculating CPU cycle events
41923637d47SFrederic Weisbecker	  to determine how many clock cycles in a given period.
420c01d4323SFrederic Weisbecker
42105a4a952SNicholas Pigginconfig HAVE_HARDLOCKUP_DETECTOR_PERF
42205a4a952SNicholas Piggin	bool
42305a4a952SNicholas Piggin	depends on HAVE_PERF_EVENTS_NMI
42405a4a952SNicholas Piggin	help
42505a4a952SNicholas Piggin	  The arch chooses to use the generic perf-NMI-based hardlockup
42605a4a952SNicholas Piggin	  detector. Must define HAVE_PERF_EVENTS_NMI.
42705a4a952SNicholas Piggin
42805a4a952SNicholas Pigginconfig HAVE_HARDLOCKUP_DETECTOR_ARCH
42905a4a952SNicholas Piggin	bool
43005a4a952SNicholas Piggin	help
4311356d0b9SPetr Mladek	  The arch provides its own hardlockup detector implementation instead
4321356d0b9SPetr Mladek	  of the generic ones.
4331356d0b9SPetr Mladek
4341356d0b9SPetr Mladek	  It uses the same command line parameters, and sysctl interface,
4351356d0b9SPetr Mladek	  as the generic hardlockup detectors.
43605a4a952SNicholas Piggin
437c5e63197SJiri Olsaconfig HAVE_PERF_REGS
438c5e63197SJiri Olsa	bool
439c5e63197SJiri Olsa	help
440c5e63197SJiri Olsa	  Support selective register dumps for perf events. This includes
441c5e63197SJiri Olsa	  bit-mapping of each registers and a unique architecture id.
442c5e63197SJiri Olsa
443c5ebcedbSJiri Olsaconfig HAVE_PERF_USER_STACK_DUMP
444c5ebcedbSJiri Olsa	bool
445c5ebcedbSJiri Olsa	help
446c5ebcedbSJiri Olsa	  Support user stack dumps for perf event samples. This needs
447c5ebcedbSJiri Olsa	  access to the user stack pointer which is not unified across
448c5ebcedbSJiri Olsa	  architectures.
449c5ebcedbSJiri Olsa
450bf5438fcSJason Baronconfig HAVE_ARCH_JUMP_LABEL
451bf5438fcSJason Baron	bool
452bf5438fcSJason Baron
45350ff18abSArd Biesheuvelconfig HAVE_ARCH_JUMP_LABEL_RELATIVE
45450ff18abSArd Biesheuvel	bool
45550ff18abSArd Biesheuvel
4560d6e24d4SPeter Zijlstraconfig MMU_GATHER_TABLE_FREE
4570d6e24d4SPeter Zijlstra	bool
4580d6e24d4SPeter Zijlstra
459ff2e6d72SPeter Zijlstraconfig MMU_GATHER_RCU_TABLE_FREE
46026723911SPeter Zijlstra	bool
4610d6e24d4SPeter Zijlstra	select MMU_GATHER_TABLE_FREE
46226723911SPeter Zijlstra
4633af4bd03SPeter Zijlstraconfig MMU_GATHER_PAGE_SIZE
464ed6a7935SPeter Zijlstra	bool
465ed6a7935SPeter Zijlstra
46627796d03SPeter Zijlstraconfig MMU_GATHER_NO_RANGE
46727796d03SPeter Zijlstra	bool
4681e9fdf21SPeter Zijlstra	select MMU_GATHER_MERGE_VMAS
4691e9fdf21SPeter Zijlstra
4701e9fdf21SPeter Zijlstraconfig MMU_GATHER_NO_FLUSH_CACHE
4711e9fdf21SPeter Zijlstra	bool
4721e9fdf21SPeter Zijlstra
4731e9fdf21SPeter Zijlstraconfig MMU_GATHER_MERGE_VMAS
4741e9fdf21SPeter Zijlstra	bool
47527796d03SPeter Zijlstra
476580a586cSPeter Zijlstraconfig MMU_GATHER_NO_GATHER
477952a31c9SMartin Schwidefsky	bool
4780d6e24d4SPeter Zijlstra	depends on MMU_GATHER_TABLE_FREE
479952a31c9SMartin Schwidefsky
480d53c3dfbSNicholas Pigginconfig ARCH_WANT_IRQS_OFF_ACTIVATE_MM
481d53c3dfbSNicholas Piggin	bool
482d53c3dfbSNicholas Piggin	help
483d53c3dfbSNicholas Piggin	  Temporary select until all architectures can be converted to have
484d53c3dfbSNicholas Piggin	  irqs disabled over activate_mm. Architectures that do IPI based TLB
485d53c3dfbSNicholas Piggin	  shootdowns should enable this.
486d53c3dfbSNicholas Piggin
48788e3009bSNicholas Piggin# Use normal mm refcounting for MMU_LAZY_TLB kernel thread references.
48888e3009bSNicholas Piggin# MMU_LAZY_TLB_REFCOUNT=n can improve the scalability of context switching
48988e3009bSNicholas Piggin# to/from kernel threads when the same mm is running on a lot of CPUs (a large
49088e3009bSNicholas Piggin# multi-threaded application), by reducing contention on the mm refcount.
49188e3009bSNicholas Piggin#
49288e3009bSNicholas Piggin# This can be disabled if the architecture ensures no CPUs are using an mm as a
49388e3009bSNicholas Piggin# "lazy tlb" beyond its final refcount (i.e., by the time __mmdrop frees the mm
49488e3009bSNicholas Piggin# or its kernel page tables). This could be arranged by arch_exit_mmap(), or
49588e3009bSNicholas Piggin# final exit(2) TLB flush, for example.
49688e3009bSNicholas Piggin#
49788e3009bSNicholas Piggin# To implement this, an arch *must*:
49888e3009bSNicholas Piggin# Ensure the _lazy_tlb variants of mmgrab/mmdrop are used when manipulating
49988e3009bSNicholas Piggin# the lazy tlb reference of a kthread's ->active_mm (non-arch code has been
50088e3009bSNicholas Piggin# converted already).
50188e3009bSNicholas Pigginconfig MMU_LAZY_TLB_REFCOUNT
50288e3009bSNicholas Piggin	def_bool y
5032655421aSNicholas Piggin	depends on !MMU_LAZY_TLB_SHOOTDOWN
5042655421aSNicholas Piggin
5052655421aSNicholas Piggin# This option allows MMU_LAZY_TLB_REFCOUNT=n. It ensures no CPUs are using an
5062655421aSNicholas Piggin# mm as a lazy tlb beyond its last reference count, by shooting down these
5072655421aSNicholas Piggin# users before the mm is deallocated. __mmdrop() first IPIs all CPUs that may
5082655421aSNicholas Piggin# be using the mm as a lazy tlb, so that they may switch themselves to using
5092655421aSNicholas Piggin# init_mm for their active mm. mm_cpumask(mm) is used to determine which CPUs
5102655421aSNicholas Piggin# may be using mm as a lazy tlb mm.
5112655421aSNicholas Piggin#
5122655421aSNicholas Piggin# To implement this, an arch *must*:
5132655421aSNicholas Piggin# - At the time of the final mmdrop of the mm, ensure mm_cpumask(mm) contains
5142655421aSNicholas Piggin#   at least all possible CPUs in which the mm is lazy.
5152655421aSNicholas Piggin# - It must meet the requirements for MMU_LAZY_TLB_REFCOUNT=n (see above).
5162655421aSNicholas Pigginconfig MMU_LAZY_TLB_SHOOTDOWN
5172655421aSNicholas Piggin	bool
51888e3009bSNicholas Piggin
519df013ffbSHuang Yingconfig ARCH_HAVE_NMI_SAFE_CMPXCHG
520df013ffbSHuang Ying	bool
521df013ffbSHuang Ying
522a9c3475dSVignesh Balasubramanianconfig ARCH_HAVE_EXTRA_ELF_NOTES
523a9c3475dSVignesh Balasubramanian	bool
524a9c3475dSVignesh Balasubramanian	help
525a9c3475dSVignesh Balasubramanian	  An architecture should select this in order to enable adding an
526a9c3475dSVignesh Balasubramanian	  arch-specific ELF note section to core files. It must provide two
527a9c3475dSVignesh Balasubramanian	  functions: elf_coredump_extra_notes_size() and
528a9c3475dSVignesh Balasubramanian	  elf_coredump_extra_notes_write() which are invoked by the ELF core
529a9c3475dSVignesh Balasubramanian	  dumper.
530a9c3475dSVignesh Balasubramanian
5312e83b879SPaul E. McKenneyconfig ARCH_HAS_NMI_SAFE_THIS_CPU_OPS
5322e83b879SPaul E. McKenney	bool
5332e83b879SPaul E. McKenney
53443570fd2SHeiko Carstensconfig HAVE_ALIGNED_STRUCT_PAGE
53543570fd2SHeiko Carstens	bool
53643570fd2SHeiko Carstens	help
53743570fd2SHeiko Carstens	  This makes sure that struct pages are double word aligned and that
53843570fd2SHeiko Carstens	  e.g. the SLUB allocator can perform double word atomic operations
53943570fd2SHeiko Carstens	  on a struct page for better performance. However selecting this
54043570fd2SHeiko Carstens	  might increase the size of a struct page by a word.
54143570fd2SHeiko Carstens
5424156153cSHeiko Carstensconfig HAVE_CMPXCHG_LOCAL
5434156153cSHeiko Carstens	bool
5444156153cSHeiko Carstens
5452565409fSHeiko Carstensconfig HAVE_CMPXCHG_DOUBLE
5462565409fSHeiko Carstens	bool
5472565409fSHeiko Carstens
54877e58496SPaul E. McKenneyconfig ARCH_WEAK_RELEASE_ACQUIRE
54977e58496SPaul E. McKenney	bool
55077e58496SPaul E. McKenney
551c1d7e01dSWill Deaconconfig ARCH_WANT_IPC_PARSE_VERSION
552c1d7e01dSWill Deacon	bool
553c1d7e01dSWill Deacon
554c1d7e01dSWill Deaconconfig ARCH_WANT_COMPAT_IPC_PARSE_VERSION
555c1d7e01dSWill Deacon	bool
556c1d7e01dSWill Deacon
55748b25c43SChris Metcalfconfig ARCH_WANT_OLD_COMPAT_IPC
558c1d7e01dSWill Deacon	select ARCH_WANT_COMPAT_IPC_PARSE_VERSION
55948b25c43SChris Metcalf	bool
56048b25c43SChris Metcalf
561282a181bSYiFei Zhuconfig HAVE_ARCH_SECCOMP
562e2cfabdfSWill Drewry	bool
563e2cfabdfSWill Drewry	help
564282a181bSYiFei Zhu	  An arch should select this symbol to support seccomp mode 1 (the fixed
565282a181bSYiFei Zhu	  syscall policy), and must provide an overrides for __NR_seccomp_sigreturn,
566282a181bSYiFei Zhu	  and compat syscalls if the asm-generic/seccomp.h defaults need adjustment:
567282a181bSYiFei Zhu	  - __NR_seccomp_read_32
568282a181bSYiFei Zhu	  - __NR_seccomp_write_32
569282a181bSYiFei Zhu	  - __NR_seccomp_exit_32
570282a181bSYiFei Zhu	  - __NR_seccomp_sigreturn_32
571282a181bSYiFei Zhu
572282a181bSYiFei Zhuconfig HAVE_ARCH_SECCOMP_FILTER
573282a181bSYiFei Zhu	bool
574282a181bSYiFei Zhu	select HAVE_ARCH_SECCOMP
575282a181bSYiFei Zhu	help
576fb0fadf9SWill Drewry	  An arch should select this symbol if it provides all of these things:
577282a181bSYiFei Zhu	  - all the requirements for HAVE_ARCH_SECCOMP
578bb6ea430SWill Drewry	  - syscall_get_arch()
579bb6ea430SWill Drewry	  - syscall_get_arguments()
580bb6ea430SWill Drewry	  - syscall_rollback()
581bb6ea430SWill Drewry	  - syscall_set_return_value()
582fb0fadf9SWill Drewry	  - SIGSYS siginfo_t support
583fb0fadf9SWill Drewry	  - secure_computing is called from a ptrace_event()-safe context
584fb0fadf9SWill Drewry	  - secure_computing return value is checked and a return value of -1
585fb0fadf9SWill Drewry	    results in the system call being skipped immediately.
58648dc92b9SKees Cook	  - seccomp syscall wired up
5870d8315ddSYiFei Zhu	  - if !HAVE_SPARSE_SYSCALL_NR, have SECCOMP_ARCH_NATIVE,
5880d8315ddSYiFei Zhu	    SECCOMP_ARCH_NATIVE_NR, SECCOMP_ARCH_NATIVE_NAME defined. If
5890d8315ddSYiFei Zhu	    COMPAT is supported, have the SECCOMP_ARCH_COMPAT* defines too.
590e2cfabdfSWill Drewry
591282a181bSYiFei Zhuconfig SECCOMP
592282a181bSYiFei Zhu	prompt "Enable seccomp to safely execute untrusted bytecode"
593282a181bSYiFei Zhu	def_bool y
594282a181bSYiFei Zhu	depends on HAVE_ARCH_SECCOMP
595282a181bSYiFei Zhu	help
596282a181bSYiFei Zhu	  This kernel feature is useful for number crunching applications
597282a181bSYiFei Zhu	  that may need to handle untrusted bytecode during their
598282a181bSYiFei Zhu	  execution. By using pipes or other transports made available
599282a181bSYiFei Zhu	  to the process as file descriptors supporting the read/write
600282a181bSYiFei Zhu	  syscalls, it's possible to isolate those applications in their
601282a181bSYiFei Zhu	  own address space using seccomp. Once seccomp is enabled via
602282a181bSYiFei Zhu	  prctl(PR_SET_SECCOMP) or the seccomp() syscall, it cannot be
603282a181bSYiFei Zhu	  disabled and the task is only allowed to execute a few safe
604282a181bSYiFei Zhu	  syscalls defined by each seccomp mode.
605282a181bSYiFei Zhu
606282a181bSYiFei Zhu	  If unsure, say Y.
607282a181bSYiFei Zhu
608e2cfabdfSWill Drewryconfig SECCOMP_FILTER
609e2cfabdfSWill Drewry	def_bool y
610e2cfabdfSWill Drewry	depends on HAVE_ARCH_SECCOMP_FILTER && SECCOMP && NET
611e2cfabdfSWill Drewry	help
612e2cfabdfSWill Drewry	  Enable tasks to build secure computing environments defined
613e2cfabdfSWill Drewry	  in terms of Berkeley Packet Filter programs which implement
614e2cfabdfSWill Drewry	  task-defined system call filtering polices.
615e2cfabdfSWill Drewry
6165fb94e9cSMauro Carvalho Chehab	  See Documentation/userspace-api/seccomp_filter.rst for details.
617e2cfabdfSWill Drewry
6180d8315ddSYiFei Zhuconfig SECCOMP_CACHE_DEBUG
6190d8315ddSYiFei Zhu	bool "Show seccomp filter cache status in /proc/pid/seccomp_cache"
6200d8315ddSYiFei Zhu	depends on SECCOMP_FILTER && !HAVE_SPARSE_SYSCALL_NR
6210d8315ddSYiFei Zhu	depends on PROC_FS
6220d8315ddSYiFei Zhu	help
6230d8315ddSYiFei Zhu	  This enables the /proc/pid/seccomp_cache interface to monitor
6240d8315ddSYiFei Zhu	  seccomp cache data. The file format is subject to change. Reading
6250d8315ddSYiFei Zhu	  the file requires CAP_SYS_ADMIN.
6260d8315ddSYiFei Zhu
6270d8315ddSYiFei Zhu	  This option is for debugging only. Enabling presents the risk that
6280d8315ddSYiFei Zhu	  an adversary may be able to infer the seccomp filter logic.
6290d8315ddSYiFei Zhu
6300d8315ddSYiFei Zhu	  If unsure, say N.
6310d8315ddSYiFei Zhu
632afaef01cSAlexander Popovconfig HAVE_ARCH_STACKLEAK
633afaef01cSAlexander Popov	bool
634afaef01cSAlexander Popov	help
635afaef01cSAlexander Popov	  An architecture should select this if it has the code which
636afaef01cSAlexander Popov	  fills the used part of the kernel stack with the STACKLEAK_POISON
637afaef01cSAlexander Popov	  value before returning from system calls.
638afaef01cSAlexander Popov
639d148eac0SMasahiro Yamadaconfig HAVE_STACKPROTECTOR
64019952a92SKees Cook	bool
64119952a92SKees Cook	help
64219952a92SKees Cook	  An arch should select this symbol if:
64319952a92SKees Cook	  - it has implemented a stack canary (e.g. __stack_chk_guard)
64419952a92SKees Cook
645050e9baaSLinus Torvaldsconfig STACKPROTECTOR
6462a61f474SMasahiro Yamada	bool "Stack Protector buffer overflow detection"
647d148eac0SMasahiro Yamada	depends on HAVE_STACKPROTECTOR
6482a61f474SMasahiro Yamada	depends on $(cc-option,-fstack-protector)
6492a61f474SMasahiro Yamada	default y
6508779657dSKees Cook	help
6518779657dSKees Cook	  This option turns on the "stack-protector" GCC feature. This
65219952a92SKees Cook	  feature puts, at the beginning of functions, a canary value on
65319952a92SKees Cook	  the stack just before the return address, and validates
65419952a92SKees Cook	  the value just before actually returning.  Stack based buffer
65519952a92SKees Cook	  overflows (that need to overwrite this return address) now also
65619952a92SKees Cook	  overwrite the canary, which gets detected and the attack is then
65719952a92SKees Cook	  neutralized via a kernel panic.
65819952a92SKees Cook
6598779657dSKees Cook	  Functions will have the stack-protector canary logic added if they
6608779657dSKees Cook	  have an 8-byte or larger character array on the stack.
6618779657dSKees Cook
66219952a92SKees Cook	  This feature requires gcc version 4.2 or above, or a distribution
6638779657dSKees Cook	  gcc with the feature backported ("-fstack-protector").
6648779657dSKees Cook
6658779657dSKees Cook	  On an x86 "defconfig" build, this feature adds canary checks to
6668779657dSKees Cook	  about 3% of all kernel functions, which increases kernel code size
6678779657dSKees Cook	  by about 0.3%.
6688779657dSKees Cook
669050e9baaSLinus Torvaldsconfig STACKPROTECTOR_STRONG
6702a61f474SMasahiro Yamada	bool "Strong Stack Protector"
671050e9baaSLinus Torvalds	depends on STACKPROTECTOR
6722a61f474SMasahiro Yamada	depends on $(cc-option,-fstack-protector-strong)
6732a61f474SMasahiro Yamada	default y
6748779657dSKees Cook	help
6758779657dSKees Cook	  Functions will have the stack-protector canary logic added in any
6768779657dSKees Cook	  of the following conditions:
6778779657dSKees Cook
6788779657dSKees Cook	  - local variable's address used as part of the right hand side of an
6798779657dSKees Cook	    assignment or function argument
6808779657dSKees Cook	  - local variable is an array (or union containing an array),
6818779657dSKees Cook	    regardless of array type or length
6828779657dSKees Cook	  - uses register local variables
6838779657dSKees Cook
6848779657dSKees Cook	  This feature requires gcc version 4.9 or above, or a distribution
6858779657dSKees Cook	  gcc with the feature backported ("-fstack-protector-strong").
6868779657dSKees Cook
6878779657dSKees Cook	  On an x86 "defconfig" build, this feature adds canary checks to
6888779657dSKees Cook	  about 20% of all kernel functions, which increases the kernel code
6898779657dSKees Cook	  size by about 2%.
6908779657dSKees Cook
691d08b9f0cSSami Tolvanenconfig ARCH_SUPPORTS_SHADOW_CALL_STACK
692d08b9f0cSSami Tolvanen	bool
693d08b9f0cSSami Tolvanen	help
694afcf5441SDan Li	  An architecture should select this if it supports the compiler's
695afcf5441SDan Li	  Shadow Call Stack and implements runtime support for shadow stack
696aa7a65aeSWill Deacon	  switching.
697d08b9f0cSSami Tolvanen
698d08b9f0cSSami Tolvanenconfig SHADOW_CALL_STACK
699afcf5441SDan Li	bool "Shadow Call Stack"
700afcf5441SDan Li	depends on ARCH_SUPPORTS_SHADOW_CALL_STACK
70138792972SArd Biesheuvel	depends on DYNAMIC_FTRACE_WITH_ARGS || DYNAMIC_FTRACE_WITH_REGS || !FUNCTION_GRAPH_TRACER
7026f9dc684SSamuel Holland	depends on MMU
703d08b9f0cSSami Tolvanen	help
704afcf5441SDan Li	  This option enables the compiler's Shadow Call Stack, which
705afcf5441SDan Li	  uses a shadow stack to protect function return addresses from
706afcf5441SDan Li	  being overwritten by an attacker. More information can be found
707afcf5441SDan Li	  in the compiler's documentation:
708d08b9f0cSSami Tolvanen
709afcf5441SDan Li	  - Clang: https://clang.llvm.org/docs/ShadowCallStack.html
710afcf5441SDan Li	  - GCC: https://gcc.gnu.org/onlinedocs/gcc/Instrumentation-Options.html#Instrumentation-Options
711d08b9f0cSSami Tolvanen
712d08b9f0cSSami Tolvanen	  Note that security guarantees in the kernel differ from the
713d08b9f0cSSami Tolvanen	  ones documented for user space. The kernel must store addresses
714d08b9f0cSSami Tolvanen	  of shadow stacks in memory, which means an attacker capable of
715d08b9f0cSSami Tolvanen	  reading and writing arbitrary memory may be able to locate them
716d08b9f0cSSami Tolvanen	  and hijack control flow by modifying the stacks.
717d08b9f0cSSami Tolvanen
7189beccca0SArd Biesheuvelconfig DYNAMIC_SCS
7199beccca0SArd Biesheuvel	bool
7209beccca0SArd Biesheuvel	help
7219beccca0SArd Biesheuvel	  Set by the arch code if it relies on code patching to insert the
7229beccca0SArd Biesheuvel	  shadow call stack push and pop instructions rather than on the
7239beccca0SArd Biesheuvel	  compiler.
7249beccca0SArd Biesheuvel
725dc5723b0SSami Tolvanenconfig LTO
726dc5723b0SSami Tolvanen	bool
727dc5723b0SSami Tolvanen	help
728dc5723b0SSami Tolvanen	  Selected if the kernel will be built using the compiler's LTO feature.
729dc5723b0SSami Tolvanen
730dc5723b0SSami Tolvanenconfig LTO_CLANG
731dc5723b0SSami Tolvanen	bool
732dc5723b0SSami Tolvanen	select LTO
733dc5723b0SSami Tolvanen	help
734dc5723b0SSami Tolvanen	  Selected if the kernel will be built using Clang's LTO feature.
735dc5723b0SSami Tolvanen
736dc5723b0SSami Tolvanenconfig ARCH_SUPPORTS_LTO_CLANG
737dc5723b0SSami Tolvanen	bool
738dc5723b0SSami Tolvanen	help
739dc5723b0SSami Tolvanen	  An architecture should select this option if it supports:
740dc5723b0SSami Tolvanen	  - compiling with Clang,
741dc5723b0SSami Tolvanen	  - compiling inline assembly with Clang's integrated assembler,
742dc5723b0SSami Tolvanen	  - and linking with LLD.
743dc5723b0SSami Tolvanen
744dc5723b0SSami Tolvanenconfig ARCH_SUPPORTS_LTO_CLANG_THIN
745dc5723b0SSami Tolvanen	bool
746dc5723b0SSami Tolvanen	help
747dc5723b0SSami Tolvanen	  An architecture should select this option if it can support Clang's
748dc5723b0SSami Tolvanen	  ThinLTO mode.
749dc5723b0SSami Tolvanen
750dc5723b0SSami Tolvanenconfig HAS_LTO_CLANG
751dc5723b0SSami Tolvanen	def_bool y
7521e68a8afSNathan Chancellor	depends on CC_IS_CLANG && LD_IS_LLD && AS_IS_LLVM
753dc5723b0SSami Tolvanen	depends on $(success,$(NM) --help | head -n 1 | grep -qi llvm)
754dc5723b0SSami Tolvanen	depends on $(success,$(AR) --help | head -n 1 | grep -qi llvm)
755dc5723b0SSami Tolvanen	depends on ARCH_SUPPORTS_LTO_CLANG
756dc5723b0SSami Tolvanen	depends on !FTRACE_MCOUNT_USE_RECORDMCOUNT
757349fde59SJakob Koschel	# https://github.com/ClangBuiltLinux/linux/issues/1721
758349fde59SJakob Koschel	depends on (!KASAN || KASAN_HW_TAGS || CLANG_VERSION >= 170000) || !DEBUG_INFO
759349fde59SJakob Koschel	depends on (!KCOV || CLANG_VERSION >= 170000) || !DEBUG_INFO
760dc5723b0SSami Tolvanen	depends on !GCOV_KERNEL
761dc5723b0SSami Tolvanen	help
762dc5723b0SSami Tolvanen	  The compiler and Kconfig options support building with Clang's
763dc5723b0SSami Tolvanen	  LTO.
764dc5723b0SSami Tolvanen
765dc5723b0SSami Tolvanenchoice
766dc5723b0SSami Tolvanen	prompt "Link Time Optimization (LTO)"
767dc5723b0SSami Tolvanen	default LTO_NONE
768dc5723b0SSami Tolvanen	help
769dc5723b0SSami Tolvanen	  This option enables Link Time Optimization (LTO), which allows the
770dc5723b0SSami Tolvanen	  compiler to optimize binaries globally.
771dc5723b0SSami Tolvanen
772dc5723b0SSami Tolvanen	  If unsure, select LTO_NONE. Note that LTO is very resource-intensive
773dc5723b0SSami Tolvanen	  so it's disabled by default.
774dc5723b0SSami Tolvanen
775dc5723b0SSami Tolvanenconfig LTO_NONE
776dc5723b0SSami Tolvanen	bool "None"
777dc5723b0SSami Tolvanen	help
778dc5723b0SSami Tolvanen	  Build the kernel normally, without Link Time Optimization (LTO).
779dc5723b0SSami Tolvanen
780dc5723b0SSami Tolvanenconfig LTO_CLANG_FULL
781dc5723b0SSami Tolvanen	bool "Clang Full LTO (EXPERIMENTAL)"
782dc5723b0SSami Tolvanen	depends on HAS_LTO_CLANG
783dc5723b0SSami Tolvanen	depends on !COMPILE_TEST
784dc5723b0SSami Tolvanen	select LTO_CLANG
785dc5723b0SSami Tolvanen	help
786dc5723b0SSami Tolvanen	  This option enables Clang's full Link Time Optimization (LTO), which
787dc5723b0SSami Tolvanen	  allows the compiler to optimize the kernel globally. If you enable
788dc5723b0SSami Tolvanen	  this option, the compiler generates LLVM bitcode instead of ELF
789dc5723b0SSami Tolvanen	  object files, and the actual compilation from bitcode happens at
790dc5723b0SSami Tolvanen	  the LTO link step, which may take several minutes depending on the
791dc5723b0SSami Tolvanen	  kernel configuration. More information can be found from LLVM's
792dc5723b0SSami Tolvanen	  documentation:
793dc5723b0SSami Tolvanen
794dc5723b0SSami Tolvanen	    https://llvm.org/docs/LinkTimeOptimization.html
795dc5723b0SSami Tolvanen
796dc5723b0SSami Tolvanen	  During link time, this option can use a large amount of RAM, and
797dc5723b0SSami Tolvanen	  may take much longer than the ThinLTO option.
798dc5723b0SSami Tolvanen
799dc5723b0SSami Tolvanenconfig LTO_CLANG_THIN
800dc5723b0SSami Tolvanen	bool "Clang ThinLTO (EXPERIMENTAL)"
801dc5723b0SSami Tolvanen	depends on HAS_LTO_CLANG && ARCH_SUPPORTS_LTO_CLANG_THIN
802dc5723b0SSami Tolvanen	select LTO_CLANG
803dc5723b0SSami Tolvanen	help
804dc5723b0SSami Tolvanen	  This option enables Clang's ThinLTO, which allows for parallel
805dc5723b0SSami Tolvanen	  optimization and faster incremental compiles compared to the
806dc5723b0SSami Tolvanen	  CONFIG_LTO_CLANG_FULL option. More information can be found
807dc5723b0SSami Tolvanen	  from Clang's documentation:
808dc5723b0SSami Tolvanen
809dc5723b0SSami Tolvanen	    https://clang.llvm.org/docs/ThinLTO.html
810dc5723b0SSami Tolvanen
811dc5723b0SSami Tolvanen	  If unsure, say Y.
812dc5723b0SSami Tolvanenendchoice
813dc5723b0SSami Tolvanen
814cf68fffbSSami Tolvanenconfig ARCH_SUPPORTS_CFI_CLANG
815cf68fffbSSami Tolvanen	bool
816cf68fffbSSami Tolvanen	help
817cf68fffbSSami Tolvanen	  An architecture should select this option if it can support Clang's
818cf68fffbSSami Tolvanen	  Control-Flow Integrity (CFI) checking.
819cf68fffbSSami Tolvanen
82089245600SSami Tolvanenconfig ARCH_USES_CFI_TRAPS
82189245600SSami Tolvanen	bool
82289245600SSami Tolvanen
823cf68fffbSSami Tolvanenconfig CFI_CLANG
824cf68fffbSSami Tolvanen	bool "Use Clang's Control Flow Integrity (CFI)"
82589245600SSami Tolvanen	depends on ARCH_SUPPORTS_CFI_CLANG
82689245600SSami Tolvanen	depends on $(cc-option,-fsanitize=kcfi)
827cf68fffbSSami Tolvanen	help
828c4ca2276SLiu Song	  This option enables Clang's forward-edge Control Flow Integrity
829cf68fffbSSami Tolvanen	  (CFI) checking, where the compiler injects a runtime check to each
830cf68fffbSSami Tolvanen	  indirect function call to ensure the target is a valid function with
831cf68fffbSSami Tolvanen	  the correct static type. This restricts possible call targets and
832cf68fffbSSami Tolvanen	  makes it more difficult for an attacker to exploit bugs that allow
833cf68fffbSSami Tolvanen	  the modification of stored function pointers. More information can be
834cf68fffbSSami Tolvanen	  found from Clang's documentation:
835cf68fffbSSami Tolvanen
836cf68fffbSSami Tolvanen	    https://clang.llvm.org/docs/ControlFlowIntegrity.html
837cf68fffbSSami Tolvanen
838cf68fffbSSami Tolvanenconfig CFI_PERMISSIVE
839cf68fffbSSami Tolvanen	bool "Use CFI in permissive mode"
840cf68fffbSSami Tolvanen	depends on CFI_CLANG
841cf68fffbSSami Tolvanen	help
842cf68fffbSSami Tolvanen	  When selected, Control Flow Integrity (CFI) violations result in a
843cf68fffbSSami Tolvanen	  warning instead of a kernel panic. This option should only be used
844cf68fffbSSami Tolvanen	  for finding indirect call type mismatches during development.
845cf68fffbSSami Tolvanen
846cf68fffbSSami Tolvanen	  If unsure, say N.
847cf68fffbSSami Tolvanen
8480f60a8efSKees Cookconfig HAVE_ARCH_WITHIN_STACK_FRAMES
8490f60a8efSKees Cook	bool
8500f60a8efSKees Cook	help
8510f60a8efSKees Cook	  An architecture should select this if it can walk the kernel stack
8520f60a8efSKees Cook	  frames to determine if an object is part of either the arguments
8530f60a8efSKees Cook	  or local variables (i.e. that it excludes saved return addresses,
8540f60a8efSKees Cook	  and similar) by implementing an inline arch_within_stack_frames(),
8550f60a8efSKees Cook	  which is used by CONFIG_HARDENED_USERCOPY.
8560f60a8efSKees Cook
85724a9c541SFrederic Weisbeckerconfig HAVE_CONTEXT_TRACKING_USER
8582b1d5024SFrederic Weisbecker	bool
8592b1d5024SFrederic Weisbecker	help
86091d1aa43SFrederic Weisbecker	  Provide kernel/user boundaries probes necessary for subsystems
86191d1aa43SFrederic Weisbecker	  that need it, such as userspace RCU extended quiescent state.
862490f561bSFrederic Weisbecker	  Syscalls need to be wrapped inside user_exit()-user_enter(), either
863490f561bSFrederic Weisbecker	  optimized behind static key or through the slow path using TIF_NOHZ
864490f561bSFrederic Weisbecker	  flag. Exceptions handlers must be wrapped as well. Irqs are already
8656f0e6c15SFrederic Weisbecker	  protected inside ct_irq_enter/ct_irq_exit() but preemption or signal
866490f561bSFrederic Weisbecker	  handling on irq exit still need to be protected.
867490f561bSFrederic Weisbecker
86824a9c541SFrederic Weisbeckerconfig HAVE_CONTEXT_TRACKING_USER_OFFSTACK
86983c2da2eSFrederic Weisbecker	bool
87083c2da2eSFrederic Weisbecker	help
87183c2da2eSFrederic Weisbecker	  Architecture neither relies on exception_enter()/exception_exit()
87283c2da2eSFrederic Weisbecker	  nor on schedule_user(). Also preempt_schedule_notrace() and
87383c2da2eSFrederic Weisbecker	  preempt_schedule_irq() can't be called in a preemptible section
87483c2da2eSFrederic Weisbecker	  while context tracking is CONTEXT_USER. This feature reflects a sane
87583c2da2eSFrederic Weisbecker	  entry implementation where the following requirements are met on
87683c2da2eSFrederic Weisbecker	  critical entry code, ie: before user_exit() or after user_enter():
87783c2da2eSFrederic Weisbecker
87883c2da2eSFrederic Weisbecker	  - Critical entry code isn't preemptible (or better yet:
87983c2da2eSFrederic Weisbecker	    not interruptible).
880493c1822SFrederic Weisbecker	  - No use of RCU read side critical sections, unless ct_nmi_enter()
88183c2da2eSFrederic Weisbecker	    got called.
88283c2da2eSFrederic Weisbecker	  - No use of instrumentation, unless instrumentation_begin() got
88383c2da2eSFrederic Weisbecker	    called.
88483c2da2eSFrederic Weisbecker
885490f561bSFrederic Weisbeckerconfig HAVE_TIF_NOHZ
886490f561bSFrederic Weisbecker	bool
887490f561bSFrederic Weisbecker	help
888490f561bSFrederic Weisbecker	  Arch relies on TIF_NOHZ and syscall slow path to implement context
889490f561bSFrederic Weisbecker	  tracking calls to user_enter()/user_exit().
8902b1d5024SFrederic Weisbecker
891b952741cSFrederic Weisbeckerconfig HAVE_VIRT_CPU_ACCOUNTING
892b952741cSFrederic Weisbecker	bool
893b952741cSFrederic Weisbecker
8942b91ec9fSFrederic Weisbeckerconfig HAVE_VIRT_CPU_ACCOUNTING_IDLE
8952b91ec9fSFrederic Weisbecker	bool
8962b91ec9fSFrederic Weisbecker	help
8972b91ec9fSFrederic Weisbecker	  Architecture has its own way to account idle CPU time and therefore
8982b91ec9fSFrederic Weisbecker	  doesn't implement vtime_account_idle().
8992b91ec9fSFrederic Weisbecker
90040565b5aSStanislaw Gruszkaconfig ARCH_HAS_SCALED_CPUTIME
90140565b5aSStanislaw Gruszka	bool
90240565b5aSStanislaw Gruszka
903554b0004SKevin Hilmanconfig HAVE_VIRT_CPU_ACCOUNTING_GEN
904554b0004SKevin Hilman	bool
905554b0004SKevin Hilman	default y if 64BIT
906554b0004SKevin Hilman	help
907554b0004SKevin Hilman	  With VIRT_CPU_ACCOUNTING_GEN, cputime_t becomes 64-bit.
908554b0004SKevin Hilman	  Before enabling this option, arch code must be audited
909554b0004SKevin Hilman	  to ensure there are no races in concurrent read/write of
910554b0004SKevin Hilman	  cputime_t. For example, reading/writing 64-bit cputime_t on
911554b0004SKevin Hilman	  some 32-bit arches may require multiple accesses, so proper
912554b0004SKevin Hilman	  locking is needed to protect against concurrent accesses.
913554b0004SKevin Hilman
914fdf9c356SFrederic Weisbeckerconfig HAVE_IRQ_TIME_ACCOUNTING
915fdf9c356SFrederic Weisbecker	bool
916fdf9c356SFrederic Weisbecker	help
917fdf9c356SFrederic Weisbecker	  Archs need to ensure they use a high enough resolution clock to
918fdf9c356SFrederic Weisbecker	  support irq time accounting and then call enable_sched_clock_irqtime().
919fdf9c356SFrederic Weisbecker
920c49dd340SKalesh Singhconfig HAVE_MOVE_PUD
921c49dd340SKalesh Singh	bool
922c49dd340SKalesh Singh	help
923c49dd340SKalesh Singh	  Architectures that select this are able to move page tables at the
924c49dd340SKalesh Singh	  PUD level. If there are only 3 page table levels, the move effectively
925c49dd340SKalesh Singh	  happens at the PGD level.
926c49dd340SKalesh Singh
9272c91bd4aSJoel Fernandes (Google)config HAVE_MOVE_PMD
9282c91bd4aSJoel Fernandes (Google)	bool
9292c91bd4aSJoel Fernandes (Google)	help
9302c91bd4aSJoel Fernandes (Google)	  Archs that select this are able to move page tables at the PMD level.
9312c91bd4aSJoel Fernandes (Google)
93215626062SGerald Schaeferconfig HAVE_ARCH_TRANSPARENT_HUGEPAGE
93315626062SGerald Schaefer	bool
93415626062SGerald Schaefer
935a00cc7d9SMatthew Wilcoxconfig HAVE_ARCH_TRANSPARENT_HUGEPAGE_PUD
936a00cc7d9SMatthew Wilcox	bool
937a00cc7d9SMatthew Wilcox
9380ddab1d2SToshi Kaniconfig HAVE_ARCH_HUGE_VMAP
9390ddab1d2SToshi Kani	bool
9400ddab1d2SToshi Kani
941121e6f32SNicholas Piggin#
942121e6f32SNicholas Piggin#  Archs that select this would be capable of PMD-sized vmaps (i.e.,
943559089e0SSong Liu#  arch_vmap_pmd_supported() returns true). The VM_ALLOW_HUGE_VMAP flag
944559089e0SSong Liu#  must be used to enable allocations to use hugepages.
945121e6f32SNicholas Piggin#
946121e6f32SNicholas Pigginconfig HAVE_ARCH_HUGE_VMALLOC
947121e6f32SNicholas Piggin	depends on HAVE_ARCH_HUGE_VMAP
948121e6f32SNicholas Piggin	bool
949121e6f32SNicholas Piggin
9503876d4a3SAlexandre Ghiticonfig ARCH_WANT_HUGE_PMD_SHARE
9513876d4a3SAlexandre Ghiti	bool
9523876d4a3SAlexandre Ghiti
9532f0584f3SRick Edgecombe# Archs that want to use pmd_mkwrite on kernel memory need it defined even
9542f0584f3SRick Edgecombe# if there are no userspace memory management features that use it
9552f0584f3SRick Edgecombeconfig ARCH_WANT_KERNEL_PMD_MKWRITE
9562f0584f3SRick Edgecombe	bool
9572f0584f3SRick Edgecombe
9582f0584f3SRick Edgecombeconfig ARCH_WANT_PMD_MKWRITE
9592f0584f3SRick Edgecombe	def_bool TRANSPARENT_HUGEPAGE || ARCH_WANT_KERNEL_PMD_MKWRITE
9602f0584f3SRick Edgecombe
9610f8975ecSPavel Emelyanovconfig HAVE_ARCH_SOFT_DIRTY
9620f8975ecSPavel Emelyanov	bool
9630f8975ecSPavel Emelyanov
964786d35d4SDavid Howellsconfig HAVE_MOD_ARCH_SPECIFIC
965786d35d4SDavid Howells	bool
966786d35d4SDavid Howells	help
967786d35d4SDavid Howells	  The arch uses struct mod_arch_specific to store data.  Many arches
968786d35d4SDavid Howells	  just need a simple module loader without arch specific data - those
969786d35d4SDavid Howells	  should not enable this.
970786d35d4SDavid Howells
971786d35d4SDavid Howellsconfig MODULES_USE_ELF_RELA
972786d35d4SDavid Howells	bool
973786d35d4SDavid Howells	help
974786d35d4SDavid Howells	  Modules only use ELF RELA relocations.  Modules with ELF REL
975786d35d4SDavid Howells	  relocations will give an error.
976786d35d4SDavid Howells
977786d35d4SDavid Howellsconfig MODULES_USE_ELF_REL
978786d35d4SDavid Howells	bool
979786d35d4SDavid Howells	help
980786d35d4SDavid Howells	  Modules only use ELF REL relocations.  Modules with ELF RELA
981786d35d4SDavid Howells	  relocations will give an error.
982786d35d4SDavid Howells
98301dc0386SChristophe Leroyconfig ARCH_WANTS_MODULES_DATA_IN_VMALLOC
98401dc0386SChristophe Leroy	bool
98501dc0386SChristophe Leroy	help
98601dc0386SChristophe Leroy	  For architectures like powerpc/32 which have constraints on module
98701dc0386SChristophe Leroy	  allocation and need to allocate module data outside of module area.
98801dc0386SChristophe Leroy
989223b5e57SMike Rapoport (IBM)config ARCH_WANTS_EXECMEM_LATE
990223b5e57SMike Rapoport (IBM)	bool
991223b5e57SMike Rapoport (IBM)	help
992223b5e57SMike Rapoport (IBM)	  For architectures that do not allocate executable memory early on
993223b5e57SMike Rapoport (IBM)	  boot, but rather require its initialization late when there is
994223b5e57SMike Rapoport (IBM)	  enough entropy for module space randomization, for instance
995223b5e57SMike Rapoport (IBM)	  arm64.
996223b5e57SMike Rapoport (IBM)
997cc1f0274SFrederic Weisbeckerconfig HAVE_IRQ_EXIT_ON_IRQ_STACK
998cc1f0274SFrederic Weisbecker	bool
999cc1f0274SFrederic Weisbecker	help
1000cc1f0274SFrederic Weisbecker	  Architecture doesn't only execute the irq handler on the irq stack
1001cc1f0274SFrederic Weisbecker	  but also irq_exit(). This way we can process softirqs on this irq
1002cc1f0274SFrederic Weisbecker	  stack instead of switching to a new one when we call __do_softirq()
1003cc1f0274SFrederic Weisbecker	  in the end of an hardirq.
1004cc1f0274SFrederic Weisbecker	  This spares a stack switch and improves cache usage on softirq
1005cc1f0274SFrederic Weisbecker	  processing.
1006cc1f0274SFrederic Weisbecker
1007cd1a41ceSThomas Gleixnerconfig HAVE_SOFTIRQ_ON_OWN_STACK
1008cd1a41ceSThomas Gleixner	bool
1009cd1a41ceSThomas Gleixner	help
1010cd1a41ceSThomas Gleixner	  Architecture provides a function to run __do_softirq() on a
1011c226bc3cSColin Ian King	  separate stack.
1012cd1a41ceSThomas Gleixner
10138cbb2b50SSebastian Andrzej Siewiorconfig SOFTIRQ_ON_OWN_STACK
10148cbb2b50SSebastian Andrzej Siewior	def_bool HAVE_SOFTIRQ_ON_OWN_STACK && !PREEMPT_RT
10158cbb2b50SSebastian Andrzej Siewior
101612700c17SArnd Bergmannconfig ALTERNATE_USER_ADDRESS_SPACE
101712700c17SArnd Bergmann	bool
101812700c17SArnd Bergmann	help
101912700c17SArnd Bergmann	  Architectures set this when the CPU uses separate address
102012700c17SArnd Bergmann	  spaces for kernel and user space pointers. In this case, the
102112700c17SArnd Bergmann	  access_ok() check on a __user pointer is skipped.
102212700c17SArnd Bergmann
1023235a8f02SKirill A. Shutemovconfig PGTABLE_LEVELS
1024235a8f02SKirill A. Shutemov	int
1025235a8f02SKirill A. Shutemov	default 2
1026235a8f02SKirill A. Shutemov
10272b68f6caSKees Cookconfig ARCH_HAS_ELF_RANDOMIZE
10282b68f6caSKees Cook	bool
10292b68f6caSKees Cook	help
10302b68f6caSKees Cook	  An architecture supports choosing randomized locations for
10312b68f6caSKees Cook	  stack, mmap, brk, and ET_DYN. Defined functions:
10322b68f6caSKees Cook	  - arch_mmap_rnd()
1033204db6edSKees Cook	  - arch_randomize_brk()
10342b68f6caSKees Cook
1035d07e2259SDaniel Cashmanconfig HAVE_ARCH_MMAP_RND_BITS
1036d07e2259SDaniel Cashman	bool
1037d07e2259SDaniel Cashman	help
1038d07e2259SDaniel Cashman	  An arch should select this symbol if it supports setting a variable
1039d07e2259SDaniel Cashman	  number of bits for use in establishing the base address for mmap
1040d07e2259SDaniel Cashman	  allocations, has MMU enabled and provides values for both:
1041d07e2259SDaniel Cashman	  - ARCH_MMAP_RND_BITS_MIN
1042d07e2259SDaniel Cashman	  - ARCH_MMAP_RND_BITS_MAX
1043d07e2259SDaniel Cashman
10445f56a5dfSJiri Slabyconfig HAVE_EXIT_THREAD
10455f56a5dfSJiri Slaby	bool
10465f56a5dfSJiri Slaby	help
10475f56a5dfSJiri Slaby	  An architecture implements exit_thread.
10485f56a5dfSJiri Slaby
1049d07e2259SDaniel Cashmanconfig ARCH_MMAP_RND_BITS_MIN
1050d07e2259SDaniel Cashman	int
1051d07e2259SDaniel Cashman
1052d07e2259SDaniel Cashmanconfig ARCH_MMAP_RND_BITS_MAX
1053d07e2259SDaniel Cashman	int
1054d07e2259SDaniel Cashman
1055d07e2259SDaniel Cashmanconfig ARCH_MMAP_RND_BITS_DEFAULT
1056d07e2259SDaniel Cashman	int
1057d07e2259SDaniel Cashman
1058d07e2259SDaniel Cashmanconfig ARCH_MMAP_RND_BITS
1059d07e2259SDaniel Cashman	int "Number of bits to use for ASLR of mmap base address" if EXPERT
1060d07e2259SDaniel Cashman	range ARCH_MMAP_RND_BITS_MIN ARCH_MMAP_RND_BITS_MAX
1061d07e2259SDaniel Cashman	default ARCH_MMAP_RND_BITS_DEFAULT if ARCH_MMAP_RND_BITS_DEFAULT
1062d07e2259SDaniel Cashman	default ARCH_MMAP_RND_BITS_MIN
1063d07e2259SDaniel Cashman	depends on HAVE_ARCH_MMAP_RND_BITS
1064d07e2259SDaniel Cashman	help
1065d07e2259SDaniel Cashman	  This value can be used to select the number of bits to use to
1066d07e2259SDaniel Cashman	  determine the random offset to the base address of vma regions
1067d07e2259SDaniel Cashman	  resulting from mmap allocations. This value will be bounded
1068d07e2259SDaniel Cashman	  by the architecture's minimum and maximum supported values.
1069d07e2259SDaniel Cashman
1070d07e2259SDaniel Cashman	  This value can be changed after boot using the
1071d07e2259SDaniel Cashman	  /proc/sys/vm/mmap_rnd_bits tunable
1072d07e2259SDaniel Cashman
1073d07e2259SDaniel Cashmanconfig HAVE_ARCH_MMAP_RND_COMPAT_BITS
1074d07e2259SDaniel Cashman	bool
1075d07e2259SDaniel Cashman	help
1076d07e2259SDaniel Cashman	  An arch should select this symbol if it supports running applications
1077d07e2259SDaniel Cashman	  in compatibility mode, supports setting a variable number of bits for
1078d07e2259SDaniel Cashman	  use in establishing the base address for mmap allocations, has MMU
1079d07e2259SDaniel Cashman	  enabled and provides values for both:
1080d07e2259SDaniel Cashman	  - ARCH_MMAP_RND_COMPAT_BITS_MIN
1081d07e2259SDaniel Cashman	  - ARCH_MMAP_RND_COMPAT_BITS_MAX
1082d07e2259SDaniel Cashman
1083d07e2259SDaniel Cashmanconfig ARCH_MMAP_RND_COMPAT_BITS_MIN
1084d07e2259SDaniel Cashman	int
1085d07e2259SDaniel Cashman
1086d07e2259SDaniel Cashmanconfig ARCH_MMAP_RND_COMPAT_BITS_MAX
1087d07e2259SDaniel Cashman	int
1088d07e2259SDaniel Cashman
1089d07e2259SDaniel Cashmanconfig ARCH_MMAP_RND_COMPAT_BITS_DEFAULT
1090d07e2259SDaniel Cashman	int
1091d07e2259SDaniel Cashman
1092d07e2259SDaniel Cashmanconfig ARCH_MMAP_RND_COMPAT_BITS
1093d07e2259SDaniel Cashman	int "Number of bits to use for ASLR of mmap base address for compatible applications" if EXPERT
1094d07e2259SDaniel Cashman	range ARCH_MMAP_RND_COMPAT_BITS_MIN ARCH_MMAP_RND_COMPAT_BITS_MAX
1095d07e2259SDaniel Cashman	default ARCH_MMAP_RND_COMPAT_BITS_DEFAULT if ARCH_MMAP_RND_COMPAT_BITS_DEFAULT
1096d07e2259SDaniel Cashman	default ARCH_MMAP_RND_COMPAT_BITS_MIN
1097d07e2259SDaniel Cashman	depends on HAVE_ARCH_MMAP_RND_COMPAT_BITS
1098d07e2259SDaniel Cashman	help
1099d07e2259SDaniel Cashman	  This value can be used to select the number of bits to use to
1100d07e2259SDaniel Cashman	  determine the random offset to the base address of vma regions
1101d07e2259SDaniel Cashman	  resulting from mmap allocations for compatible applications This
1102d07e2259SDaniel Cashman	  value will be bounded by the architecture's minimum and maximum
1103d07e2259SDaniel Cashman	  supported values.
1104d07e2259SDaniel Cashman
1105d07e2259SDaniel Cashman	  This value can be changed after boot using the
1106d07e2259SDaniel Cashman	  /proc/sys/vm/mmap_rnd_compat_bits tunable
1107d07e2259SDaniel Cashman
11081b028f78SDmitry Safonovconfig HAVE_ARCH_COMPAT_MMAP_BASES
11091b028f78SDmitry Safonov	bool
11101b028f78SDmitry Safonov	help
11111b028f78SDmitry Safonov	  This allows 64bit applications to invoke 32-bit mmap() syscall
11121b028f78SDmitry Safonov	  and vice-versa 32-bit applications to call 64-bit mmap().
11131b028f78SDmitry Safonov	  Required for applications doing different bitness syscalls.
11141b028f78SDmitry Safonov
1115ba89f9c8SArnd Bergmannconfig HAVE_PAGE_SIZE_4KB
1116ba89f9c8SArnd Bergmann	bool
1117ba89f9c8SArnd Bergmann
1118ba89f9c8SArnd Bergmannconfig HAVE_PAGE_SIZE_8KB
1119ba89f9c8SArnd Bergmann	bool
1120ba89f9c8SArnd Bergmann
1121ba89f9c8SArnd Bergmannconfig HAVE_PAGE_SIZE_16KB
1122ba89f9c8SArnd Bergmann	bool
1123ba89f9c8SArnd Bergmann
1124ba89f9c8SArnd Bergmannconfig HAVE_PAGE_SIZE_32KB
1125ba89f9c8SArnd Bergmann	bool
1126ba89f9c8SArnd Bergmann
1127ba89f9c8SArnd Bergmannconfig HAVE_PAGE_SIZE_64KB
1128ba89f9c8SArnd Bergmann	bool
1129ba89f9c8SArnd Bergmann
1130ba89f9c8SArnd Bergmannconfig HAVE_PAGE_SIZE_256KB
1131ba89f9c8SArnd Bergmann	bool
1132ba89f9c8SArnd Bergmann
1133ba89f9c8SArnd Bergmannchoice
1134ba89f9c8SArnd Bergmann	prompt "MMU page size"
1135ba89f9c8SArnd Bergmann
1136ba89f9c8SArnd Bergmannconfig PAGE_SIZE_4KB
1137ba89f9c8SArnd Bergmann	bool "4KiB pages"
1138ba89f9c8SArnd Bergmann	depends on HAVE_PAGE_SIZE_4KB
1139ba89f9c8SArnd Bergmann	help
1140ba89f9c8SArnd Bergmann	  This option select the standard 4KiB Linux page size and the only
1141ba89f9c8SArnd Bergmann	  available option on many architectures. Using 4KiB page size will
1142ba89f9c8SArnd Bergmann	  minimize memory consumption and is therefore recommended for low
1143ba89f9c8SArnd Bergmann	  memory systems.
1144ba89f9c8SArnd Bergmann	  Some software that is written for x86 systems makes incorrect
1145ba89f9c8SArnd Bergmann	  assumptions about the page size and only runs on 4KiB pages.
1146ba89f9c8SArnd Bergmann
1147ba89f9c8SArnd Bergmannconfig PAGE_SIZE_8KB
1148ba89f9c8SArnd Bergmann	bool "8KiB pages"
1149ba89f9c8SArnd Bergmann	depends on HAVE_PAGE_SIZE_8KB
1150ba89f9c8SArnd Bergmann	help
1151ba89f9c8SArnd Bergmann	  This option is the only supported page size on a few older
1152ba89f9c8SArnd Bergmann	  processors, and can be slightly faster than 4KiB pages.
1153ba89f9c8SArnd Bergmann
1154ba89f9c8SArnd Bergmannconfig PAGE_SIZE_16KB
1155ba89f9c8SArnd Bergmann	bool "16KiB pages"
1156ba89f9c8SArnd Bergmann	depends on HAVE_PAGE_SIZE_16KB
1157ba89f9c8SArnd Bergmann	help
1158ba89f9c8SArnd Bergmann	  This option is usually a good compromise between memory
1159ba89f9c8SArnd Bergmann	  consumption and performance for typical desktop and server
1160ba89f9c8SArnd Bergmann	  workloads, often saving a level of page table lookups compared
1161ba89f9c8SArnd Bergmann	  to 4KB pages as well as reducing TLB pressure and overhead of
1162ba89f9c8SArnd Bergmann	  per-page operations in the kernel at the expense of a larger
1163ba89f9c8SArnd Bergmann	  page cache.
1164ba89f9c8SArnd Bergmann
1165ba89f9c8SArnd Bergmannconfig PAGE_SIZE_32KB
1166ba89f9c8SArnd Bergmann	bool "32KiB pages"
1167ba89f9c8SArnd Bergmann	depends on HAVE_PAGE_SIZE_32KB
1168ba89f9c8SArnd Bergmann	help
1169ba89f9c8SArnd Bergmann	  Using 32KiB page size will result in slightly higher performance
1170ba89f9c8SArnd Bergmann	  kernel at the price of higher memory consumption compared to
1171ba89f9c8SArnd Bergmann	  16KiB pages.	This option is available only on cnMIPS cores.
1172ba89f9c8SArnd Bergmann	  Note that you will need a suitable Linux distribution to
1173ba89f9c8SArnd Bergmann	  support this.
1174ba89f9c8SArnd Bergmann
1175ba89f9c8SArnd Bergmannconfig PAGE_SIZE_64KB
1176ba89f9c8SArnd Bergmann	bool "64KiB pages"
1177ba89f9c8SArnd Bergmann	depends on HAVE_PAGE_SIZE_64KB
1178ba89f9c8SArnd Bergmann	help
1179ba89f9c8SArnd Bergmann	  Using 64KiB page size will result in slightly higher performance
1180ba89f9c8SArnd Bergmann	  kernel at the price of much higher memory consumption compared to
1181ba89f9c8SArnd Bergmann	  4KiB or 16KiB pages.
1182ba89f9c8SArnd Bergmann	  This is not suitable for general-purpose workloads but the
1183ba89f9c8SArnd Bergmann	  better performance may be worth the cost for certain types of
1184ba89f9c8SArnd Bergmann	  supercomputing or database applications that work mostly with
1185ba89f9c8SArnd Bergmann	  large in-memory data rather than small files.
1186ba89f9c8SArnd Bergmann
1187ba89f9c8SArnd Bergmannconfig PAGE_SIZE_256KB
1188ba89f9c8SArnd Bergmann	bool "256KiB pages"
1189ba89f9c8SArnd Bergmann	depends on HAVE_PAGE_SIZE_256KB
1190ba89f9c8SArnd Bergmann	help
1191ba89f9c8SArnd Bergmann	  256KiB pages have little practical value due to their extreme
1192ba89f9c8SArnd Bergmann	  memory usage.  The kernel will only be able to run applications
1193ba89f9c8SArnd Bergmann	  that have been compiled with '-zmax-page-size' set to 256KiB
1194ba89f9c8SArnd Bergmann	  (the default is 64KiB or 4KiB on most architectures).
1195ba89f9c8SArnd Bergmann
1196ba89f9c8SArnd Bergmannendchoice
1197ba89f9c8SArnd Bergmann
11981f0e290cSGuenter Roeckconfig PAGE_SIZE_LESS_THAN_64KB
11991f0e290cSGuenter Roeck	def_bool y
12001f0e290cSGuenter Roeck	depends on !PAGE_SIZE_64KB
1201e4bbd20dSNathan Chancellor	depends on PAGE_SIZE_LESS_THAN_256KB
1202e4bbd20dSNathan Chancellor
1203e4bbd20dSNathan Chancellorconfig PAGE_SIZE_LESS_THAN_256KB
1204e4bbd20dSNathan Chancellor	def_bool y
12051f0e290cSGuenter Roeck	depends on !PAGE_SIZE_256KB
12061f0e290cSGuenter Roeck
1207ba89f9c8SArnd Bergmannconfig PAGE_SHIFT
1208ba89f9c8SArnd Bergmann	int
1209ba89f9c8SArnd Bergmann	default	12 if PAGE_SIZE_4KB
1210ba89f9c8SArnd Bergmann	default	13 if PAGE_SIZE_8KB
1211ba89f9c8SArnd Bergmann	default	14 if PAGE_SIZE_16KB
1212ba89f9c8SArnd Bergmann	default	15 if PAGE_SIZE_32KB
1213ba89f9c8SArnd Bergmann	default	16 if PAGE_SIZE_64KB
1214ba89f9c8SArnd Bergmann	default	18 if PAGE_SIZE_256KB
1215ba89f9c8SArnd Bergmann
121667f3977fSAlexandre Ghiti# This allows to use a set of generic functions to determine mmap base
121767f3977fSAlexandre Ghiti# address by giving priority to top-down scheme only if the process
121867f3977fSAlexandre Ghiti# is not in legacy mode (compat task, unlimited stack size or
121967f3977fSAlexandre Ghiti# sysctl_legacy_va_layout).
122067f3977fSAlexandre Ghiti# Architecture that selects this option can provide its own version of:
122167f3977fSAlexandre Ghiti# - STACK_RND_MASK
122267f3977fSAlexandre Ghiticonfig ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT
122367f3977fSAlexandre Ghiti	bool
122467f3977fSAlexandre Ghiti	depends on MMU
1225e7142bf5SAlexandre Ghiti	select ARCH_HAS_ELF_RANDOMIZE
122667f3977fSAlexandre Ghiti
122703f16cd0SJosh Poimboeufconfig HAVE_OBJTOOL
122803f16cd0SJosh Poimboeuf	bool
122903f16cd0SJosh Poimboeuf
12304ab7674fSJosh Poimboeufconfig HAVE_JUMP_LABEL_HACK
12314ab7674fSJosh Poimboeuf	bool
12324ab7674fSJosh Poimboeuf
123322102f45SJosh Poimboeufconfig HAVE_NOINSTR_HACK
123422102f45SJosh Poimboeuf	bool
123522102f45SJosh Poimboeuf
1236489e355bSJosh Poimboeufconfig HAVE_NOINSTR_VALIDATION
1237489e355bSJosh Poimboeuf	bool
1238489e355bSJosh Poimboeuf
12395f3da8c0SJosh Poimboeufconfig HAVE_UACCESS_VALIDATION
12405f3da8c0SJosh Poimboeuf	bool
12415f3da8c0SJosh Poimboeuf	select OBJTOOL
12425f3da8c0SJosh Poimboeuf
1243b9ab5ebbSJosh Poimboeufconfig HAVE_STACK_VALIDATION
1244b9ab5ebbSJosh Poimboeuf	bool
1245b9ab5ebbSJosh Poimboeuf	help
124603f16cd0SJosh Poimboeuf	  Architecture supports objtool compile-time frame pointer rule
124703f16cd0SJosh Poimboeuf	  validation.
1248b9ab5ebbSJosh Poimboeuf
1249af085d90SJosh Poimboeufconfig HAVE_RELIABLE_STACKTRACE
1250af085d90SJosh Poimboeuf	bool
1251af085d90SJosh Poimboeuf	help
1252140d7e88SMiroslav Benes	  Architecture has either save_stack_trace_tsk_reliable() or
1253140d7e88SMiroslav Benes	  arch_stack_walk_reliable() function which only returns a stack trace
1254140d7e88SMiroslav Benes	  if it can guarantee the trace is reliable.
1255af085d90SJosh Poimboeuf
1256468a9428SGeorge Spelvinconfig HAVE_ARCH_HASH
1257468a9428SGeorge Spelvin	bool
1258468a9428SGeorge Spelvin	default n
1259468a9428SGeorge Spelvin	help
1260468a9428SGeorge Spelvin	  If this is set, the architecture provides an <asm/hash.h>
1261468a9428SGeorge Spelvin	  file which provides platform-specific implementations of some
1262468a9428SGeorge Spelvin	  functions in <linux/hash.h> or fs/namei.c.
1263468a9428SGeorge Spelvin
1264666047feSFinn Thainconfig HAVE_ARCH_NVRAM_OPS
1265666047feSFinn Thain	bool
1266666047feSFinn Thain
12673a495511SWilliam Breathitt Grayconfig ISA_BUS_API
12683a495511SWilliam Breathitt Gray	def_bool ISA
12693a495511SWilliam Breathitt Gray
1270d2125043SAl Viro#
1271d2125043SAl Viro# ABI hall of shame
1272d2125043SAl Viro#
1273d2125043SAl Viroconfig CLONE_BACKWARDS
1274d2125043SAl Viro	bool
1275d2125043SAl Viro	help
1276d2125043SAl Viro	  Architecture has tls passed as the 4th argument of clone(2),
1277d2125043SAl Viro	  not the 5th one.
1278d2125043SAl Viro
1279d2125043SAl Viroconfig CLONE_BACKWARDS2
1280d2125043SAl Viro	bool
1281d2125043SAl Viro	help
1282d2125043SAl Viro	  Architecture has the first two arguments of clone(2) swapped.
1283d2125043SAl Viro
1284dfa9771aSMichal Simekconfig CLONE_BACKWARDS3
1285dfa9771aSMichal Simek	bool
1286dfa9771aSMichal Simek	help
1287dfa9771aSMichal Simek	  Architecture has tls passed as the 3rd argument of clone(2),
1288dfa9771aSMichal Simek	  not the 5th one.
1289dfa9771aSMichal Simek
1290eaca6eaeSAl Viroconfig ODD_RT_SIGACTION
1291eaca6eaeSAl Viro	bool
1292eaca6eaeSAl Viro	help
1293eaca6eaeSAl Viro	  Architecture has unusual rt_sigaction(2) arguments
1294eaca6eaeSAl Viro
12950a0e8cdfSAl Viroconfig OLD_SIGSUSPEND
12960a0e8cdfSAl Viro	bool
12970a0e8cdfSAl Viro	help
12980a0e8cdfSAl Viro	  Architecture has old sigsuspend(2) syscall, of one-argument variety
12990a0e8cdfSAl Viro
13000a0e8cdfSAl Viroconfig OLD_SIGSUSPEND3
13010a0e8cdfSAl Viro	bool
13020a0e8cdfSAl Viro	help
13030a0e8cdfSAl Viro	  Even weirder antique ABI - three-argument sigsuspend(2)
13040a0e8cdfSAl Viro
1305495dfbf7SAl Viroconfig OLD_SIGACTION
1306495dfbf7SAl Viro	bool
1307495dfbf7SAl Viro	help
1308495dfbf7SAl Viro	  Architecture has old sigaction(2) syscall.  Nope, not the same
1309495dfbf7SAl Viro	  as OLD_SIGSUSPEND | OLD_SIGSUSPEND3 - alpha has sigsuspend(2),
1310495dfbf7SAl Viro	  but fairly different variant of sigaction(2), thanks to OSF/1
1311495dfbf7SAl Viro	  compatibility...
1312495dfbf7SAl Viro
1313495dfbf7SAl Viroconfig COMPAT_OLD_SIGACTION
1314495dfbf7SAl Viro	bool
1315495dfbf7SAl Viro
131617435e5fSDeepa Dinamaniconfig COMPAT_32BIT_TIME
1317942437c9SArnd Bergmann	bool "Provide system calls for 32-bit time_t"
1318942437c9SArnd Bergmann	default !64BIT || COMPAT
131917435e5fSDeepa Dinamani	help
132017435e5fSDeepa Dinamani	  This enables 32 bit time_t support in addition to 64 bit time_t support.
132117435e5fSDeepa Dinamani	  This is relevant on all 32-bit architectures, and 64-bit architectures
132217435e5fSDeepa Dinamani	  as part of compat syscall handling.
132317435e5fSDeepa Dinamani
132487a4c375SChristoph Hellwigconfig ARCH_NO_PREEMPT
132587a4c375SChristoph Hellwig	bool
132687a4c375SChristoph Hellwig
1327a50a3f4bSThomas Gleixnerconfig ARCH_SUPPORTS_RT
1328a50a3f4bSThomas Gleixner	bool
1329a50a3f4bSThomas Gleixner
1330fff7fb0bSZhaoxiu Zengconfig CPU_NO_EFFICIENT_FFS
1331fff7fb0bSZhaoxiu Zeng	def_bool n
1332fff7fb0bSZhaoxiu Zeng
1333ba14a194SAndy Lutomirskiconfig HAVE_ARCH_VMAP_STACK
1334ba14a194SAndy Lutomirski	def_bool n
1335ba14a194SAndy Lutomirski	help
1336ba14a194SAndy Lutomirski	  An arch should select this symbol if it can support kernel stacks
1337ba14a194SAndy Lutomirski	  in vmalloc space.  This means:
1338ba14a194SAndy Lutomirski
1339ba14a194SAndy Lutomirski	  - vmalloc space must be large enough to hold many kernel stacks.
1340ba14a194SAndy Lutomirski	    This may rule out many 32-bit architectures.
1341ba14a194SAndy Lutomirski
1342ba14a194SAndy Lutomirski	  - Stacks in vmalloc space need to work reliably.  For example, if
1343ba14a194SAndy Lutomirski	    vmap page tables are created on demand, either this mechanism
1344ba14a194SAndy Lutomirski	    needs to work while the stack points to a virtual address with
1345ba14a194SAndy Lutomirski	    unpopulated page tables or arch code (switch_to() and switch_mm(),
1346ba14a194SAndy Lutomirski	    most likely) needs to ensure that the stack's page table entries
1347ba14a194SAndy Lutomirski	    are populated before running on a possibly unpopulated stack.
1348ba14a194SAndy Lutomirski
1349ba14a194SAndy Lutomirski	  - If the stack overflows into a guard page, something reasonable
1350ba14a194SAndy Lutomirski	    should happen.  The definition of "reasonable" is flexible, but
1351ba14a194SAndy Lutomirski	    instantly rebooting without logging anything would be unfriendly.
1352ba14a194SAndy Lutomirski
1353ba14a194SAndy Lutomirskiconfig VMAP_STACK
1354ba14a194SAndy Lutomirski	default y
1355ba14a194SAndy Lutomirski	bool "Use a virtually-mapped stack"
1356eafb149eSDaniel Axtens	depends on HAVE_ARCH_VMAP_STACK
135738dd767dSAndrey Konovalov	depends on !KASAN || KASAN_HW_TAGS || KASAN_VMALLOC
1358a7f7f624SMasahiro Yamada	help
1359ba14a194SAndy Lutomirski	  Enable this if you want the use virtually-mapped kernel stacks
1360ba14a194SAndy Lutomirski	  with guard pages.  This causes kernel stack overflows to be
1361ba14a194SAndy Lutomirski	  caught immediately rather than causing difficult-to-diagnose
1362ba14a194SAndy Lutomirski	  corruption.
1363ba14a194SAndy Lutomirski
136438dd767dSAndrey Konovalov	  To use this with software KASAN modes, the architecture must support
136538dd767dSAndrey Konovalov	  backing virtual mappings with real shadow memory, and KASAN_VMALLOC
136638dd767dSAndrey Konovalov	  must be enabled.
1367ba14a194SAndy Lutomirski
136839218ff4SKees Cookconfig HAVE_ARCH_RANDOMIZE_KSTACK_OFFSET
136939218ff4SKees Cook	def_bool n
137039218ff4SKees Cook	help
137139218ff4SKees Cook	  An arch should select this symbol if it can support kernel stack
137239218ff4SKees Cook	  offset randomization with calls to add_random_kstack_offset()
137339218ff4SKees Cook	  during syscall entry and choose_random_kstack_offset() during
137439218ff4SKees Cook	  syscall exit. Careful removal of -fstack-protector-strong and
137539218ff4SKees Cook	  -fstack-protector should also be applied to the entry code and
137639218ff4SKees Cook	  closely examined, as the artificial stack bump looks like an array
137739218ff4SKees Cook	  to the compiler, so it will attempt to add canary checks regardless
137839218ff4SKees Cook	  of the static branch state.
137939218ff4SKees Cook
13808cb37a59SMarco Elverconfig RANDOMIZE_KSTACK_OFFSET
13818cb37a59SMarco Elver	bool "Support for randomizing kernel stack offset on syscall entry" if EXPERT
13828cb37a59SMarco Elver	default y
138339218ff4SKees Cook	depends on HAVE_ARCH_RANDOMIZE_KSTACK_OFFSET
1384efa90c11SMarco Elver	depends on INIT_STACK_NONE || !CC_IS_CLANG || CLANG_VERSION >= 140000
138539218ff4SKees Cook	help
138639218ff4SKees Cook	  The kernel stack offset can be randomized (after pt_regs) by
138739218ff4SKees Cook	  roughly 5 bits of entropy, frustrating memory corruption
138839218ff4SKees Cook	  attacks that depend on stack address determinism or
13898cb37a59SMarco Elver	  cross-syscall address exposures.
13908cb37a59SMarco Elver
13918cb37a59SMarco Elver	  The feature is controlled via the "randomize_kstack_offset=on/off"
13928cb37a59SMarco Elver	  kernel boot param, and if turned off has zero overhead due to its use
13938cb37a59SMarco Elver	  of static branches (see JUMP_LABEL).
13948cb37a59SMarco Elver
13958cb37a59SMarco Elver	  If unsure, say Y.
13968cb37a59SMarco Elver
13978cb37a59SMarco Elverconfig RANDOMIZE_KSTACK_OFFSET_DEFAULT
13988cb37a59SMarco Elver	bool "Default state of kernel stack offset randomization"
13998cb37a59SMarco Elver	depends on RANDOMIZE_KSTACK_OFFSET
14008cb37a59SMarco Elver	help
14018cb37a59SMarco Elver	  Kernel stack offset randomization is controlled by kernel boot param
14028cb37a59SMarco Elver	  "randomize_kstack_offset=on/off", and this config chooses the default
14038cb37a59SMarco Elver	  boot state.
140439218ff4SKees Cook
1405ad21fc4fSLaura Abbottconfig ARCH_OPTIONAL_KERNEL_RWX
1406ad21fc4fSLaura Abbott	def_bool n
1407ad21fc4fSLaura Abbott
1408ad21fc4fSLaura Abbottconfig ARCH_OPTIONAL_KERNEL_RWX_DEFAULT
1409ad21fc4fSLaura Abbott	def_bool n
1410ad21fc4fSLaura Abbott
1411ad21fc4fSLaura Abbottconfig ARCH_HAS_STRICT_KERNEL_RWX
1412ad21fc4fSLaura Abbott	def_bool n
1413ad21fc4fSLaura Abbott
14140f5bf6d0SLaura Abbottconfig STRICT_KERNEL_RWX
1415ad21fc4fSLaura Abbott	bool "Make kernel text and rodata read-only" if ARCH_OPTIONAL_KERNEL_RWX
1416ad21fc4fSLaura Abbott	depends on ARCH_HAS_STRICT_KERNEL_RWX
1417ad21fc4fSLaura Abbott	default !ARCH_OPTIONAL_KERNEL_RWX || ARCH_OPTIONAL_KERNEL_RWX_DEFAULT
1418ad21fc4fSLaura Abbott	help
1419ad21fc4fSLaura Abbott	  If this is set, kernel text and rodata memory will be made read-only,
1420ad21fc4fSLaura Abbott	  and non-text memory will be made non-executable. This provides
1421ad21fc4fSLaura Abbott	  protection against certain security exploits (e.g. executing the heap
1422ad21fc4fSLaura Abbott	  or modifying text)
1423ad21fc4fSLaura Abbott
1424ad21fc4fSLaura Abbott	  These features are considered standard security practice these days.
1425ad21fc4fSLaura Abbott	  You should say Y here in almost all cases.
1426ad21fc4fSLaura Abbott
1427ad21fc4fSLaura Abbottconfig ARCH_HAS_STRICT_MODULE_RWX
1428ad21fc4fSLaura Abbott	def_bool n
1429ad21fc4fSLaura Abbott
14300f5bf6d0SLaura Abbottconfig STRICT_MODULE_RWX
1431ad21fc4fSLaura Abbott	bool "Set loadable kernel module data as NX and text as RO" if ARCH_OPTIONAL_KERNEL_RWX
1432ad21fc4fSLaura Abbott	depends on ARCH_HAS_STRICT_MODULE_RWX && MODULES
1433ad21fc4fSLaura Abbott	default !ARCH_OPTIONAL_KERNEL_RWX || ARCH_OPTIONAL_KERNEL_RWX_DEFAULT
1434ad21fc4fSLaura Abbott	help
1435ad21fc4fSLaura Abbott	  If this is set, module text and rodata memory will be made read-only,
1436ad21fc4fSLaura Abbott	  and non-text memory will be made non-executable. This provides
1437ad21fc4fSLaura Abbott	  protection against certain security exploits (e.g. writing to text)
1438ad21fc4fSLaura Abbott
1439ea8c64acSChristoph Hellwig# select if the architecture provides an asm/dma-direct.h header
1440ea8c64acSChristoph Hellwigconfig ARCH_HAS_PHYS_TO_DMA
1441ea8c64acSChristoph Hellwig	bool
1442ea8c64acSChristoph Hellwig
144304f264d3SPaul Burtonconfig HAVE_ARCH_COMPILER_H
144404f264d3SPaul Burton	bool
144504f264d3SPaul Burton	help
144604f264d3SPaul Burton	  An architecture can select this if it provides an
144704f264d3SPaul Burton	  asm/compiler.h header that should be included after
144804f264d3SPaul Burton	  linux/compiler-*.h in order to override macro definitions that those
144904f264d3SPaul Burton	  headers generally provide.
145004f264d3SPaul Burton
1451271ca788SArd Biesheuvelconfig HAVE_ARCH_PREL32_RELOCATIONS
1452271ca788SArd Biesheuvel	bool
1453271ca788SArd Biesheuvel	help
1454271ca788SArd Biesheuvel	  May be selected by an architecture if it supports place-relative
1455271ca788SArd Biesheuvel	  32-bit relocations, both in the toolchain and in the module loader,
1456271ca788SArd Biesheuvel	  in which case relative references can be used in special sections
1457271ca788SArd Biesheuvel	  for PCI fixup, initcalls etc which are only half the size on 64 bit
1458271ca788SArd Biesheuvel	  architectures, and don't require runtime relocation on relocatable
1459271ca788SArd Biesheuvel	  kernels.
1460271ca788SArd Biesheuvel
1461ce9084baSArd Biesheuvelconfig ARCH_USE_MEMREMAP_PROT
1462ce9084baSArd Biesheuvel	bool
1463ce9084baSArd Biesheuvel
1464fb346fd9SWaiman Longconfig LOCK_EVENT_COUNTS
1465fb346fd9SWaiman Long	bool "Locking event counts collection"
1466fb346fd9SWaiman Long	depends on DEBUG_FS
1467a7f7f624SMasahiro Yamada	help
1468fb346fd9SWaiman Long	  Enable light-weight counting of various locking related events
1469fb346fd9SWaiman Long	  in the system with minimal performance impact. This reduces
1470fb346fd9SWaiman Long	  the chance of application behavior change because of timing
1471fb346fd9SWaiman Long	  differences. The counts are reported via debugfs.
1472fb346fd9SWaiman Long
14735cf896fbSPeter Collingbourne# Select if the architecture has support for applying RELR relocations.
14745cf896fbSPeter Collingbourneconfig ARCH_HAS_RELR
14755cf896fbSPeter Collingbourne	bool
14765cf896fbSPeter Collingbourne
14775cf896fbSPeter Collingbourneconfig RELR
14785cf896fbSPeter Collingbourne	bool "Use RELR relocation packing"
14795cf896fbSPeter Collingbourne	depends on ARCH_HAS_RELR && TOOLS_SUPPORT_RELR
14805cf896fbSPeter Collingbourne	default y
14815cf896fbSPeter Collingbourne	help
14825cf896fbSPeter Collingbourne	  Store the kernel's dynamic relocations in the RELR relocation packing
14835cf896fbSPeter Collingbourne	  format. Requires a compatible linker (LLD supports this feature), as
14845cf896fbSPeter Collingbourne	  well as compatible NM and OBJCOPY utilities (llvm-nm and llvm-objcopy
14855cf896fbSPeter Collingbourne	  are compatible).
14865cf896fbSPeter Collingbourne
14870c9c1d56SThiago Jung Bauermannconfig ARCH_HAS_MEM_ENCRYPT
14880c9c1d56SThiago Jung Bauermann	bool
14890c9c1d56SThiago Jung Bauermann
149046b49b12STom Lendackyconfig ARCH_HAS_CC_PLATFORM
149146b49b12STom Lendacky	bool
149246b49b12STom Lendacky
14930e242208SHassan Naveedconfig HAVE_SPARSE_SYSCALL_NR
14940e242208SHassan Naveed	bool
14950e242208SHassan Naveed	help
14960e242208SHassan Naveed	  An architecture should select this if its syscall numbering is sparse
14970e242208SHassan Naveed	  to save space. For example, MIPS architecture has a syscall array with
14980e242208SHassan Naveed	  entries at 4000, 5000 and 6000 locations. This option turns on syscall
14990e242208SHassan Naveed	  related optimizations for a given architecture.
15000e242208SHassan Naveed
1501d60d7de3SSven Schnelleconfig ARCH_HAS_VDSO_DATA
1502d60d7de3SSven Schnelle	bool
1503d60d7de3SSven Schnelle
1504115284d8SJosh Poimboeufconfig HAVE_STATIC_CALL
1505115284d8SJosh Poimboeuf	bool
1506115284d8SJosh Poimboeuf
15079183c3f9SJosh Poimboeufconfig HAVE_STATIC_CALL_INLINE
15089183c3f9SJosh Poimboeuf	bool
15099183c3f9SJosh Poimboeuf	depends on HAVE_STATIC_CALL
151003f16cd0SJosh Poimboeuf	select OBJTOOL
15119183c3f9SJosh Poimboeuf
15126ef869e0SMichal Hockoconfig HAVE_PREEMPT_DYNAMIC
15136ef869e0SMichal Hocko	bool
151499cf983cSMark Rutland
151599cf983cSMark Rutlandconfig HAVE_PREEMPT_DYNAMIC_CALL
151699cf983cSMark Rutland	bool
15176ef869e0SMichal Hocko	depends on HAVE_STATIC_CALL
151899cf983cSMark Rutland	select HAVE_PREEMPT_DYNAMIC
15196ef869e0SMichal Hocko	help
152099cf983cSMark Rutland	  An architecture should select this if it can handle the preemption
152199cf983cSMark Rutland	  model being selected at boot time using static calls.
152299cf983cSMark Rutland
152399cf983cSMark Rutland	  Where an architecture selects HAVE_STATIC_CALL_INLINE, any call to a
152499cf983cSMark Rutland	  preemption function will be patched directly.
152599cf983cSMark Rutland
152699cf983cSMark Rutland	  Where an architecture does not select HAVE_STATIC_CALL_INLINE, any
152799cf983cSMark Rutland	  call to a preemption function will go through a trampoline, and the
152899cf983cSMark Rutland	  trampoline will be patched.
152999cf983cSMark Rutland
153099cf983cSMark Rutland	  It is strongly advised to support inline static call to avoid any
153199cf983cSMark Rutland	  overhead.
153299cf983cSMark Rutland
153399cf983cSMark Rutlandconfig HAVE_PREEMPT_DYNAMIC_KEY
153499cf983cSMark Rutland	bool
1535a0a12c3eSNick Desaulniers	depends on HAVE_ARCH_JUMP_LABEL
153699cf983cSMark Rutland	select HAVE_PREEMPT_DYNAMIC
153799cf983cSMark Rutland	help
153899cf983cSMark Rutland	  An architecture should select this if it can handle the preemption
153999cf983cSMark Rutland	  model being selected at boot time using static keys.
154099cf983cSMark Rutland
154199cf983cSMark Rutland	  Each preemption function will be given an early return based on a
154299cf983cSMark Rutland	  static key. This should have slightly lower overhead than non-inline
154399cf983cSMark Rutland	  static calls, as this effectively inlines each trampoline into the
154499cf983cSMark Rutland	  start of its callee. This may avoid redundant work, and may
154599cf983cSMark Rutland	  integrate better with CFI schemes.
154699cf983cSMark Rutland
154799cf983cSMark Rutland	  This will have greater overhead than using inline static calls as
154899cf983cSMark Rutland	  the call to the preemption function cannot be entirely elided.
15496ef869e0SMichal Hocko
155059612b24SNathan Chancellorconfig ARCH_WANT_LD_ORPHAN_WARN
155159612b24SNathan Chancellor	bool
155259612b24SNathan Chancellor	help
155359612b24SNathan Chancellor	  An arch should select this symbol once all linker sections are explicitly
155459612b24SNathan Chancellor	  included, size-asserted, or discarded in the linker scripts. This is
155559612b24SNathan Chancellor	  important because we never want expected sections to be placed heuristically
155659612b24SNathan Chancellor	  by the linker, since the locations of such sections can change between linker
155759612b24SNathan Chancellor	  versions.
155859612b24SNathan Chancellor
15594f5b0c17SMike Rapoportconfig HAVE_ARCH_PFN_VALID
15604f5b0c17SMike Rapoport	bool
15614f5b0c17SMike Rapoport
15625d6ad668SMike Rapoportconfig ARCH_SUPPORTS_DEBUG_PAGEALLOC
15635d6ad668SMike Rapoport	bool
15645d6ad668SMike Rapoport
1565df4e817bSPasha Tatashinconfig ARCH_SUPPORTS_PAGE_TABLE_CHECK
1566df4e817bSPasha Tatashin	bool
1567df4e817bSPasha Tatashin
15682ca408d9SBrian Gerstconfig ARCH_SPLIT_ARG64
15692ca408d9SBrian Gerst	bool
15702ca408d9SBrian Gerst	help
15712ca408d9SBrian Gerst	  If a 32-bit architecture requires 64-bit arguments to be split into
15722ca408d9SBrian Gerst	  pairs of 32-bit arguments, select this option.
15732ca408d9SBrian Gerst
15747facdc42SAl Viroconfig ARCH_HAS_ELFCORE_COMPAT
15757facdc42SAl Viro	bool
15767facdc42SAl Viro
157758e106e7SBalbir Singhconfig ARCH_HAS_PARANOID_L1D_FLUSH
157858e106e7SBalbir Singh	bool
157958e106e7SBalbir Singh
1580d593d64fSPrasad Sodagudiconfig ARCH_HAVE_TRACE_MMIO_ACCESS
1581d593d64fSPrasad Sodagudi	bool
1582d593d64fSPrasad Sodagudi
15831bdda24cSThomas Gleixnerconfig DYNAMIC_SIGFRAME
15841bdda24cSThomas Gleixner	bool
15851bdda24cSThomas Gleixner
158650468e43SJarkko Sakkinen# Select, if arch has a named attribute group bound to NUMA device nodes.
158750468e43SJarkko Sakkinenconfig HAVE_ARCH_NODE_DEV_GROUP
158850468e43SJarkko Sakkinen	bool
158950468e43SJarkko Sakkinen
159071ce1ab5SKinsey Hoconfig ARCH_HAS_HW_PTE_YOUNG
159171ce1ab5SKinsey Ho	bool
159271ce1ab5SKinsey Ho	help
159371ce1ab5SKinsey Ho	  Architectures that select this option are capable of setting the
159471ce1ab5SKinsey Ho	  accessed bit in PTE entries when using them as part of linear address
159571ce1ab5SKinsey Ho	  translations. Architectures that require runtime check should select
159671ce1ab5SKinsey Ho	  this option and override arch_has_hw_pte_young().
159771ce1ab5SKinsey Ho
1598eed9a328SYu Zhaoconfig ARCH_HAS_NONLEAF_PMD_YOUNG
1599eed9a328SYu Zhao	bool
1600eed9a328SYu Zhao	help
1601eed9a328SYu Zhao	  Architectures that select this option are capable of setting the
1602eed9a328SYu Zhao	  accessed bit in non-leaf PMD entries when using them as part of linear
1603eed9a328SYu Zhao	  address translations. Page table walkers that clear the accessed bit
1604eed9a328SYu Zhao	  may use this capability to reduce their search space.
1605eed9a328SYu Zhao
16066cbd1d6dSSamuel Hollandconfig ARCH_HAS_KERNEL_FPU_SUPPORT
16076cbd1d6dSSamuel Holland	bool
16086cbd1d6dSSamuel Holland	help
16096cbd1d6dSSamuel Holland	  Architectures that select this option can run floating-point code in
16106cbd1d6dSSamuel Holland	  the kernel, as described in Documentation/core-api/floating-point.rst.
16116cbd1d6dSSamuel Holland
16122521f2c2SPeter Oberparleitersource "kernel/gcov/Kconfig"
161345332b1bSMasahiro Yamada
161445332b1bSMasahiro Yamadasource "scripts/gcc-plugins/Kconfig"
1615fa1b5d09SLinus Torvalds
1616d49a0626SPeter Zijlstraconfig FUNCTION_ALIGNMENT_4B
1617d49a0626SPeter Zijlstra	bool
1618d49a0626SPeter Zijlstra
1619d49a0626SPeter Zijlstraconfig FUNCTION_ALIGNMENT_8B
1620d49a0626SPeter Zijlstra	bool
1621d49a0626SPeter Zijlstra
1622d49a0626SPeter Zijlstraconfig FUNCTION_ALIGNMENT_16B
1623d49a0626SPeter Zijlstra	bool
1624d49a0626SPeter Zijlstra
1625d49a0626SPeter Zijlstraconfig FUNCTION_ALIGNMENT_32B
1626d49a0626SPeter Zijlstra	bool
1627d49a0626SPeter Zijlstra
1628d49a0626SPeter Zijlstraconfig FUNCTION_ALIGNMENT_64B
1629d49a0626SPeter Zijlstra	bool
1630d49a0626SPeter Zijlstra
1631d49a0626SPeter Zijlstraconfig FUNCTION_ALIGNMENT
1632d49a0626SPeter Zijlstra	int
1633d49a0626SPeter Zijlstra	default 64 if FUNCTION_ALIGNMENT_64B
1634d49a0626SPeter Zijlstra	default 32 if FUNCTION_ALIGNMENT_32B
1635d49a0626SPeter Zijlstra	default 16 if FUNCTION_ALIGNMENT_16B
1636d49a0626SPeter Zijlstra	default 8 if FUNCTION_ALIGNMENT_8B
1637d49a0626SPeter Zijlstra	default 4 if FUNCTION_ALIGNMENT_4B
1638d49a0626SPeter Zijlstra	default 0
1639d49a0626SPeter Zijlstra
16405270316cSPetr Pavluconfig CC_HAS_MIN_FUNCTION_ALIGNMENT
16415270316cSPetr Pavlu	# Detect availability of the GCC option -fmin-function-alignment which
16425270316cSPetr Pavlu	# guarantees minimal alignment for all functions, unlike
16435270316cSPetr Pavlu	# -falign-functions which the compiler ignores for cold functions.
16445270316cSPetr Pavlu	def_bool $(cc-option, -fmin-function-alignment=8)
16455270316cSPetr Pavlu
16465270316cSPetr Pavluconfig CC_HAS_SANE_FUNCTION_ALIGNMENT
16475270316cSPetr Pavlu	# Set if the guaranteed alignment with -fmin-function-alignment is
16485270316cSPetr Pavlu	# available or extra care is required in the kernel. Clang provides
16495270316cSPetr Pavlu	# strict alignment always, even with -falign-functions.
16505270316cSPetr Pavlu	def_bool CC_HAS_MIN_FUNCTION_ALIGNMENT || CC_IS_CLANG
16515270316cSPetr Pavlu
1652a88d970cSPaul E. McKenneyconfig ARCH_NEED_CMPXCHG_1_EMU
1653a88d970cSPaul E. McKenney	bool
1654a88d970cSPaul E. McKenney
165522471e13SRandy Dunlapendmenu
1656