104851772SMatt Flemingmenu "EFI (Extensible Firmware Interface) Support" 204851772SMatt Fleming depends on EFI 304851772SMatt Fleming 404851772SMatt Flemingconfig EFI_VARS 504851772SMatt Fleming tristate "EFI Variable Support via sysfs" 604851772SMatt Fleming depends on EFI 704851772SMatt Fleming default n 804851772SMatt Fleming help 904851772SMatt Fleming If you say Y here, you are able to get EFI (Extensible Firmware 1004851772SMatt Fleming Interface) variable information via sysfs. You may read, 1104851772SMatt Fleming write, create, and destroy EFI variables through this interface. 1204851772SMatt Fleming 1304851772SMatt Fleming Note that using this driver in concert with efibootmgr requires 1404851772SMatt Fleming at least test release version 0.5.0-test3 or later, which is 150e4ca02bSPeter Jones available from: 1604851772SMatt Fleming <http://linux.dell.com/efibootmgr/testing/efibootmgr-0.5.0-test3.tar.gz> 1704851772SMatt Fleming 1804851772SMatt Fleming Subsequent efibootmgr releases may be found at: 190e4ca02bSPeter Jones <http://github.com/vathpela/efibootmgr> 2004851772SMatt Fleming 213846c158SPeter Jonesconfig EFI_ESRT 223846c158SPeter Jones bool 233846c158SPeter Jones depends on EFI && !IA64 243846c158SPeter Jones default y 253846c158SPeter Jones 2604851772SMatt Flemingconfig EFI_VARS_PSTORE 2704851772SMatt Fleming tristate "Register efivars backend for pstore" 2804851772SMatt Fleming depends on EFI_VARS && PSTORE 2904851772SMatt Fleming default y 3004851772SMatt Fleming help 3104851772SMatt Fleming Say Y here to enable use efivars as a backend to pstore. This 3204851772SMatt Fleming will allow writing console messages, crash dumps, or anything 3304851772SMatt Fleming else supported by pstore to EFI variables. 3404851772SMatt Fleming 3504851772SMatt Flemingconfig EFI_VARS_PSTORE_DEFAULT_DISABLE 3604851772SMatt Fleming bool "Disable using efivars as a pstore backend by default" 3704851772SMatt Fleming depends on EFI_VARS_PSTORE 3804851772SMatt Fleming default n 3904851772SMatt Fleming help 4004851772SMatt Fleming Saying Y here will disable the use of efivars as a storage 4104851772SMatt Fleming backend for pstore by default. This setting can be overridden 4204851772SMatt Fleming using the efivars module's pstore_disable parameter. 4304851772SMatt Fleming 44926172d4SDave Youngconfig EFI_RUNTIME_MAP 45926172d4SDave Young bool "Export efi runtime maps to sysfs" 462965faa5SDave Young depends on X86 && EFI && KEXEC_CORE 47926172d4SDave Young default y 48926172d4SDave Young help 49926172d4SDave Young Export efi runtime memory maps to /sys/firmware/efi/runtime-map. 50926172d4SDave Young That memory map is used for example by kexec to set up efi virtual 51926172d4SDave Young mapping the 2nd kernel, but can also be used for debugging purposes. 52926172d4SDave Young 53926172d4SDave Young See also Documentation/ABI/testing/sysfs-firmware-efi-runtime-map. 54926172d4SDave Young 550f96a99dSTaku Izumiconfig EFI_FAKE_MEMMAP 560f96a99dSTaku Izumi bool "Enable EFI fake memory map" 570f96a99dSTaku Izumi depends on EFI && X86 580f96a99dSTaku Izumi default n 590f96a99dSTaku Izumi help 600f96a99dSTaku Izumi Saying Y here will enable "efi_fake_mem" boot option. 610f96a99dSTaku Izumi By specifying this parameter, you can add arbitrary attribute 620f96a99dSTaku Izumi to specific memory range by updating original (firmware provided) 630f96a99dSTaku Izumi EFI memmap. 640f96a99dSTaku Izumi This is useful for debugging of EFI memmap related feature. 650f96a99dSTaku Izumi e.g. Address Range Mirroring feature. 660f96a99dSTaku Izumi 670f96a99dSTaku Izumiconfig EFI_MAX_FAKE_MEM 680f96a99dSTaku Izumi int "maximum allowable number of ranges in efi_fake_mem boot option" 690f96a99dSTaku Izumi depends on EFI_FAKE_MEMMAP 700f96a99dSTaku Izumi range 1 128 710f96a99dSTaku Izumi default 8 720f96a99dSTaku Izumi help 730f96a99dSTaku Izumi Maximum allowable number of ranges in efi_fake_mem boot option. 740f96a99dSTaku Izumi Ranges can be set up to this value using comma-separated list. 750f96a99dSTaku Izumi The default value is 8. 760f96a99dSTaku Izumi 770302f71cSMark Salterconfig EFI_PARAMS_FROM_FDT 780302f71cSMark Salter bool 790302f71cSMark Salter help 800302f71cSMark Salter Select this config option from the architecture Kconfig if 810302f71cSMark Salter the EFI runtime support gets system table address, memory 820302f71cSMark Salter map address, and other parameters from the device tree. 830302f71cSMark Salter 84022ee6c5SArd Biesheuvelconfig EFI_RUNTIME_WRAPPERS 85022ee6c5SArd Biesheuvel bool 86022ee6c5SArd Biesheuvel 87f4f75ad5SArd Biesheuvelconfig EFI_ARMSTUB 88f4f75ad5SArd Biesheuvel bool 89f4f75ad5SArd Biesheuvel 903d7ee348SArd Biesheuvelconfig EFI_ARMSTUB_DTB_LOADER 913d7ee348SArd Biesheuvel bool "Enable the DTB loader" 923d7ee348SArd Biesheuvel depends on EFI_ARMSTUB 93d3109593SScott Branden default y 943d7ee348SArd Biesheuvel help 953d7ee348SArd Biesheuvel Select this config option to add support for the dtb= command 963d7ee348SArd Biesheuvel line parameter, allowing a device tree blob to be loaded into 973d7ee348SArd Biesheuvel memory from the EFI System Partition by the stub. 983d7ee348SArd Biesheuvel 99d3109593SScott Branden If the device tree is provided by the platform or by 100d3109593SScott Branden the bootloader this option may not be needed. 101d3109593SScott Branden But, for various development reasons and to maintain existing 102d3109593SScott Branden functionality for bootloaders that do not have such support 103d3109593SScott Branden this option is necessary. 1043d7ee348SArd Biesheuvel 10506f7d4a1SCompostella, Jeremyconfig EFI_BOOTLOADER_CONTROL 10606f7d4a1SCompostella, Jeremy tristate "EFI Bootloader Control" 10706f7d4a1SCompostella, Jeremy depends on EFI_VARS 10806f7d4a1SCompostella, Jeremy default n 10906f7d4a1SCompostella, Jeremy ---help--- 11006f7d4a1SCompostella, Jeremy This module installs a reboot hook, such that if reboot() is 11106f7d4a1SCompostella, Jeremy invoked with a string argument NNN, "NNN" is copied to the 11206f7d4a1SCompostella, Jeremy "LoaderEntryOneShot" EFI variable, to be read by the 11306f7d4a1SCompostella, Jeremy bootloader. If the string matches one of the boot labels 11406f7d4a1SCompostella, Jeremy defined in its configuration, the bootloader will boot once 11506f7d4a1SCompostella, Jeremy to that label. The "LoaderEntryRebootReason" EFI variable is 11606f7d4a1SCompostella, Jeremy set with the reboot reason: "reboot" or "shutdown". The 11706f7d4a1SCompostella, Jeremy bootloader reads this reboot reason and takes particular 11806f7d4a1SCompostella, Jeremy action according to its policy. 11906f7d4a1SCompostella, Jeremy 12065117f1aSKweh, Hock Leongconfig EFI_CAPSULE_LOADER 12165117f1aSKweh, Hock Leong tristate "EFI capsule loader" 12265117f1aSKweh, Hock Leong depends on EFI 12365117f1aSKweh, Hock Leong help 12465117f1aSKweh, Hock Leong This option exposes a loader interface "/dev/efi_capsule_loader" for 12565117f1aSKweh, Hock Leong users to load EFI capsules. This driver requires working runtime 12665117f1aSKweh, Hock Leong capsule support in the firmware, which many OEMs do not provide. 12765117f1aSKweh, Hock Leong 12865117f1aSKweh, Hock Leong Most users should say N. 12965117f1aSKweh, Hock Leong 1302959c95dSJan Kiszkaconfig EFI_CAPSULE_QUIRK_QUARK_CSH 1311ae83c5cSMasahiro Yamada bool "Add support for Quark capsules with non-standard headers" 1322959c95dSJan Kiszka depends on X86 && !64BIT 1332959c95dSJan Kiszka select EFI_CAPSULE_LOADER 1342959c95dSJan Kiszka default y 1352959c95dSJan Kiszka help 1362959c95dSJan Kiszka Add support for processing Quark X1000 EFI capsules, whose header 1372959c95dSJan Kiszka layout deviates from the layout mandated by the UEFI specification. 1382959c95dSJan Kiszka 139ff6301daSIvan Huconfig EFI_TEST 140ff6301daSIvan Hu tristate "EFI Runtime Service Tests Support" 141ff6301daSIvan Hu depends on EFI 142ff6301daSIvan Hu default n 143ff6301daSIvan Hu help 144ff6301daSIvan Hu This driver uses the efi.<service> function pointers directly instead 145ff6301daSIvan Hu of going through the efivar API, because it is not trying to test the 146ff6301daSIvan Hu kernel subsystem, just for testing the UEFI runtime service 147ff6301daSIvan Hu interfaces which are provided by the firmware. This driver is used 148ff6301daSIvan Hu by the Firmware Test Suite (FWTS) for testing the UEFI runtime 149ff6301daSIvan Hu interfaces readiness of the firmware. 150ff6301daSIvan Hu Details for FWTS are available from: 151ff6301daSIvan Hu <https://wiki.ubuntu.com/FirmwareTestSuite> 152ff6301daSIvan Hu 153ff6301daSIvan Hu Say Y here to enable the runtime services support via /dev/efi_test. 154ff6301daSIvan Hu If unsure, say N. 155ff6301daSIvan Hu 15658c5475aSLukas Wunnerconfig APPLE_PROPERTIES 15758c5475aSLukas Wunner bool "Apple Device Properties" 15858c5475aSLukas Wunner depends on EFI_STUB && X86 15958c5475aSLukas Wunner select EFI_DEV_PATH_PARSER 16058c5475aSLukas Wunner select UCS2_STRING 16158c5475aSLukas Wunner help 16258c5475aSLukas Wunner Retrieve properties from EFI on Apple Macs and assign them to 16358c5475aSLukas Wunner devices, allowing for improved support of Apple hardware. 16458c5475aSLukas Wunner Properties that would otherwise be missing include the 16558c5475aSLukas Wunner Thunderbolt Device ROM and GPU configuration data. 16658c5475aSLukas Wunner 16758c5475aSLukas Wunner If unsure, say Y if you have a Mac. Otherwise N. 16858c5475aSLukas Wunner 169ccc829baSMatthew Garrettconfig RESET_ATTACK_MITIGATION 170ccc829baSMatthew Garrett bool "Reset memory attack mitigation" 171ccc829baSMatthew Garrett depends on EFI_STUB 172ccc829baSMatthew Garrett help 173ccc829baSMatthew Garrett Request that the firmware clear the contents of RAM after a reboot 174ccc829baSMatthew Garrett using the TCG Platform Reset Attack Mitigation specification. This 175ccc829baSMatthew Garrett protects against an attacker forcibly rebooting the system while it 176ccc829baSMatthew Garrett still contains secrets in RAM, booting another OS and extracting the 177a5c03c31SMatthew Garrett secrets. This should only be enabled when userland is configured to 178a5c03c31SMatthew Garrett clear the MemoryOverwriteRequest flag on clean shutdown after secrets 179a5c03c31SMatthew Garrett have been evicted, since otherwise it will trigger even on clean 180a5c03c31SMatthew Garrett reboots. 181ccc829baSMatthew Garrett 18204851772SMatt Flemingendmenu 183fce7d3bfSJan Beulich 184fce7d3bfSJan Beulichconfig UEFI_CPER 185fce7d3bfSJan Beulich bool 18646cd4b75SLukas Wunner 187c6d8c8efSTyler Baicarconfig UEFI_CPER_ARM 188c6d8c8efSTyler Baicar bool 189c6d8c8efSTyler Baicar depends on UEFI_CPER && ( ARM || ARM64 ) 190c6d8c8efSTyler Baicar default y 191c6d8c8efSTyler Baicar 192f9e1bdb9SYazen Ghannamconfig UEFI_CPER_X86 193f9e1bdb9SYazen Ghannam bool 194f9e1bdb9SYazen Ghannam depends on UEFI_CPER && X86 195f9e1bdb9SYazen Ghannam default y 196f9e1bdb9SYazen Ghannam 19746cd4b75SLukas Wunnerconfig EFI_DEV_PATH_PARSER 19846cd4b75SLukas Wunner bool 19946cd4b75SLukas Wunner depends on ACPI 20046cd4b75SLukas Wunner default n 201*69c1f396SArd Biesheuvel 202*69c1f396SArd Biesheuvelconfig EFI_EARLYCON 203*69c1f396SArd Biesheuvel def_bool y 204*69c1f396SArd Biesheuvel depends on SERIAL_EARLYCON && !ARM && !IA64 205*69c1f396SArd Biesheuvel select FONT_SUPPORT 206*69c1f396SArd Biesheuvel select ARCH_USE_MEMREMAP_PROT 207