xref: /linux/drivers/firmware/efi/Kconfig (revision 69c1f396f25b805aeff08f06d2e992c315ee5b1e)
104851772SMatt Flemingmenu "EFI (Extensible Firmware Interface) Support"
204851772SMatt Fleming	depends on EFI
304851772SMatt Fleming
404851772SMatt Flemingconfig EFI_VARS
504851772SMatt Fleming	tristate "EFI Variable Support via sysfs"
604851772SMatt Fleming	depends on EFI
704851772SMatt Fleming	default n
804851772SMatt Fleming	help
904851772SMatt Fleming	  If you say Y here, you are able to get EFI (Extensible Firmware
1004851772SMatt Fleming	  Interface) variable information via sysfs.  You may read,
1104851772SMatt Fleming	  write, create, and destroy EFI variables through this interface.
1204851772SMatt Fleming
1304851772SMatt Fleming	  Note that using this driver in concert with efibootmgr requires
1404851772SMatt Fleming	  at least test release version 0.5.0-test3 or later, which is
150e4ca02bSPeter Jones	  available from:
1604851772SMatt Fleming	  <http://linux.dell.com/efibootmgr/testing/efibootmgr-0.5.0-test3.tar.gz>
1704851772SMatt Fleming
1804851772SMatt Fleming	  Subsequent efibootmgr releases may be found at:
190e4ca02bSPeter Jones	  <http://github.com/vathpela/efibootmgr>
2004851772SMatt Fleming
213846c158SPeter Jonesconfig EFI_ESRT
223846c158SPeter Jones	bool
233846c158SPeter Jones	depends on EFI && !IA64
243846c158SPeter Jones	default y
253846c158SPeter Jones
2604851772SMatt Flemingconfig EFI_VARS_PSTORE
2704851772SMatt Fleming	tristate "Register efivars backend for pstore"
2804851772SMatt Fleming	depends on EFI_VARS && PSTORE
2904851772SMatt Fleming	default y
3004851772SMatt Fleming	help
3104851772SMatt Fleming	  Say Y here to enable use efivars as a backend to pstore. This
3204851772SMatt Fleming	  will allow writing console messages, crash dumps, or anything
3304851772SMatt Fleming	  else supported by pstore to EFI variables.
3404851772SMatt Fleming
3504851772SMatt Flemingconfig EFI_VARS_PSTORE_DEFAULT_DISABLE
3604851772SMatt Fleming	bool "Disable using efivars as a pstore backend by default"
3704851772SMatt Fleming	depends on EFI_VARS_PSTORE
3804851772SMatt Fleming	default n
3904851772SMatt Fleming	help
4004851772SMatt Fleming	  Saying Y here will disable the use of efivars as a storage
4104851772SMatt Fleming	  backend for pstore by default. This setting can be overridden
4204851772SMatt Fleming	  using the efivars module's pstore_disable parameter.
4304851772SMatt Fleming
44926172d4SDave Youngconfig EFI_RUNTIME_MAP
45926172d4SDave Young	bool "Export efi runtime maps to sysfs"
462965faa5SDave Young	depends on X86 && EFI && KEXEC_CORE
47926172d4SDave Young	default y
48926172d4SDave Young	help
49926172d4SDave Young	  Export efi runtime memory maps to /sys/firmware/efi/runtime-map.
50926172d4SDave Young	  That memory map is used for example by kexec to set up efi virtual
51926172d4SDave Young	  mapping the 2nd kernel, but can also be used for debugging purposes.
52926172d4SDave Young
53926172d4SDave Young	  See also Documentation/ABI/testing/sysfs-firmware-efi-runtime-map.
54926172d4SDave Young
550f96a99dSTaku Izumiconfig EFI_FAKE_MEMMAP
560f96a99dSTaku Izumi	bool "Enable EFI fake memory map"
570f96a99dSTaku Izumi	depends on EFI && X86
580f96a99dSTaku Izumi	default n
590f96a99dSTaku Izumi	help
600f96a99dSTaku Izumi	  Saying Y here will enable "efi_fake_mem" boot option.
610f96a99dSTaku Izumi	  By specifying this parameter, you can add arbitrary attribute
620f96a99dSTaku Izumi	  to specific memory range by updating original (firmware provided)
630f96a99dSTaku Izumi	  EFI memmap.
640f96a99dSTaku Izumi	  This is useful for debugging of EFI memmap related feature.
650f96a99dSTaku Izumi	  e.g. Address Range Mirroring feature.
660f96a99dSTaku Izumi
670f96a99dSTaku Izumiconfig EFI_MAX_FAKE_MEM
680f96a99dSTaku Izumi	int "maximum allowable number of ranges in efi_fake_mem boot option"
690f96a99dSTaku Izumi	depends on EFI_FAKE_MEMMAP
700f96a99dSTaku Izumi	range 1 128
710f96a99dSTaku Izumi	default 8
720f96a99dSTaku Izumi	help
730f96a99dSTaku Izumi	  Maximum allowable number of ranges in efi_fake_mem boot option.
740f96a99dSTaku Izumi	  Ranges can be set up to this value using comma-separated list.
750f96a99dSTaku Izumi	  The default value is 8.
760f96a99dSTaku Izumi
770302f71cSMark Salterconfig EFI_PARAMS_FROM_FDT
780302f71cSMark Salter	bool
790302f71cSMark Salter	help
800302f71cSMark Salter	  Select this config option from the architecture Kconfig if
810302f71cSMark Salter	  the EFI runtime support gets system table address, memory
820302f71cSMark Salter          map address, and other parameters from the device tree.
830302f71cSMark Salter
84022ee6c5SArd Biesheuvelconfig EFI_RUNTIME_WRAPPERS
85022ee6c5SArd Biesheuvel	bool
86022ee6c5SArd Biesheuvel
87f4f75ad5SArd Biesheuvelconfig EFI_ARMSTUB
88f4f75ad5SArd Biesheuvel	bool
89f4f75ad5SArd Biesheuvel
903d7ee348SArd Biesheuvelconfig EFI_ARMSTUB_DTB_LOADER
913d7ee348SArd Biesheuvel	bool "Enable the DTB loader"
923d7ee348SArd Biesheuvel	depends on EFI_ARMSTUB
93d3109593SScott Branden	default y
943d7ee348SArd Biesheuvel	help
953d7ee348SArd Biesheuvel	  Select this config option to add support for the dtb= command
963d7ee348SArd Biesheuvel	  line parameter, allowing a device tree blob to be loaded into
973d7ee348SArd Biesheuvel	  memory from the EFI System Partition by the stub.
983d7ee348SArd Biesheuvel
99d3109593SScott Branden	  If the device tree is provided by the platform or by
100d3109593SScott Branden	  the bootloader this option may not be needed.
101d3109593SScott Branden	  But, for various development reasons and to maintain existing
102d3109593SScott Branden	  functionality for bootloaders that do not have such support
103d3109593SScott Branden	  this option is necessary.
1043d7ee348SArd Biesheuvel
10506f7d4a1SCompostella, Jeremyconfig EFI_BOOTLOADER_CONTROL
10606f7d4a1SCompostella, Jeremy	tristate "EFI Bootloader Control"
10706f7d4a1SCompostella, Jeremy	depends on EFI_VARS
10806f7d4a1SCompostella, Jeremy	default n
10906f7d4a1SCompostella, Jeremy	---help---
11006f7d4a1SCompostella, Jeremy	  This module installs a reboot hook, such that if reboot() is
11106f7d4a1SCompostella, Jeremy	  invoked with a string argument NNN, "NNN" is copied to the
11206f7d4a1SCompostella, Jeremy	  "LoaderEntryOneShot" EFI variable, to be read by the
11306f7d4a1SCompostella, Jeremy	  bootloader. If the string matches one of the boot labels
11406f7d4a1SCompostella, Jeremy	  defined in its configuration, the bootloader will boot once
11506f7d4a1SCompostella, Jeremy	  to that label. The "LoaderEntryRebootReason" EFI variable is
11606f7d4a1SCompostella, Jeremy	  set with the reboot reason: "reboot" or "shutdown". The
11706f7d4a1SCompostella, Jeremy	  bootloader reads this reboot reason and takes particular
11806f7d4a1SCompostella, Jeremy	  action according to its policy.
11906f7d4a1SCompostella, Jeremy
12065117f1aSKweh, Hock Leongconfig EFI_CAPSULE_LOADER
12165117f1aSKweh, Hock Leong	tristate "EFI capsule loader"
12265117f1aSKweh, Hock Leong	depends on EFI
12365117f1aSKweh, Hock Leong	help
12465117f1aSKweh, Hock Leong	  This option exposes a loader interface "/dev/efi_capsule_loader" for
12565117f1aSKweh, Hock Leong	  users to load EFI capsules. This driver requires working runtime
12665117f1aSKweh, Hock Leong	  capsule support in the firmware, which many OEMs do not provide.
12765117f1aSKweh, Hock Leong
12865117f1aSKweh, Hock Leong	  Most users should say N.
12965117f1aSKweh, Hock Leong
1302959c95dSJan Kiszkaconfig EFI_CAPSULE_QUIRK_QUARK_CSH
1311ae83c5cSMasahiro Yamada	bool "Add support for Quark capsules with non-standard headers"
1322959c95dSJan Kiszka	depends on X86 && !64BIT
1332959c95dSJan Kiszka	select EFI_CAPSULE_LOADER
1342959c95dSJan Kiszka	default y
1352959c95dSJan Kiszka	help
1362959c95dSJan Kiszka	  Add support for processing Quark X1000 EFI capsules, whose header
1372959c95dSJan Kiszka	  layout deviates from the layout mandated by the UEFI specification.
1382959c95dSJan Kiszka
139ff6301daSIvan Huconfig EFI_TEST
140ff6301daSIvan Hu	tristate "EFI Runtime Service Tests Support"
141ff6301daSIvan Hu	depends on EFI
142ff6301daSIvan Hu	default n
143ff6301daSIvan Hu	help
144ff6301daSIvan Hu	  This driver uses the efi.<service> function pointers directly instead
145ff6301daSIvan Hu	  of going through the efivar API, because it is not trying to test the
146ff6301daSIvan Hu	  kernel subsystem, just for testing the UEFI runtime service
147ff6301daSIvan Hu	  interfaces which are provided by the firmware. This driver is used
148ff6301daSIvan Hu	  by the Firmware Test Suite (FWTS) for testing the UEFI runtime
149ff6301daSIvan Hu	  interfaces readiness of the firmware.
150ff6301daSIvan Hu	  Details for FWTS are available from:
151ff6301daSIvan Hu	  <https://wiki.ubuntu.com/FirmwareTestSuite>
152ff6301daSIvan Hu
153ff6301daSIvan Hu	  Say Y here to enable the runtime services support via /dev/efi_test.
154ff6301daSIvan Hu	  If unsure, say N.
155ff6301daSIvan Hu
15658c5475aSLukas Wunnerconfig APPLE_PROPERTIES
15758c5475aSLukas Wunner	bool "Apple Device Properties"
15858c5475aSLukas Wunner	depends on EFI_STUB && X86
15958c5475aSLukas Wunner	select EFI_DEV_PATH_PARSER
16058c5475aSLukas Wunner	select UCS2_STRING
16158c5475aSLukas Wunner	help
16258c5475aSLukas Wunner	  Retrieve properties from EFI on Apple Macs and assign them to
16358c5475aSLukas Wunner	  devices, allowing for improved support of Apple hardware.
16458c5475aSLukas Wunner	  Properties that would otherwise be missing include the
16558c5475aSLukas Wunner	  Thunderbolt Device ROM and GPU configuration data.
16658c5475aSLukas Wunner
16758c5475aSLukas Wunner	  If unsure, say Y if you have a Mac.  Otherwise N.
16858c5475aSLukas Wunner
169ccc829baSMatthew Garrettconfig RESET_ATTACK_MITIGATION
170ccc829baSMatthew Garrett	bool "Reset memory attack mitigation"
171ccc829baSMatthew Garrett	depends on EFI_STUB
172ccc829baSMatthew Garrett	help
173ccc829baSMatthew Garrett	  Request that the firmware clear the contents of RAM after a reboot
174ccc829baSMatthew Garrett	  using the TCG Platform Reset Attack Mitigation specification. This
175ccc829baSMatthew Garrett	  protects against an attacker forcibly rebooting the system while it
176ccc829baSMatthew Garrett	  still contains secrets in RAM, booting another OS and extracting the
177a5c03c31SMatthew Garrett	  secrets. This should only be enabled when userland is configured to
178a5c03c31SMatthew Garrett	  clear the MemoryOverwriteRequest flag on clean shutdown after secrets
179a5c03c31SMatthew Garrett	  have been evicted, since otherwise it will trigger even on clean
180a5c03c31SMatthew Garrett	  reboots.
181ccc829baSMatthew Garrett
18204851772SMatt Flemingendmenu
183fce7d3bfSJan Beulich
184fce7d3bfSJan Beulichconfig UEFI_CPER
185fce7d3bfSJan Beulich	bool
18646cd4b75SLukas Wunner
187c6d8c8efSTyler Baicarconfig UEFI_CPER_ARM
188c6d8c8efSTyler Baicar	bool
189c6d8c8efSTyler Baicar	depends on UEFI_CPER && ( ARM || ARM64 )
190c6d8c8efSTyler Baicar	default y
191c6d8c8efSTyler Baicar
192f9e1bdb9SYazen Ghannamconfig UEFI_CPER_X86
193f9e1bdb9SYazen Ghannam	bool
194f9e1bdb9SYazen Ghannam	depends on UEFI_CPER && X86
195f9e1bdb9SYazen Ghannam	default y
196f9e1bdb9SYazen Ghannam
19746cd4b75SLukas Wunnerconfig EFI_DEV_PATH_PARSER
19846cd4b75SLukas Wunner	bool
19946cd4b75SLukas Wunner	depends on ACPI
20046cd4b75SLukas Wunner	default n
201*69c1f396SArd Biesheuvel
202*69c1f396SArd Biesheuvelconfig EFI_EARLYCON
203*69c1f396SArd Biesheuvel	def_bool y
204*69c1f396SArd Biesheuvel	depends on SERIAL_EARLYCON && !ARM && !IA64
205*69c1f396SArd Biesheuvel	select FONT_SUPPORT
206*69c1f396SArd Biesheuvel	select ARCH_USE_MEMREMAP_PROT
207