Roman Zippel | 80daa56 | 2008-01-14 04:51:16 +0100 | [diff] [blame] | 1 | config ARCH |
| 2 | string |
| 3 | option env="ARCH" |
| 4 | |
| 5 | config KERNELVERSION |
| 6 | string |
| 7 | option env="KERNELVERSION" |
| 8 | |
Roman Zippel | face437 | 2006-06-08 22:12:45 -0700 | [diff] [blame] | 9 | config DEFCONFIG_LIST |
| 10 | string |
Paolo 'Blaisorblade' Giarrusso | b2670eac | 2006-10-19 23:28:23 -0700 | [diff] [blame] | 11 | depends on !UML |
Roman Zippel | face437 | 2006-06-08 22:12:45 -0700 | [diff] [blame] | 12 | option defconfig_list |
| 13 | default "/lib/modules/$UNAME_RELEASE/.config" |
| 14 | default "/etc/kernel-config" |
| 15 | default "/boot/config-$UNAME_RELEASE" |
Sam Ravnborg | 7353190 | 2008-05-25 23:03:18 +0200 | [diff] [blame] | 16 | default "$ARCH_DEFCONFIG" |
Roman Zippel | face437 | 2006-06-08 22:12:45 -0700 | [diff] [blame] | 17 | default "arch/$ARCH/defconfig" |
| 18 | |
Peter Oberparleiter | b99b87f | 2009-06-17 16:28:03 -0700 | [diff] [blame] | 19 | config CONSTRUCTORS |
| 20 | bool |
| 21 | depends on !UML |
Peter Oberparleiter | b99b87f | 2009-06-17 16:28:03 -0700 | [diff] [blame] | 22 | |
Peter Zijlstra | e360adb | 2010-10-14 14:01:34 +0800 | [diff] [blame] | 23 | config IRQ_WORK |
| 24 | bool |
Peter Zijlstra | e360adb | 2010-10-14 14:01:34 +0800 | [diff] [blame] | 25 | |
David Daney | 1dbdc6f | 2012-04-19 14:59:57 -0700 | [diff] [blame] | 26 | config BUILDTIME_EXTABLE_SORT |
| 27 | bool |
| 28 | |
Andy Lutomirski | c65eacb | 2016-09-13 14:29:24 -0700 | [diff] [blame] | 29 | config THREAD_INFO_IN_TASK |
| 30 | bool |
| 31 | help |
| 32 | Select this to move thread_info off the stack into task_struct. To |
| 33 | make this work, an arch will need to remove all thread_info fields |
| 34 | except flags and fix any runtime bugs. |
| 35 | |
Andy Lutomirski | c6c314a | 2016-09-15 22:45:43 -0700 | [diff] [blame] | 36 | One subtle change that will be needed is to use try_get_task_stack() |
| 37 | and put_task_stack() in save_thread_stack_tsk() and get_wchan(). |
| 38 | |
Al Boldi | ff0cfc6 | 2007-07-31 00:39:23 -0700 | [diff] [blame] | 39 | menu "General setup" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 40 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 41 | config BROKEN |
| 42 | bool |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 43 | |
| 44 | config BROKEN_ON_SMP |
| 45 | bool |
| 46 | depends on BROKEN || !SMP |
| 47 | default y |
| 48 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 49 | config INIT_ENV_ARG_LIMIT |
| 50 | int |
Adrian Bunk | dd673bc | 2006-06-30 01:55:51 -0700 | [diff] [blame] | 51 | default 32 if !UML |
| 52 | default 128 if UML |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 53 | help |
Randy Dunlap | 34ad92c | 2005-10-30 15:01:46 -0800 | [diff] [blame] | 54 | Maximum of each of the number of arguments and environment |
| 55 | variables passed to init from the kernel command line. |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 56 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 57 | |
Roland McGrath | 8433646 | 2009-12-21 16:24:06 -0800 | [diff] [blame] | 58 | config CROSS_COMPILE |
| 59 | string "Cross-compiler tool prefix" |
| 60 | help |
| 61 | Same as running 'make CROSS_COMPILE=prefix-' but stored for |
| 62 | default make runs in this kernel build directory. You don't |
| 63 | need to set this unless you want the configured kernel build |
| 64 | directory to select the cross-compiler automatically. |
| 65 | |
Jiri Slaby | 4bb1667 | 2013-05-22 10:56:24 +0200 | [diff] [blame] | 66 | config COMPILE_TEST |
| 67 | bool "Compile also drivers which will not load" |
Richard Weinberger | bc083a6 | 2016-08-02 14:03:27 -0700 | [diff] [blame] | 68 | depends on !UML |
Jiri Slaby | 4bb1667 | 2013-05-22 10:56:24 +0200 | [diff] [blame] | 69 | default n |
| 70 | help |
| 71 | Some drivers can be compiled on a different platform than they are |
| 72 | intended to be run on. Despite they cannot be loaded there (or even |
| 73 | when they load they cannot be used due to missing HW support), |
| 74 | developers still, opposing to distributors, might want to build such |
| 75 | drivers to compile-test them. |
| 76 | |
| 77 | If you are a developer and want to build everything available, say Y |
| 78 | here. If you are a user/distributor, say N here to exclude useless |
| 79 | drivers to be distributed. |
| 80 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 81 | config LOCALVERSION |
| 82 | string "Local version - append to kernel release" |
| 83 | help |
| 84 | Append an extra string to the end of your kernel version. |
| 85 | This will show up when you type uname, for example. |
| 86 | The string you set here will be appended after the contents of |
| 87 | any files with a filename matching localversion* in your |
| 88 | object and source tree, in that order. Your total string can |
| 89 | be a maximum of 64 characters. |
| 90 | |
Ryan Anderson | aaebf43 | 2005-07-31 04:57:49 -0400 | [diff] [blame] | 91 | config LOCALVERSION_AUTO |
| 92 | bool "Automatically append version information to the version string" |
| 93 | default y |
Alexey Dobriyan | ac3339b | 2016-08-02 14:07:21 -0700 | [diff] [blame] | 94 | depends on !COMPILE_TEST |
Ryan Anderson | aaebf43 | 2005-07-31 04:57:49 -0400 | [diff] [blame] | 95 | help |
| 96 | This will try to automatically determine if the current tree is a |
Robert P. J. Day | 6e5a542 | 2007-05-01 23:08:11 +0200 | [diff] [blame] | 97 | release tree by looking for git tags that belong to the current |
| 98 | top of tree revision. |
Ryan Anderson | aaebf43 | 2005-07-31 04:57:49 -0400 | [diff] [blame] | 99 | |
| 100 | A string of the format -gxxxxxxxx will be added to the localversion |
Robert P. J. Day | 6e5a542 | 2007-05-01 23:08:11 +0200 | [diff] [blame] | 101 | if a git-based tree is found. The string generated by this will be |
Ryan Anderson | aaebf43 | 2005-07-31 04:57:49 -0400 | [diff] [blame] | 102 | appended after any matching localversion* files, and after the value |
Robert P. J. Day | 6e5a542 | 2007-05-01 23:08:11 +0200 | [diff] [blame] | 103 | set in CONFIG_LOCALVERSION. |
Ryan Anderson | aaebf43 | 2005-07-31 04:57:49 -0400 | [diff] [blame] | 104 | |
Robert P. J. Day | 6e5a542 | 2007-05-01 23:08:11 +0200 | [diff] [blame] | 105 | (The actual string used here is the first eight characters produced |
| 106 | by running the command: |
| 107 | |
| 108 | $ git rev-parse --verify HEAD |
| 109 | |
| 110 | which is done within the script "scripts/setlocalversion".) |
Ryan Anderson | aaebf43 | 2005-07-31 04:57:49 -0400 | [diff] [blame] | 111 | |
H. Peter Anvin | 2e9f3bd | 2009-01-04 15:41:25 -0800 | [diff] [blame] | 112 | config HAVE_KERNEL_GZIP |
| 113 | bool |
| 114 | |
| 115 | config HAVE_KERNEL_BZIP2 |
| 116 | bool |
| 117 | |
| 118 | config HAVE_KERNEL_LZMA |
| 119 | bool |
| 120 | |
Lasse Collin | 3ebe124 | 2011-01-12 17:01:23 -0800 | [diff] [blame] | 121 | config HAVE_KERNEL_XZ |
| 122 | bool |
| 123 | |
Albin Tonnerre | 7dd65fe | 2010-01-08 14:42:42 -0800 | [diff] [blame] | 124 | config HAVE_KERNEL_LZO |
| 125 | bool |
| 126 | |
Kyungsik Lee | e76e1fd | 2013-07-08 16:01:46 -0700 | [diff] [blame] | 127 | config HAVE_KERNEL_LZ4 |
| 128 | bool |
| 129 | |
Alain Knaff | 30d65db | 2009-01-04 22:46:17 +0100 | [diff] [blame] | 130 | choice |
H. Peter Anvin | 2e9f3bd | 2009-01-04 15:41:25 -0800 | [diff] [blame] | 131 | prompt "Kernel compression mode" |
| 132 | default KERNEL_GZIP |
H. Peter Anvin | 2d3c627 | 2013-11-14 21:43:47 -0800 | [diff] [blame] | 133 | depends on HAVE_KERNEL_GZIP || HAVE_KERNEL_BZIP2 || HAVE_KERNEL_LZMA || HAVE_KERNEL_XZ || HAVE_KERNEL_LZO || HAVE_KERNEL_LZ4 |
H. Peter Anvin | 2e9f3bd | 2009-01-04 15:41:25 -0800 | [diff] [blame] | 134 | help |
Alain Knaff | 30d65db | 2009-01-04 22:46:17 +0100 | [diff] [blame] | 135 | The linux kernel is a kind of self-extracting executable. |
| 136 | Several compression algorithms are available, which differ |
| 137 | in efficiency, compression and decompression speed. |
| 138 | Compression speed is only relevant when building a kernel. |
| 139 | Decompression speed is relevant at each boot. |
| 140 | |
| 141 | If you have any problems with bzip2 or lzma compressed |
| 142 | kernels, mail me (Alain Knaff) <alain@knaff.lu>. (An older |
| 143 | version of this functionality (bzip2 only), for 2.4, was |
| 144 | supplied by Christian Ludwig) |
| 145 | |
| 146 | High compression options are mostly useful for users, who |
| 147 | are low on disk space (embedded systems), but for whom ram |
| 148 | size matters less. |
| 149 | |
| 150 | If in doubt, select 'gzip' |
| 151 | |
| 152 | config KERNEL_GZIP |
H. Peter Anvin | 2e9f3bd | 2009-01-04 15:41:25 -0800 | [diff] [blame] | 153 | bool "Gzip" |
| 154 | depends on HAVE_KERNEL_GZIP |
| 155 | help |
Albin Tonnerre | 7dd65fe | 2010-01-08 14:42:42 -0800 | [diff] [blame] | 156 | The old and tried gzip compression. It provides a good balance |
| 157 | between compression ratio and decompression speed. |
Alain Knaff | 30d65db | 2009-01-04 22:46:17 +0100 | [diff] [blame] | 158 | |
| 159 | config KERNEL_BZIP2 |
| 160 | bool "Bzip2" |
H. Peter Anvin | 2e9f3bd | 2009-01-04 15:41:25 -0800 | [diff] [blame] | 161 | depends on HAVE_KERNEL_BZIP2 |
Alain Knaff | 30d65db | 2009-01-04 22:46:17 +0100 | [diff] [blame] | 162 | help |
| 163 | Its compression ratio and speed is intermediate. |
Randy Dunlap | 0a4dd35 | 2012-05-31 16:26:46 -0700 | [diff] [blame] | 164 | Decompression speed is slowest among the choices. The kernel |
H. Peter Anvin | 2e9f3bd | 2009-01-04 15:41:25 -0800 | [diff] [blame] | 165 | size is about 10% smaller with bzip2, in comparison to gzip. |
| 166 | Bzip2 uses a large amount of memory. For modern kernels you |
| 167 | will need at least 8MB RAM or more for booting. |
Alain Knaff | 30d65db | 2009-01-04 22:46:17 +0100 | [diff] [blame] | 168 | |
| 169 | config KERNEL_LZMA |
H. Peter Anvin | 2e9f3bd | 2009-01-04 15:41:25 -0800 | [diff] [blame] | 170 | bool "LZMA" |
| 171 | depends on HAVE_KERNEL_LZMA |
| 172 | help |
Randy Dunlap | 0a4dd35 | 2012-05-31 16:26:46 -0700 | [diff] [blame] | 173 | This compression algorithm's ratio is best. Decompression speed |
| 174 | is between gzip and bzip2. Compression is slowest. |
| 175 | The kernel size is about 33% smaller with LZMA in comparison to gzip. |
Alain Knaff | 30d65db | 2009-01-04 22:46:17 +0100 | [diff] [blame] | 176 | |
Lasse Collin | 3ebe124 | 2011-01-12 17:01:23 -0800 | [diff] [blame] | 177 | config KERNEL_XZ |
| 178 | bool "XZ" |
| 179 | depends on HAVE_KERNEL_XZ |
| 180 | help |
| 181 | XZ uses the LZMA2 algorithm and instruction set specific |
| 182 | BCJ filters which can improve compression ratio of executable |
| 183 | code. The size of the kernel is about 30% smaller with XZ in |
| 184 | comparison to gzip. On architectures for which there is a BCJ |
| 185 | filter (i386, x86_64, ARM, IA-64, PowerPC, and SPARC), XZ |
| 186 | will create a few percent smaller kernel than plain LZMA. |
| 187 | |
| 188 | The speed is about the same as with LZMA: The decompression |
| 189 | speed of XZ is better than that of bzip2 but worse than gzip |
| 190 | and LZO. Compression is slow. |
| 191 | |
Albin Tonnerre | 7dd65fe | 2010-01-08 14:42:42 -0800 | [diff] [blame] | 192 | config KERNEL_LZO |
| 193 | bool "LZO" |
| 194 | depends on HAVE_KERNEL_LZO |
| 195 | help |
Randy Dunlap | 0a4dd35 | 2012-05-31 16:26:46 -0700 | [diff] [blame] | 196 | Its compression ratio is the poorest among the choices. The kernel |
Stephan Sperber | 681b304 | 2010-07-14 11:23:08 +0200 | [diff] [blame] | 197 | size is about 10% bigger than gzip; however its speed |
Albin Tonnerre | 7dd65fe | 2010-01-08 14:42:42 -0800 | [diff] [blame] | 198 | (both compression and decompression) is the fastest. |
| 199 | |
Kyungsik Lee | e76e1fd | 2013-07-08 16:01:46 -0700 | [diff] [blame] | 200 | config KERNEL_LZ4 |
| 201 | bool "LZ4" |
| 202 | depends on HAVE_KERNEL_LZ4 |
| 203 | help |
| 204 | LZ4 is an LZ77-type compressor with a fixed, byte-oriented encoding. |
| 205 | A preliminary version of LZ4 de/compression tool is available at |
| 206 | <https://code.google.com/p/lz4/>. |
| 207 | |
| 208 | Its compression ratio is worse than LZO. The size of the kernel |
| 209 | is about 8% bigger than LZO. But the decompression speed is |
| 210 | faster than LZO. |
| 211 | |
Alain Knaff | 30d65db | 2009-01-04 22:46:17 +0100 | [diff] [blame] | 212 | endchoice |
| 213 | |
Josh Triplett | bd5dc17 | 2011-06-15 15:08:28 -0700 | [diff] [blame] | 214 | config DEFAULT_HOSTNAME |
| 215 | string "Default hostname" |
| 216 | default "(none)" |
| 217 | help |
| 218 | This option determines the default system hostname before userspace |
| 219 | calls sethostname(2). The kernel traditionally uses "(none)" here, |
| 220 | but you may wish to use a different default here to make a minimal |
| 221 | system more usable with less configuration. |
| 222 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 223 | config SWAP |
| 224 | bool "Support for paging of anonymous memory (swap)" |
David Howells | 9361401 | 2006-09-30 20:45:40 +0200 | [diff] [blame] | 225 | depends on MMU && BLOCK |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 226 | default y |
| 227 | help |
| 228 | This option allows you to choose whether you want to have support |
Jesper Juhl | 92c3504 | 2006-01-15 02:40:08 +0100 | [diff] [blame] | 229 | for so called swap devices or swap files in your kernel that are |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 230 | used to provide more virtual memory than the actual RAM present |
| 231 | in your computer. If unsure say Y. |
| 232 | |
| 233 | config SYSVIPC |
| 234 | bool "System V IPC" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 235 | ---help--- |
| 236 | Inter Process Communication is a suite of library functions and |
| 237 | system calls which let processes (running programs) synchronize and |
| 238 | exchange information. It is generally considered to be a good thing, |
| 239 | and some programs won't run unless you say Y here. In particular, if |
| 240 | you want to run the DOS emulator dosemu under Linux (read the |
| 241 | DOSEMU-HOWTO, available from <http://www.tldp.org/docs.html#howto>), |
| 242 | you'll need to say Y here. |
| 243 | |
| 244 | You can find documentation about IPC with "info ipc" and also in |
| 245 | section 6.4 of the Linux Programmer's Guide, available from |
| 246 | <http://www.tldp.org/guides.html>. |
| 247 | |
Eric W. Biederman | a5494dc | 2007-02-14 00:34:06 -0800 | [diff] [blame] | 248 | config SYSVIPC_SYSCTL |
| 249 | bool |
| 250 | depends on SYSVIPC |
| 251 | depends on SYSCTL |
| 252 | default y |
| 253 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 254 | config POSIX_MQUEUE |
| 255 | bool "POSIX Message Queues" |
Kees Cook | 19c9239 | 2012-10-02 11:19:29 -0700 | [diff] [blame] | 256 | depends on NET |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 257 | ---help--- |
| 258 | POSIX variant of message queues is a part of IPC. In POSIX message |
| 259 | queues every message has a priority which decides about succession |
| 260 | of receiving it by a process. If you want to compile and run |
| 261 | programs written e.g. for Solaris with use of its POSIX message |
Robert P. J. Day | b0e3765 | 2007-05-09 07:25:13 +0200 | [diff] [blame] | 262 | queues (functions mq_*) say Y here. |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 263 | |
| 264 | POSIX message queues are visible as a filesystem called 'mqueue' |
| 265 | and can be mounted somewhere if you want to do filesystem |
| 266 | operations on message queues. |
| 267 | |
| 268 | If unsure, say Y. |
| 269 | |
Serge E. Hallyn | bdc8e5f | 2009-04-06 19:01:11 -0700 | [diff] [blame] | 270 | config POSIX_MQUEUE_SYSCTL |
| 271 | bool |
| 272 | depends on POSIX_MQUEUE |
| 273 | depends on SYSCTL |
| 274 | default y |
| 275 | |
Konstantin Khlebnikov | 226b4cc | 2014-06-04 16:10:50 -0700 | [diff] [blame] | 276 | config CROSS_MEMORY_ATTACH |
| 277 | bool "Enable process_vm_readv/writev syscalls" |
| 278 | depends on MMU |
| 279 | default y |
| 280 | help |
| 281 | Enabling this option adds the system calls process_vm_readv and |
| 282 | process_vm_writev which allow a process with the correct privileges |
Geert Uytterhoeven | a2a368d | 2014-08-12 13:46:11 -0700 | [diff] [blame] | 283 | to directly read from or write to another process' address space. |
Konstantin Khlebnikov | 226b4cc | 2014-06-04 16:10:50 -0700 | [diff] [blame] | 284 | See the man page for more details. |
| 285 | |
Aneesh Kumar K.V | 990d6c2 | 2011-01-29 18:43:26 +0530 | [diff] [blame] | 286 | config FHANDLE |
Andi Kleen | f76be61 | 2016-04-01 14:31:40 -0700 | [diff] [blame] | 287 | bool "open by fhandle syscalls" if EXPERT |
Aneesh Kumar K.V | 990d6c2 | 2011-01-29 18:43:26 +0530 | [diff] [blame] | 288 | select EXPORTFS |
Andi Kleen | f76be61 | 2016-04-01 14:31:40 -0700 | [diff] [blame] | 289 | default y |
Aneesh Kumar K.V | 990d6c2 | 2011-01-29 18:43:26 +0530 | [diff] [blame] | 290 | help |
| 291 | If you say Y here, a user level program will be able to map |
| 292 | file names to handle and then later use the handle for |
| 293 | different file system operations. This is useful in implementing |
| 294 | userspace file servers, which now track files using handles instead |
| 295 | of names. The handle would remain the same even if file names |
| 296 | get renamed. Enables open_by_handle_at(2) and name_to_handle_at(2) |
| 297 | syscalls. |
| 298 | |
Josh Triplett | 69369a7 | 2014-04-03 14:48:27 -0700 | [diff] [blame] | 299 | config USELIB |
| 300 | bool "uselib syscall" |
Riku Voipio | b2113a4 | 2016-01-15 16:58:13 -0800 | [diff] [blame] | 301 | def_bool ALPHA || M68K || SPARC || X86_32 || IA32_EMULATION |
Josh Triplett | 69369a7 | 2014-04-03 14:48:27 -0700 | [diff] [blame] | 302 | help |
| 303 | This option enables the uselib syscall, a system call used in the |
| 304 | dynamic linker from libc5 and earlier. glibc does not use this |
| 305 | system call. If you intend to run programs built on libc5 or |
| 306 | earlier, you may need to enable this syscall. Current systems |
| 307 | running glibc can safely disable this. |
| 308 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 309 | config AUDIT |
| 310 | bool "Auditing support" |
Chris Wright | 804a6a49 | 2005-05-11 10:52:45 +0100 | [diff] [blame] | 311 | depends on NET |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 312 | help |
| 313 | Enable auditing infrastructure that can be used with another |
| 314 | kernel subsystem, such as SELinux (which requires this for |
Paul Moore | cb74ed2 | 2016-01-13 09:18:55 -0500 | [diff] [blame] | 315 | logging of avc messages output). System call auditing is included |
| 316 | on architectures which support it. |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 317 | |
AKASHI Takahiro | 7a01772 | 2014-02-25 18:16:24 +0900 | [diff] [blame] | 318 | config HAVE_ARCH_AUDITSYSCALL |
| 319 | bool |
| 320 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 321 | config AUDITSYSCALL |
Paul Moore | cb74ed2 | 2016-01-13 09:18:55 -0500 | [diff] [blame] | 322 | def_bool y |
AKASHI Takahiro | 7a01772 | 2014-02-25 18:16:24 +0900 | [diff] [blame] | 323 | depends on AUDIT && HAVE_ARCH_AUDITSYSCALL |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 324 | |
Eric Paris | 939a67f | 2009-12-17 20:12:06 -0500 | [diff] [blame] | 325 | config AUDIT_WATCH |
| 326 | def_bool y |
| 327 | depends on AUDITSYSCALL |
| 328 | select FSNOTIFY |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 329 | |
Al Viro | 74c3cbe | 2007-07-22 08:04:18 -0400 | [diff] [blame] | 330 | config AUDIT_TREE |
| 331 | def_bool y |
Eric Paris | 63c882a | 2009-05-21 17:02:01 -0400 | [diff] [blame] | 332 | depends on AUDITSYSCALL |
Eric Paris | 28a3a7e | 2009-12-17 20:12:05 -0500 | [diff] [blame] | 333 | select FSNOTIFY |
Al Viro | 74c3cbe | 2007-07-22 08:04:18 -0400 | [diff] [blame] | 334 | |
Thomas Gleixner | d9817eb | 2010-09-27 12:45:59 +0000 | [diff] [blame] | 335 | source "kernel/irq/Kconfig" |
Thomas Gleixner | 764e0da | 2012-05-21 23:16:18 +0200 | [diff] [blame] | 336 | source "kernel/time/Kconfig" |
Thomas Gleixner | d9817eb | 2010-09-27 12:45:59 +0000 | [diff] [blame] | 337 | |
Frederic Weisbecker | 391dc69 | 2012-09-09 14:22:07 +0200 | [diff] [blame] | 338 | menu "CPU/Task time and stats accounting" |
| 339 | |
Frederic Weisbecker | abf917c | 2012-07-25 07:56:04 +0200 | [diff] [blame] | 340 | config VIRT_CPU_ACCOUNTING |
| 341 | bool |
| 342 | |
Frederic Weisbecker | fdf9c35 | 2012-09-09 14:56:31 +0200 | [diff] [blame] | 343 | choice |
| 344 | prompt "Cputime accounting" |
| 345 | default TICK_CPU_ACCOUNTING if !PPC64 |
Stephen Rothwell | 02fc8d3 | 2013-02-08 14:19:38 +1100 | [diff] [blame] | 346 | default VIRT_CPU_ACCOUNTING_NATIVE if PPC64 |
Frederic Weisbecker | fdf9c35 | 2012-09-09 14:56:31 +0200 | [diff] [blame] | 347 | |
| 348 | # Kind of a stub config for the pure tick based cputime accounting |
| 349 | config TICK_CPU_ACCOUNTING |
| 350 | bool "Simple tick based cputime accounting" |
Frederic Weisbecker | c58b0df | 2013-04-26 15:16:31 +0200 | [diff] [blame] | 351 | depends on !S390 && !NO_HZ_FULL |
Frederic Weisbecker | fdf9c35 | 2012-09-09 14:56:31 +0200 | [diff] [blame] | 352 | help |
| 353 | This is the basic tick based cputime accounting that maintains |
| 354 | statistics about user, system and idle time spent on per jiffies |
| 355 | granularity. |
| 356 | |
| 357 | If unsure, say Y. |
| 358 | |
Frederic Weisbecker | abf917c | 2012-07-25 07:56:04 +0200 | [diff] [blame] | 359 | config VIRT_CPU_ACCOUNTING_NATIVE |
Frederic Weisbecker | 391dc69 | 2012-09-09 14:22:07 +0200 | [diff] [blame] | 360 | bool "Deterministic task and CPU time accounting" |
Frederic Weisbecker | c58b0df | 2013-04-26 15:16:31 +0200 | [diff] [blame] | 361 | depends on HAVE_VIRT_CPU_ACCOUNTING && !NO_HZ_FULL |
Frederic Weisbecker | abf917c | 2012-07-25 07:56:04 +0200 | [diff] [blame] | 362 | select VIRT_CPU_ACCOUNTING |
Frederic Weisbecker | 391dc69 | 2012-09-09 14:22:07 +0200 | [diff] [blame] | 363 | help |
| 364 | Select this option to enable more accurate task and CPU time |
| 365 | accounting. This is done by reading a CPU counter on each |
| 366 | kernel entry and exit and on transitions within the kernel |
| 367 | between system, softirq and hardirq state, so there is a |
| 368 | small performance impact. In the case of s390 or IBM POWER > 5, |
| 369 | this also enables accounting of stolen time on logically-partitioned |
| 370 | systems. |
| 371 | |
Frederic Weisbecker | abf917c | 2012-07-25 07:56:04 +0200 | [diff] [blame] | 372 | config VIRT_CPU_ACCOUNTING_GEN |
| 373 | bool "Full dynticks CPU time accounting" |
Kevin Hilman | ff3fb25 | 2013-09-16 15:28:19 -0700 | [diff] [blame] | 374 | depends on HAVE_CONTEXT_TRACKING |
Kevin Hilman | 554b000 | 2013-09-16 15:28:21 -0700 | [diff] [blame] | 375 | depends on HAVE_VIRT_CPU_ACCOUNTING_GEN |
Frederic Weisbecker | abf917c | 2012-07-25 07:56:04 +0200 | [diff] [blame] | 376 | select VIRT_CPU_ACCOUNTING |
| 377 | select CONTEXT_TRACKING |
| 378 | help |
| 379 | Select this option to enable task and CPU time accounting on full |
| 380 | dynticks systems. This accounting is implemented by watching every |
| 381 | kernel-user boundaries using the context tracking subsystem. |
| 382 | The accounting is thus performed at the expense of some significant |
| 383 | overhead. |
| 384 | |
| 385 | For now this is only useful if you are working on the full |
| 386 | dynticks subsystem development. |
| 387 | |
| 388 | If unsure, say N. |
| 389 | |
Rik van Riel | b58c358 | 2016-07-13 16:50:02 +0200 | [diff] [blame] | 390 | endchoice |
| 391 | |
Frederic Weisbecker | fdf9c35 | 2012-09-09 14:56:31 +0200 | [diff] [blame] | 392 | config IRQ_TIME_ACCOUNTING |
| 393 | bool "Fine granularity task level IRQ time accounting" |
Rik van Riel | b58c358 | 2016-07-13 16:50:02 +0200 | [diff] [blame] | 394 | depends on HAVE_IRQ_TIME_ACCOUNTING && !VIRT_CPU_ACCOUNTING_NATIVE |
Frederic Weisbecker | fdf9c35 | 2012-09-09 14:56:31 +0200 | [diff] [blame] | 395 | help |
| 396 | Select this option to enable fine granularity task irq time |
| 397 | accounting. This is done by reading a timestamp on each |
| 398 | transitions between softirq and hardirq state, so there can be a |
| 399 | small performance impact. |
| 400 | |
| 401 | If in doubt, say N here. |
| 402 | |
Frederic Weisbecker | 391dc69 | 2012-09-09 14:22:07 +0200 | [diff] [blame] | 403 | config BSD_PROCESS_ACCT |
| 404 | bool "BSD Process Accounting" |
Iulia Manda | 2813893 | 2015-04-15 16:16:41 -0700 | [diff] [blame] | 405 | depends on MULTIUSER |
Frederic Weisbecker | 391dc69 | 2012-09-09 14:22:07 +0200 | [diff] [blame] | 406 | help |
| 407 | If you say Y here, a user level program will be able to instruct the |
| 408 | kernel (via a special system call) to write process accounting |
| 409 | information to a file: whenever a process exits, information about |
| 410 | that process will be appended to the file by the kernel. The |
| 411 | information includes things such as creation time, owning user, |
| 412 | command name, memory usage, controlling terminal etc. (the complete |
| 413 | list is in the struct acct in <file:include/linux/acct.h>). It is |
| 414 | up to the user level program to do useful things with this |
| 415 | information. This is generally a good idea, so say Y. |
| 416 | |
| 417 | config BSD_PROCESS_ACCT_V3 |
| 418 | bool "BSD Process Accounting version 3 file format" |
| 419 | depends on BSD_PROCESS_ACCT |
| 420 | default n |
| 421 | help |
| 422 | If you say Y here, the process accounting information is written |
| 423 | in a new file format that also logs the process IDs of each |
| 424 | process and it's parent. Note that this file format is incompatible |
| 425 | with previous v0/v1/v2 file formats, so you will need updated tools |
| 426 | for processing it. A preliminary version of these tools is available |
| 427 | at <http://www.gnu.org/software/acct/>. |
| 428 | |
| 429 | config TASKSTATS |
Kees Cook | 19c9239 | 2012-10-02 11:19:29 -0700 | [diff] [blame] | 430 | bool "Export task/process statistics through netlink" |
Frederic Weisbecker | 391dc69 | 2012-09-09 14:22:07 +0200 | [diff] [blame] | 431 | depends on NET |
Iulia Manda | 2813893 | 2015-04-15 16:16:41 -0700 | [diff] [blame] | 432 | depends on MULTIUSER |
Frederic Weisbecker | 391dc69 | 2012-09-09 14:22:07 +0200 | [diff] [blame] | 433 | default n |
| 434 | help |
| 435 | Export selected statistics for tasks/processes through the |
| 436 | generic netlink interface. Unlike BSD process accounting, the |
| 437 | statistics are available during the lifetime of tasks/processes as |
| 438 | responses to commands. Like BSD accounting, they are sent to user |
| 439 | space on task exit. |
| 440 | |
| 441 | Say N if unsure. |
| 442 | |
| 443 | config TASK_DELAY_ACCT |
Kees Cook | 19c9239 | 2012-10-02 11:19:29 -0700 | [diff] [blame] | 444 | bool "Enable per-task delay accounting" |
Frederic Weisbecker | 391dc69 | 2012-09-09 14:22:07 +0200 | [diff] [blame] | 445 | depends on TASKSTATS |
Naveen N. Rao | f6db834 | 2015-06-25 23:53:37 +0530 | [diff] [blame] | 446 | select SCHED_INFO |
Frederic Weisbecker | 391dc69 | 2012-09-09 14:22:07 +0200 | [diff] [blame] | 447 | help |
| 448 | Collect information on time spent by a task waiting for system |
| 449 | resources like cpu, synchronous block I/O completion and swapping |
| 450 | in pages. Such statistics can help in setting a task's priorities |
| 451 | relative to other tasks for cpu, io, rss limits etc. |
| 452 | |
| 453 | Say N if unsure. |
| 454 | |
| 455 | config TASK_XACCT |
Kees Cook | 19c9239 | 2012-10-02 11:19:29 -0700 | [diff] [blame] | 456 | bool "Enable extended accounting over taskstats" |
Frederic Weisbecker | 391dc69 | 2012-09-09 14:22:07 +0200 | [diff] [blame] | 457 | depends on TASKSTATS |
| 458 | help |
| 459 | Collect extended task accounting data and send the data |
| 460 | to userland for processing over the taskstats interface. |
| 461 | |
| 462 | Say N if unsure. |
| 463 | |
| 464 | config TASK_IO_ACCOUNTING |
Kees Cook | 19c9239 | 2012-10-02 11:19:29 -0700 | [diff] [blame] | 465 | bool "Enable per-task storage I/O accounting" |
Frederic Weisbecker | 391dc69 | 2012-09-09 14:22:07 +0200 | [diff] [blame] | 466 | depends on TASK_XACCT |
| 467 | help |
| 468 | Collect information on the number of bytes of storage I/O which this |
| 469 | task has caused. |
| 470 | |
| 471 | Say N if unsure. |
| 472 | |
| 473 | endmenu # "CPU/Task time and stats accounting" |
| 474 | |
Paul E. McKenney | 0af92d4 | 2017-05-17 08:43:40 -0700 | [diff] [blame] | 475 | source "kernel/rcu/Kconfig" |
Mike Travis | c903ff8 | 2009-01-15 12:28:29 -0800 | [diff] [blame] | 476 | |
Vivek Goyal | de5b56b | 2014-08-08 14:25:41 -0700 | [diff] [blame] | 477 | config BUILD_BIN2C |
| 478 | bool |
| 479 | default n |
| 480 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 481 | config IKCONFIG |
Ross Biro | f2443ab | 2006-09-30 23:27:25 -0700 | [diff] [blame] | 482 | tristate "Kernel .config support" |
Vivek Goyal | de5b56b | 2014-08-08 14:25:41 -0700 | [diff] [blame] | 483 | select BUILD_BIN2C |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 484 | ---help--- |
| 485 | This option enables the complete Linux kernel ".config" file |
| 486 | contents to be saved in the kernel. It provides documentation |
| 487 | of which kernel options are used in a running kernel or in an |
| 488 | on-disk kernel. This information can be extracted from the kernel |
| 489 | image file with the script scripts/extract-ikconfig and used as |
| 490 | input to rebuild the current kernel or to build another kernel. |
| 491 | It can also be extracted from a running kernel by reading |
| 492 | /proc/config.gz if enabled (below). |
| 493 | |
| 494 | config IKCONFIG_PROC |
| 495 | bool "Enable access to .config through /proc/config.gz" |
| 496 | depends on IKCONFIG && PROC_FS |
| 497 | ---help--- |
| 498 | This option enables access to the kernel configuration file |
| 499 | through /proc/config.gz. |
| 500 | |
Alistair John Strachan | 794543a | 2007-05-08 00:31:15 -0700 | [diff] [blame] | 501 | config LOG_BUF_SHIFT |
| 502 | int "Kernel log buffer size (16 => 64KB, 17 => 128KB)" |
Ingo Molnar | fb39f98 | 2015-07-01 10:19:11 +0200 | [diff] [blame] | 503 | range 12 25 |
Adrian Bunk | f17a32e | 2008-04-29 00:58:58 -0700 | [diff] [blame] | 504 | default 17 |
Josh Triplett | 361e9df | 2014-10-03 16:00:54 -0700 | [diff] [blame] | 505 | depends on PRINTK |
Alistair John Strachan | 794543a | 2007-05-08 00:31:15 -0700 | [diff] [blame] | 506 | help |
Luis R. Rodriguez | 23b2899 | 2014-08-06 16:08:56 -0700 | [diff] [blame] | 507 | Select the minimal kernel log buffer size as a power of 2. |
| 508 | The final size is affected by LOG_CPU_MAX_BUF_SHIFT config |
| 509 | parameter, see below. Any higher size also might be forced |
| 510 | by "log_buf_len" boot parameter. |
| 511 | |
Adrian Bunk | f17a32e | 2008-04-29 00:58:58 -0700 | [diff] [blame] | 512 | Examples: |
Luis R. Rodriguez | 23b2899 | 2014-08-06 16:08:56 -0700 | [diff] [blame] | 513 | 17 => 128 KB |
Adrian Bunk | f17a32e | 2008-04-29 00:58:58 -0700 | [diff] [blame] | 514 | 16 => 64 KB |
Luis R. Rodriguez | 23b2899 | 2014-08-06 16:08:56 -0700 | [diff] [blame] | 515 | 15 => 32 KB |
| 516 | 14 => 16 KB |
Alistair John Strachan | 794543a | 2007-05-08 00:31:15 -0700 | [diff] [blame] | 517 | 13 => 8 KB |
| 518 | 12 => 4 KB |
| 519 | |
Luis R. Rodriguez | 23b2899 | 2014-08-06 16:08:56 -0700 | [diff] [blame] | 520 | config LOG_CPU_MAX_BUF_SHIFT |
| 521 | int "CPU kernel log buffer size contribution (13 => 8 KB, 17 => 128KB)" |
Geert Uytterhoeven | 2240a31 | 2014-10-13 15:51:11 -0700 | [diff] [blame] | 522 | depends on SMP |
Luis R. Rodriguez | 23b2899 | 2014-08-06 16:08:56 -0700 | [diff] [blame] | 523 | range 0 21 |
| 524 | default 12 if !BASE_SMALL |
| 525 | default 0 if BASE_SMALL |
Josh Triplett | 361e9df | 2014-10-03 16:00:54 -0700 | [diff] [blame] | 526 | depends on PRINTK |
Luis R. Rodriguez | 23b2899 | 2014-08-06 16:08:56 -0700 | [diff] [blame] | 527 | help |
| 528 | This option allows to increase the default ring buffer size |
| 529 | according to the number of CPUs. The value defines the contribution |
| 530 | of each CPU as a power of 2. The used space is typically only few |
| 531 | lines however it might be much more when problems are reported, |
| 532 | e.g. backtraces. |
| 533 | |
| 534 | The increased size means that a new buffer has to be allocated and |
| 535 | the original static one is unused. It makes sense only on systems |
| 536 | with more CPUs. Therefore this value is used only when the sum of |
| 537 | contributions is greater than the half of the default kernel ring |
| 538 | buffer as defined by LOG_BUF_SHIFT. The default values are set |
| 539 | so that more than 64 CPUs are needed to trigger the allocation. |
| 540 | |
| 541 | Also this option is ignored when "log_buf_len" kernel parameter is |
| 542 | used as it forces an exact (power of two) size of the ring buffer. |
| 543 | |
| 544 | The number of possible CPUs is used for this computation ignoring |
Geert Uytterhoeven | 5e0d8d5 | 2016-06-05 10:47:02 +0200 | [diff] [blame] | 545 | hotplugging making the computation optimal for the worst case |
| 546 | scenario while allowing a simple algorithm to be used from bootup. |
Luis R. Rodriguez | 23b2899 | 2014-08-06 16:08:56 -0700 | [diff] [blame] | 547 | |
| 548 | Examples shift values and their meaning: |
| 549 | 17 => 128 KB for each CPU |
| 550 | 16 => 64 KB for each CPU |
| 551 | 15 => 32 KB for each CPU |
| 552 | 14 => 16 KB for each CPU |
| 553 | 13 => 8 KB for each CPU |
| 554 | 12 => 4 KB for each CPU |
| 555 | |
Sergey Senozhatsky | f92bac3 | 2016-12-27 23:16:05 +0900 | [diff] [blame] | 556 | config PRINTK_SAFE_LOG_BUF_SHIFT |
| 557 | int "Temporary per-CPU printk log buffer size (12 => 4KB, 13 => 8KB)" |
Petr Mladek | 427934b | 2016-05-20 17:00:39 -0700 | [diff] [blame] | 558 | range 10 21 |
| 559 | default 13 |
Sergey Senozhatsky | f92bac3 | 2016-12-27 23:16:05 +0900 | [diff] [blame] | 560 | depends on PRINTK |
Petr Mladek | 427934b | 2016-05-20 17:00:39 -0700 | [diff] [blame] | 561 | help |
Sergey Senozhatsky | f92bac3 | 2016-12-27 23:16:05 +0900 | [diff] [blame] | 562 | Select the size of an alternate printk per-CPU buffer where messages |
| 563 | printed from usafe contexts are temporary stored. One example would |
| 564 | be NMI messages, another one - printk recursion. The messages are |
| 565 | copied to the main log buffer in a safe context to avoid a deadlock. |
| 566 | The value defines the size as a power of 2. |
Petr Mladek | 427934b | 2016-05-20 17:00:39 -0700 | [diff] [blame] | 567 | |
Sergey Senozhatsky | f92bac3 | 2016-12-27 23:16:05 +0900 | [diff] [blame] | 568 | Those messages are rare and limited. The largest one is when |
Petr Mladek | 427934b | 2016-05-20 17:00:39 -0700 | [diff] [blame] | 569 | a backtrace is printed. It usually fits into 4KB. Select |
| 570 | 8KB if you want to be on the safe side. |
| 571 | |
| 572 | Examples: |
| 573 | 17 => 128 KB for each CPU |
| 574 | 16 => 64 KB for each CPU |
| 575 | 15 => 32 KB for each CPU |
| 576 | 14 => 16 KB for each CPU |
| 577 | 13 => 8 KB for each CPU |
| 578 | 12 => 4 KB for each CPU |
| 579 | |
KAMEZAWA Hiroyuki | 5cdc38f | 2009-01-07 18:07:30 -0800 | [diff] [blame] | 580 | # |
| 581 | # Architectures with an unreliable sched_clock() should select this: |
| 582 | # |
| 583 | config HAVE_UNSTABLE_SCHED_CLOCK |
| 584 | bool |
| 585 | |
Stephen Boyd | 38ff87f | 2013-06-01 23:39:40 -0700 | [diff] [blame] | 586 | config GENERIC_SCHED_CLOCK |
| 587 | bool |
| 588 | |
Andrea Arcangeli | be3a728 | 2012-10-04 01:50:47 +0200 | [diff] [blame] | 589 | # |
| 590 | # For architectures that want to enable the support for NUMA-affine scheduler |
| 591 | # balancing logic: |
| 592 | # |
| 593 | config ARCH_SUPPORTS_NUMA_BALANCING |
| 594 | bool |
| 595 | |
Peter Zijlstra | be5e610 | 2013-11-18 18:27:06 +0100 | [diff] [blame] | 596 | # |
Mel Gorman | 72b252a | 2015-09-04 15:47:32 -0700 | [diff] [blame] | 597 | # For architectures that prefer to flush all TLBs after a number of pages |
| 598 | # are unmapped instead of sending one IPI per page to flush. The architecture |
| 599 | # must provide guarantees on what happens if a clean TLB cache entry is |
| 600 | # written after the unmap. Details are in mm/rmap.c near the check for |
| 601 | # should_defer_flush. The architecture should also consider if the full flush |
| 602 | # and the refill costs are offset by the savings of sending fewer IPIs. |
| 603 | config ARCH_WANT_BATCHED_UNMAP_TLB_FLUSH |
| 604 | bool |
| 605 | |
| 606 | # |
Peter Zijlstra | be5e610 | 2013-11-18 18:27:06 +0100 | [diff] [blame] | 607 | # For architectures that know their GCC __int128 support is sound |
| 608 | # |
| 609 | config ARCH_SUPPORTS_INT128 |
| 610 | bool |
| 611 | |
Andrea Arcangeli | be3a728 | 2012-10-04 01:50:47 +0200 | [diff] [blame] | 612 | # For architectures that (ab)use NUMA to represent different memory regions |
| 613 | # all cpu-local but of different latencies, such as SuperH. |
| 614 | # |
| 615 | config ARCH_WANT_NUMA_VARIABLE_LOCALITY |
| 616 | bool |
| 617 | |
Andrea Arcangeli | be3a728 | 2012-10-04 01:50:47 +0200 | [diff] [blame] | 618 | config NUMA_BALANCING |
| 619 | bool "Memory placement aware NUMA scheduler" |
Andrea Arcangeli | be3a728 | 2012-10-04 01:50:47 +0200 | [diff] [blame] | 620 | depends on ARCH_SUPPORTS_NUMA_BALANCING |
| 621 | depends on !ARCH_WANT_NUMA_VARIABLE_LOCALITY |
| 622 | depends on SMP && NUMA && MIGRATION |
| 623 | help |
| 624 | This option adds support for automatic NUMA aware memory/task placement. |
| 625 | The mechanism is quite primitive and is based on migrating memory when |
Paul Gortmaker | 6d56a41 | 2013-08-13 11:06:50 -0400 | [diff] [blame] | 626 | it has references to the node the task is running on. |
Andrea Arcangeli | be3a728 | 2012-10-04 01:50:47 +0200 | [diff] [blame] | 627 | |
| 628 | This system will be inactive on UMA systems. |
| 629 | |
Aneesh Kumar K.V | 6f7c97e | 2014-12-10 15:43:37 -0800 | [diff] [blame] | 630 | config NUMA_BALANCING_DEFAULT_ENABLED |
| 631 | bool "Automatically enable NUMA aware memory/task placement" |
| 632 | default y |
| 633 | depends on NUMA_BALANCING |
| 634 | help |
| 635 | If set, automatic NUMA balancing will be enabled if running on a NUMA |
| 636 | machine. |
| 637 | |
Li Zefan | 23964d2 | 2009-01-15 13:50:58 -0800 | [diff] [blame] | 638 | menuconfig CGROUPS |
Christoph Jaeger | 6341e62 | 2014-12-20 15:41:11 -0500 | [diff] [blame] | 639 | bool "Control Group support" |
Tejun Heo | 2bd59d4 | 2014-02-11 11:52:49 -0500 | [diff] [blame] | 640 | select KERNFS |
Paul Menage | ddbcc7e | 2007-10-18 23:39:30 -0700 | [diff] [blame] | 641 | help |
Li Zefan | 23964d2 | 2009-01-15 13:50:58 -0800 | [diff] [blame] | 642 | This option adds support for grouping sets of processes together, for |
KAMEZAWA Hiroyuki | 5cdc38f | 2009-01-07 18:07:30 -0800 | [diff] [blame] | 643 | use with process control subsystems such as Cpusets, CFS, memory |
| 644 | controls or device isolation. |
| 645 | See |
KAMEZAWA Hiroyuki | 5cdc38f | 2009-01-07 18:07:30 -0800 | [diff] [blame] | 646 | - Documentation/scheduler/sched-design-CFS.txt (CFS) |
seokhoon.yoon | 9991a9c | 2016-08-02 14:03:13 -0700 | [diff] [blame] | 647 | - Documentation/cgroup-v1/ (features for grouping, isolation |
Li Zefan | 45ce80f | 2009-01-15 13:50:59 -0800 | [diff] [blame] | 648 | and resource control) |
Paul Menage | ddbcc7e | 2007-10-18 23:39:30 -0700 | [diff] [blame] | 649 | |
| 650 | Say N if unsure. |
| 651 | |
Li Zefan | 23964d2 | 2009-01-15 13:50:58 -0800 | [diff] [blame] | 652 | if CGROUPS |
| 653 | |
Johannes Weiner | 3e32cb2 | 2014-12-10 15:42:31 -0800 | [diff] [blame] | 654 | config PAGE_COUNTER |
| 655 | bool |
| 656 | |
Andrew Morton | c255a45 | 2012-07-31 16:43:02 -0700 | [diff] [blame] | 657 | config MEMCG |
Johannes Weiner | a0166ec | 2015-12-17 17:19:56 -0500 | [diff] [blame] | 658 | bool "Memory controller" |
Johannes Weiner | 3e32cb2 | 2014-12-10 15:42:31 -0800 | [diff] [blame] | 659 | select PAGE_COUNTER |
Tejun Heo | 79bd981 | 2013-11-22 18:20:42 -0500 | [diff] [blame] | 660 | select EVENTFD |
Balbir Singh | 00f0b82 | 2008-03-04 14:28:39 -0800 | [diff] [blame] | 661 | help |
Johannes Weiner | a0166ec | 2015-12-17 17:19:56 -0500 | [diff] [blame] | 662 | Provides control over the memory footprint of tasks in a cgroup. |
Balbir Singh | 00f0b82 | 2008-03-04 14:28:39 -0800 | [diff] [blame] | 663 | |
Andrew Morton | c255a45 | 2012-07-31 16:43:02 -0700 | [diff] [blame] | 664 | config MEMCG_SWAP |
Johannes Weiner | a0166ec | 2015-12-17 17:19:56 -0500 | [diff] [blame] | 665 | bool "Swap controller" |
Andrew Morton | c255a45 | 2012-07-31 16:43:02 -0700 | [diff] [blame] | 666 | depends on MEMCG && SWAP |
KAMEZAWA Hiroyuki | c077719 | 2009-01-07 18:07:57 -0800 | [diff] [blame] | 667 | help |
Johannes Weiner | a0166ec | 2015-12-17 17:19:56 -0500 | [diff] [blame] | 668 | Provides control over the swap space consumed by tasks in a cgroup. |
| 669 | |
Andrew Morton | c255a45 | 2012-07-31 16:43:02 -0700 | [diff] [blame] | 670 | config MEMCG_SWAP_ENABLED |
Johannes Weiner | a0166ec | 2015-12-17 17:19:56 -0500 | [diff] [blame] | 671 | bool "Swap controller enabled by default" |
Andrew Morton | c255a45 | 2012-07-31 16:43:02 -0700 | [diff] [blame] | 672 | depends on MEMCG_SWAP |
Michal Hocko | a42c390 | 2010-11-24 12:57:08 -0800 | [diff] [blame] | 673 | default y |
| 674 | help |
| 675 | Memory Resource Controller Swap Extension comes with its price in |
| 676 | a bigger memory consumption. General purpose distribution kernels |
Jim Cromie | 43d547f | 2010-12-17 14:32:36 -0700 | [diff] [blame] | 677 | which want to enable the feature but keep it disabled by default |
Michal Hocko | 07555ac | 2013-08-22 16:35:46 -0700 | [diff] [blame] | 678 | and let the user enable it by swapaccount=1 boot command line |
Michal Hocko | a42c390 | 2010-11-24 12:57:08 -0800 | [diff] [blame] | 679 | parameter should have this option unselected. |
| 680 | For those who want to have the feature enabled by default should |
| 681 | select this option (if, for some reason, they need to disable it |
WANG Cong | 00a66d2 | 2011-07-25 17:12:12 -0700 | [diff] [blame] | 682 | then swapaccount=0 does the trick). |
KAMEZAWA Hiroyuki | c077719 | 2009-01-07 18:07:57 -0800 | [diff] [blame] | 683 | |
Johannes Weiner | 6bf024e | 2015-12-17 17:19:57 -0500 | [diff] [blame] | 684 | config BLK_CGROUP |
| 685 | bool "IO controller" |
| 686 | depends on BLOCK |
Aneesh Kumar K.V | 2bc64a2 | 2012-07-31 16:42:12 -0700 | [diff] [blame] | 687 | default n |
Johannes Weiner | 6bf024e | 2015-12-17 17:19:57 -0500 | [diff] [blame] | 688 | ---help--- |
| 689 | Generic block IO controller cgroup interface. This is the common |
| 690 | cgroup interface which should be used by various IO controlling |
| 691 | policies. |
Aneesh Kumar K.V | 2bc64a2 | 2012-07-31 16:42:12 -0700 | [diff] [blame] | 692 | |
Johannes Weiner | 6bf024e | 2015-12-17 17:19:57 -0500 | [diff] [blame] | 693 | Currently, CFQ IO scheduler uses it to recognize task groups and |
| 694 | control disk bandwidth allocation (proportional time slice allocation) |
| 695 | to such task groups. It is also used by bio throttling logic in |
| 696 | block layer to implement upper limit in IO rates on a device. |
Stephane Eranian | e5d1367 | 2011-02-14 11:20:01 +0200 | [diff] [blame] | 697 | |
Johannes Weiner | 6bf024e | 2015-12-17 17:19:57 -0500 | [diff] [blame] | 698 | This option only enables generic Block IO controller infrastructure. |
| 699 | One needs to also enable actual IO controlling logic/policy. For |
| 700 | enabling proportional weight division of disk bandwidth in CFQ, set |
| 701 | CONFIG_CFQ_GROUP_IOSCHED=y; for enabling throttling policy, set |
| 702 | CONFIG_BLK_DEV_THROTTLING=y. |
| 703 | |
seokhoon.yoon | 9991a9c | 2016-08-02 14:03:13 -0700 | [diff] [blame] | 704 | See Documentation/cgroup-v1/blkio-controller.txt for more information. |
Johannes Weiner | 6bf024e | 2015-12-17 17:19:57 -0500 | [diff] [blame] | 705 | |
| 706 | config DEBUG_BLK_CGROUP |
| 707 | bool "IO controller debugging" |
| 708 | depends on BLK_CGROUP |
| 709 | default n |
| 710 | ---help--- |
| 711 | Enable some debugging help. Currently it exports additional stat |
| 712 | files in a cgroup which can be useful for debugging. |
| 713 | |
| 714 | config CGROUP_WRITEBACK |
| 715 | bool |
| 716 | depends on MEMCG && BLK_CGROUP |
| 717 | default y |
Stephane Eranian | e5d1367 | 2011-02-14 11:20:01 +0200 | [diff] [blame] | 718 | |
Dhaval Giani | 7c94143 | 2010-01-20 13:26:18 +0100 | [diff] [blame] | 719 | menuconfig CGROUP_SCHED |
Johannes Weiner | a0166ec | 2015-12-17 17:19:56 -0500 | [diff] [blame] | 720 | bool "CPU controller" |
Dhaval Giani | 7c94143 | 2010-01-20 13:26:18 +0100 | [diff] [blame] | 721 | default n |
| 722 | help |
| 723 | This feature lets CPU scheduler recognize task groups and control CPU |
| 724 | bandwidth allocation to such task groups. It uses cgroups to group |
| 725 | tasks. |
| 726 | |
| 727 | if CGROUP_SCHED |
| 728 | config FAIR_GROUP_SCHED |
| 729 | bool "Group scheduling for SCHED_OTHER" |
| 730 | depends on CGROUP_SCHED |
| 731 | default CGROUP_SCHED |
| 732 | |
Paul Turner | ab84d31 | 2011-07-21 09:43:28 -0700 | [diff] [blame] | 733 | config CFS_BANDWIDTH |
| 734 | bool "CPU bandwidth provisioning for FAIR_GROUP_SCHED" |
Paul Turner | ab84d31 | 2011-07-21 09:43:28 -0700 | [diff] [blame] | 735 | depends on FAIR_GROUP_SCHED |
| 736 | default n |
| 737 | help |
| 738 | This option allows users to define CPU bandwidth rates (limits) for |
| 739 | tasks running within the fair group scheduler. Groups with no limit |
| 740 | set are considered to be unconstrained and will run with no |
| 741 | restriction. |
| 742 | See tip/Documentation/scheduler/sched-bwc.txt for more information. |
| 743 | |
Dhaval Giani | 7c94143 | 2010-01-20 13:26:18 +0100 | [diff] [blame] | 744 | config RT_GROUP_SCHED |
| 745 | bool "Group scheduling for SCHED_RR/FIFO" |
Dhaval Giani | 7c94143 | 2010-01-20 13:26:18 +0100 | [diff] [blame] | 746 | depends on CGROUP_SCHED |
| 747 | default n |
| 748 | help |
| 749 | This feature lets you explicitly allocate real CPU bandwidth |
Li Zefan | 32bd7eb | 2010-03-24 13:17:19 +0800 | [diff] [blame] | 750 | to task groups. If enabled, it will also make it impossible to |
Dhaval Giani | 7c94143 | 2010-01-20 13:26:18 +0100 | [diff] [blame] | 751 | schedule realtime tasks for non-root users until you allocate |
| 752 | realtime bandwidth for them. |
| 753 | See Documentation/scheduler/sched-rt-group.txt for more information. |
| 754 | |
| 755 | endif #CGROUP_SCHED |
| 756 | |
Johannes Weiner | 6bf024e | 2015-12-17 17:19:57 -0500 | [diff] [blame] | 757 | config CGROUP_PIDS |
| 758 | bool "PIDs controller" |
| 759 | help |
| 760 | Provides enforcement of process number limits in the scope of a |
| 761 | cgroup. Any attempt to fork more processes than is allowed in the |
| 762 | cgroup will fail. PIDs are fundamentally a global resource because it |
| 763 | is fairly trivial to reach PID exhaustion before you reach even a |
| 764 | conservative kmemcg limit. As a result, it is possible to grind a |
| 765 | system to halt without being limited by other cgroup policies. The |
Parav Pandit | 6cc578d | 2016-03-05 11:30:56 +0530 | [diff] [blame] | 766 | PIDs controller is designed to stop this from happening. |
Johannes Weiner | 6bf024e | 2015-12-17 17:19:57 -0500 | [diff] [blame] | 767 | |
| 768 | It should be noted that organisational operations (such as attaching |
Parav Pandit | 6cc578d | 2016-03-05 11:30:56 +0530 | [diff] [blame] | 769 | to a cgroup hierarchy will *not* be blocked by the PIDs controller), |
Johannes Weiner | 6bf024e | 2015-12-17 17:19:57 -0500 | [diff] [blame] | 770 | since the PIDs limit only affects a process's ability to fork, not to |
| 771 | attach to a cgroup. |
| 772 | |
Parav Pandit | 39d3e75 | 2017-01-10 00:02:13 +0000 | [diff] [blame] | 773 | config CGROUP_RDMA |
| 774 | bool "RDMA controller" |
| 775 | help |
| 776 | Provides enforcement of RDMA resources defined by IB stack. |
| 777 | It is fairly easy for consumers to exhaust RDMA resources, which |
| 778 | can result into resource unavailability to other consumers. |
| 779 | RDMA controller is designed to stop this from happening. |
| 780 | Attaching processes with active RDMA resources to the cgroup |
| 781 | hierarchy is allowed even if can cross the hierarchy's limit. |
| 782 | |
Johannes Weiner | 6bf024e | 2015-12-17 17:19:57 -0500 | [diff] [blame] | 783 | config CGROUP_FREEZER |
| 784 | bool "Freezer controller" |
| 785 | help |
| 786 | Provides a way to freeze and unfreeze all tasks in a |
| 787 | cgroup. |
| 788 | |
Johannes Weiner | 489c2a2 | 2016-01-20 15:02:41 -0800 | [diff] [blame] | 789 | This option affects the ORIGINAL cgroup interface. The cgroup2 memory |
| 790 | controller includes important in-kernel memory consumers per default. |
| 791 | |
| 792 | If you're using cgroup2, say N. |
| 793 | |
Johannes Weiner | 6bf024e | 2015-12-17 17:19:57 -0500 | [diff] [blame] | 794 | config CGROUP_HUGETLB |
| 795 | bool "HugeTLB controller" |
| 796 | depends on HUGETLB_PAGE |
| 797 | select PAGE_COUNTER |
Vivek Goyal | afc24d4 | 2010-04-26 19:27:56 +0200 | [diff] [blame] | 798 | default n |
Johannes Weiner | 6bf024e | 2015-12-17 17:19:57 -0500 | [diff] [blame] | 799 | help |
| 800 | Provides a cgroup controller for HugeTLB pages. |
| 801 | When you enable this, you can put a per cgroup limit on HugeTLB usage. |
| 802 | The limit is enforced during page fault. Since HugeTLB doesn't |
| 803 | support page reclaim, enforcing the limit at page fault time implies |
| 804 | that, the application will get SIGBUS signal if it tries to access |
| 805 | HugeTLB pages beyond its limit. This requires the application to know |
| 806 | beforehand how much HugeTLB pages it would require for its use. The |
| 807 | control group is tracked in the third page lru pointer. This means |
| 808 | that we cannot use the controller with huge page less than 3 pages. |
Vivek Goyal | afc24d4 | 2010-04-26 19:27:56 +0200 | [diff] [blame] | 809 | |
Johannes Weiner | 6bf024e | 2015-12-17 17:19:57 -0500 | [diff] [blame] | 810 | config CPUSETS |
| 811 | bool "Cpuset controller" |
Nicolas Pitre | e1d4eee | 2017-06-14 13:19:23 -0400 | [diff] [blame] | 812 | depends on SMP |
Johannes Weiner | 6bf024e | 2015-12-17 17:19:57 -0500 | [diff] [blame] | 813 | help |
| 814 | This option will let you create and manage CPUSETs which |
| 815 | allow dynamically partitioning a system into sets of CPUs and |
| 816 | Memory Nodes and assigning tasks to run only within those sets. |
| 817 | This is primarily useful on large SMP or NUMA systems. |
Vivek Goyal | afc24d4 | 2010-04-26 19:27:56 +0200 | [diff] [blame] | 818 | |
Johannes Weiner | 6bf024e | 2015-12-17 17:19:57 -0500 | [diff] [blame] | 819 | Say N if unsure. |
Vivek Goyal | afc24d4 | 2010-04-26 19:27:56 +0200 | [diff] [blame] | 820 | |
Johannes Weiner | 6bf024e | 2015-12-17 17:19:57 -0500 | [diff] [blame] | 821 | config PROC_PID_CPUSET |
| 822 | bool "Include legacy /proc/<pid>/cpuset file" |
| 823 | depends on CPUSETS |
Tejun Heo | 89e9b9e | 2015-05-22 17:13:36 -0400 | [diff] [blame] | 824 | default y |
| 825 | |
Johannes Weiner | 6bf024e | 2015-12-17 17:19:57 -0500 | [diff] [blame] | 826 | config CGROUP_DEVICE |
| 827 | bool "Device controller" |
| 828 | help |
| 829 | Provides a cgroup controller implementing whitelists for |
| 830 | devices which a process in the cgroup can mknod or open. |
| 831 | |
| 832 | config CGROUP_CPUACCT |
| 833 | bool "Simple CPU accounting controller" |
| 834 | help |
| 835 | Provides a simple controller for monitoring the |
| 836 | total CPU consumed by the tasks in a cgroup. |
| 837 | |
| 838 | config CGROUP_PERF |
| 839 | bool "Perf controller" |
| 840 | depends on PERF_EVENTS |
| 841 | help |
| 842 | This option extends the perf per-cpu mode to restrict monitoring |
| 843 | to threads which belong to the cgroup specified and run on the |
| 844 | designated cpu. |
| 845 | |
| 846 | Say N if unsure. |
| 847 | |
Daniel Mack | 3007098 | 2016-11-23 16:52:26 +0100 | [diff] [blame] | 848 | config CGROUP_BPF |
| 849 | bool "Support for eBPF programs attached to cgroups" |
Andy Lutomirski | 483c493 | 2016-12-16 08:33:45 -0800 | [diff] [blame] | 850 | depends on BPF_SYSCALL |
| 851 | select SOCK_CGROUP_DATA |
Daniel Mack | 3007098 | 2016-11-23 16:52:26 +0100 | [diff] [blame] | 852 | help |
| 853 | Allow attaching eBPF programs to a cgroup using the bpf(2) |
| 854 | syscall command BPF_PROG_ATTACH. |
| 855 | |
| 856 | In which context these programs are accessed depends on the type |
| 857 | of attachment. For instance, programs that are attached using |
| 858 | BPF_CGROUP_INET_INGRESS will be executed on the ingress path of |
| 859 | inet sockets. |
| 860 | |
Johannes Weiner | 6bf024e | 2015-12-17 17:19:57 -0500 | [diff] [blame] | 861 | config CGROUP_DEBUG |
Waiman Long | 23b0be4 | 2017-06-13 17:18:03 -0400 | [diff] [blame] | 862 | bool "Debug controller" |
Johannes Weiner | 6bf024e | 2015-12-17 17:19:57 -0500 | [diff] [blame] | 863 | default n |
Waiman Long | 23b0be4 | 2017-06-13 17:18:03 -0400 | [diff] [blame] | 864 | depends on DEBUG_KERNEL |
Johannes Weiner | 6bf024e | 2015-12-17 17:19:57 -0500 | [diff] [blame] | 865 | help |
| 866 | This option enables a simple controller that exports |
Waiman Long | 23b0be4 | 2017-06-13 17:18:03 -0400 | [diff] [blame] | 867 | debugging information about the cgroups framework. This |
| 868 | controller is for control cgroup debugging only. Its |
| 869 | interfaces are not stable. |
Johannes Weiner | 6bf024e | 2015-12-17 17:19:57 -0500 | [diff] [blame] | 870 | |
| 871 | Say N. |
| 872 | |
Arnd Bergmann | 73b3514 | 2017-01-10 13:08:06 +0100 | [diff] [blame] | 873 | config SOCK_CGROUP_DATA |
| 874 | bool |
| 875 | default n |
| 876 | |
Li Zefan | 23964d2 | 2009-01-15 13:50:58 -0800 | [diff] [blame] | 877 | endif # CGROUPS |
KAMEZAWA Hiroyuki | c077719 | 2009-01-07 18:07:57 -0800 | [diff] [blame] | 878 | |
Cyrill Gorcunov | 067bce1 | 2012-01-12 17:20:49 -0800 | [diff] [blame] | 879 | config CHECKPOINT_RESTORE |
| 880 | bool "Checkpoint/restore support" if EXPERT |
Iago López Galeiras | 2e13ba5 | 2015-06-25 15:00:57 -0700 | [diff] [blame] | 881 | select PROC_CHILDREN |
Cyrill Gorcunov | 067bce1 | 2012-01-12 17:20:49 -0800 | [diff] [blame] | 882 | default n |
| 883 | help |
| 884 | Enables additional kernel features in a sake of checkpoint/restore. |
| 885 | In particular it adds auxiliary prctl codes to setup process text, |
| 886 | data and heap segment sizes, and a few additional /proc filesystem |
| 887 | entries. |
| 888 | |
| 889 | If unsure, say N here. |
| 890 | |
Daniel Lezcano | 8dd2a82 | 2010-10-27 15:34:38 -0700 | [diff] [blame] | 891 | menuconfig NAMESPACES |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 892 | bool "Namespaces support" if EXPERT |
Iulia Manda | 2813893 | 2015-04-15 16:16:41 -0700 | [diff] [blame] | 893 | depends on MULTIUSER |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 894 | default !EXPERT |
Pavel Emelyanov | c5289a6 | 2008-02-08 04:18:19 -0800 | [diff] [blame] | 895 | help |
| 896 | Provides the way to make tasks work with different objects using |
| 897 | the same id. For example same IPC id may refer to different objects |
| 898 | or same user id or pid may refer to different tasks when used in |
| 899 | different namespaces. |
| 900 | |
Daniel Lezcano | 8dd2a82 | 2010-10-27 15:34:38 -0700 | [diff] [blame] | 901 | if NAMESPACES |
| 902 | |
Pavel Emelyanov | 58bfdd6d | 2008-02-08 04:18:21 -0800 | [diff] [blame] | 903 | config UTS_NS |
| 904 | bool "UTS namespace" |
Daniel Lezcano | 17a6d44 | 2010-10-27 15:34:37 -0700 | [diff] [blame] | 905 | default y |
Pavel Emelyanov | 58bfdd6d | 2008-02-08 04:18:21 -0800 | [diff] [blame] | 906 | help |
| 907 | In this namespace tasks see different info provided with the |
| 908 | uname() system call |
| 909 | |
Pavel Emelyanov | ae5e1b2 | 2008-02-08 04:18:22 -0800 | [diff] [blame] | 910 | config IPC_NS |
| 911 | bool "IPC namespace" |
Daniel Lezcano | 8dd2a82 | 2010-10-27 15:34:38 -0700 | [diff] [blame] | 912 | depends on (SYSVIPC || POSIX_MQUEUE) |
Daniel Lezcano | 17a6d44 | 2010-10-27 15:34:37 -0700 | [diff] [blame] | 913 | default y |
Pavel Emelyanov | ae5e1b2 | 2008-02-08 04:18:22 -0800 | [diff] [blame] | 914 | help |
| 915 | In this namespace tasks work with IPC ids which correspond to |
Serge E. Hallyn | 614b84c | 2009-04-06 19:01:08 -0700 | [diff] [blame] | 916 | different IPC objects in different namespaces. |
Pavel Emelyanov | ae5e1b2 | 2008-02-08 04:18:22 -0800 | [diff] [blame] | 917 | |
Pavel Emelyanov | aee16ce | 2008-02-08 04:18:23 -0800 | [diff] [blame] | 918 | config USER_NS |
Kees Cook | 19c9239 | 2012-10-02 11:19:29 -0700 | [diff] [blame] | 919 | bool "User namespace" |
Eric W. Biederman | 5673a94 | 2011-11-17 10:23:55 -0800 | [diff] [blame] | 920 | default n |
Pavel Emelyanov | aee16ce | 2008-02-08 04:18:23 -0800 | [diff] [blame] | 921 | help |
| 922 | This allows containers, i.e. vservers, to use user namespaces |
| 923 | to provide different user info for different servers. |
Eric W. Biederman | e11f0ae | 2013-01-25 16:48:31 -0800 | [diff] [blame] | 924 | |
| 925 | When user namespaces are enabled in the kernel it is |
Johannes Weiner | d886f4e | 2016-01-20 15:02:47 -0800 | [diff] [blame] | 926 | recommended that the MEMCG option also be enabled and that |
| 927 | user-space use the memory control groups to limit the amount |
| 928 | of memory a memory unprivileged users can use. |
Eric W. Biederman | e11f0ae | 2013-01-25 16:48:31 -0800 | [diff] [blame] | 929 | |
Pavel Emelyanov | aee16ce | 2008-02-08 04:18:23 -0800 | [diff] [blame] | 930 | If unsure, say N. |
| 931 | |
Pavel Emelyanov | 74bd59b | 2008-02-08 04:18:24 -0800 | [diff] [blame] | 932 | config PID_NS |
Daniel Lezcano | 9bd38c2 | 2010-10-27 15:34:37 -0700 | [diff] [blame] | 933 | bool "PID Namespaces" |
Daniel Lezcano | 17a6d44 | 2010-10-27 15:34:37 -0700 | [diff] [blame] | 934 | default y |
Pavel Emelyanov | 74bd59b | 2008-02-08 04:18:24 -0800 | [diff] [blame] | 935 | help |
Heikki Orsila | 12d2b8f | 2008-07-06 15:48:02 +0300 | [diff] [blame] | 936 | Support process id namespaces. This allows having multiple |
Matt LaPlante | 692105b | 2009-01-26 11:12:25 +0100 | [diff] [blame] | 937 | processes with the same pid as long as they are in different |
Pavel Emelyanov | 74bd59b | 2008-02-08 04:18:24 -0800 | [diff] [blame] | 938 | pid namespaces. This is a building block of containers. |
| 939 | |
Matt Helsley | d6eb633 | 2009-01-26 12:25:55 -0800 | [diff] [blame] | 940 | config NET_NS |
| 941 | bool "Network namespace" |
Daniel Lezcano | 8dd2a82 | 2010-10-27 15:34:38 -0700 | [diff] [blame] | 942 | depends on NET |
Daniel Lezcano | 17a6d44 | 2010-10-27 15:34:37 -0700 | [diff] [blame] | 943 | default y |
Matt Helsley | d6eb633 | 2009-01-26 12:25:55 -0800 | [diff] [blame] | 944 | help |
| 945 | Allow user space to create what appear to be multiple instances |
| 946 | of the network stack. |
| 947 | |
Daniel Lezcano | 8dd2a82 | 2010-10-27 15:34:38 -0700 | [diff] [blame] | 948 | endif # NAMESPACES |
| 949 | |
Mike Galbraith | 5091faa | 2010-11-30 14:18:03 +0100 | [diff] [blame] | 950 | config SCHED_AUTOGROUP |
| 951 | bool "Automatic process group scheduling" |
Mike Galbraith | 5091faa | 2010-11-30 14:18:03 +0100 | [diff] [blame] | 952 | select CGROUPS |
| 953 | select CGROUP_SCHED |
| 954 | select FAIR_GROUP_SCHED |
| 955 | help |
| 956 | This option optimizes the scheduler for common desktop workloads by |
| 957 | automatically creating and populating task groups. This separation |
| 958 | of workloads isolates aggressive CPU burners (like build jobs) from |
| 959 | desktop applications. Task group autogeneration is currently based |
| 960 | upon task session. |
| 961 | |
Daniel Lezcano | 7af37be | 2010-10-27 15:34:41 -0700 | [diff] [blame] | 962 | config SYSFS_DEPRECATED |
Ferenc Wagner | 5d6a4ea | 2011-01-10 19:04:22 +0100 | [diff] [blame] | 963 | bool "Enable deprecated sysfs features to support old userspace tools" |
Daniel Lezcano | 7af37be | 2010-10-27 15:34:41 -0700 | [diff] [blame] | 964 | depends on SYSFS |
| 965 | default n |
| 966 | help |
| 967 | This option adds code that switches the layout of the "block" class |
| 968 | devices, to not show up in /sys/class/block/, but only in |
| 969 | /sys/block/. |
| 970 | |
| 971 | This switch is only active when the sysfs.deprecated=1 boot option is |
| 972 | passed or the SYSFS_DEPRECATED_V2 option is set. |
| 973 | |
| 974 | This option allows new kernels to run on old distributions and tools, |
| 975 | which might get confused by /sys/class/block/. Since 2007/2008 all |
| 976 | major distributions and tools handle this just fine. |
| 977 | |
| 978 | Recent distributions and userspace tools after 2009/2010 depend on |
| 979 | the existence of /sys/class/block/, and will not work with this |
| 980 | option enabled. |
| 981 | |
| 982 | Only if you are using a new kernel on an old distribution, you might |
| 983 | need to say Y here. |
| 984 | |
| 985 | config SYSFS_DEPRECATED_V2 |
Ferenc Wagner | 5d6a4ea | 2011-01-10 19:04:22 +0100 | [diff] [blame] | 986 | bool "Enable deprecated sysfs features by default" |
Daniel Lezcano | 7af37be | 2010-10-27 15:34:41 -0700 | [diff] [blame] | 987 | default n |
| 988 | depends on SYSFS |
| 989 | depends on SYSFS_DEPRECATED |
| 990 | help |
| 991 | Enable deprecated sysfs by default. |
| 992 | |
| 993 | See the CONFIG_SYSFS_DEPRECATED option for more details about this |
| 994 | option. |
| 995 | |
| 996 | Only if you are using a new kernel on an old distribution, you might |
| 997 | need to say Y here. Even then, odds are you would not need it |
| 998 | enabled, you can always pass the boot option if absolutely necessary. |
| 999 | |
| 1000 | config RELAY |
| 1001 | bool "Kernel->user space relay support (formerly relayfs)" |
Peter Zijlstra | 26b5679 | 2016-10-11 13:54:33 -0700 | [diff] [blame] | 1002 | select IRQ_WORK |
Daniel Lezcano | 7af37be | 2010-10-27 15:34:41 -0700 | [diff] [blame] | 1003 | help |
| 1004 | This option enables support for relay interface support in |
| 1005 | certain file systems (such as debugfs). |
| 1006 | It is designed to provide an efficient mechanism for tools and |
| 1007 | facilities to relay large amounts of data from kernel space to |
| 1008 | user space. |
| 1009 | |
| 1010 | If unsure, say N. |
| 1011 | |
Dimitri Gorokhovik | f991633 | 2007-03-06 01:42:17 -0800 | [diff] [blame] | 1012 | config BLK_DEV_INITRD |
| 1013 | bool "Initial RAM filesystem and RAM disk (initramfs/initrd) support" |
| 1014 | depends on BROKEN || !FRV |
| 1015 | help |
| 1016 | The initial RAM filesystem is a ramfs which is loaded by the |
| 1017 | boot loader (loadlin or lilo) and that is mounted as root |
| 1018 | before the normal boot procedure. It is typically used to |
| 1019 | load modules needed to mount the "real" root file system, |
Mauro Carvalho Chehab | 8c27ceff3 | 2016-10-18 10:12:27 -0200 | [diff] [blame] | 1020 | etc. See <file:Documentation/admin-guide/initrd.rst> for details. |
Dimitri Gorokhovik | f991633 | 2007-03-06 01:42:17 -0800 | [diff] [blame] | 1021 | |
| 1022 | If RAM disk support (BLK_DEV_RAM) is also included, this |
| 1023 | also enables initial RAM disk (initrd) support and adds |
| 1024 | 15 Kbytes (more on some other architectures) to the kernel size. |
| 1025 | |
| 1026 | If unsure say Y. |
| 1027 | |
Jean-Paul Saman | c33df4e | 2007-02-10 01:44:43 -0800 | [diff] [blame] | 1028 | if BLK_DEV_INITRD |
| 1029 | |
Sam Ravnborg | dbec486 | 2005-08-10 20:44:50 +0200 | [diff] [blame] | 1030 | source "usr/Kconfig" |
| 1031 | |
Jean-Paul Saman | c33df4e | 2007-02-10 01:44:43 -0800 | [diff] [blame] | 1032 | endif |
| 1033 | |
Arnd Bergmann | 877417e | 2016-04-25 17:35:27 +0200 | [diff] [blame] | 1034 | choice |
| 1035 | prompt "Compiler optimization level" |
| 1036 | default CONFIG_CC_OPTIMIZE_FOR_PERFORMANCE |
| 1037 | |
| 1038 | config CC_OPTIMIZE_FOR_PERFORMANCE |
| 1039 | bool "Optimize for performance" |
| 1040 | help |
| 1041 | This is the default optimization level for the kernel, building |
| 1042 | with the "-O2" compiler flag for best performance and most |
| 1043 | helpful compile-time warnings. |
| 1044 | |
Linus Torvalds | c45b4f1 | 2005-12-14 18:52:21 -0800 | [diff] [blame] | 1045 | config CC_OPTIMIZE_FOR_SIZE |
Ingo Molnar | 96fffeb | 2008-04-28 01:39:43 +0200 | [diff] [blame] | 1046 | bool "Optimize for size" |
Linus Torvalds | c45b4f1 | 2005-12-14 18:52:21 -0800 | [diff] [blame] | 1047 | help |
Masahiro Yamada | 31a4af7 | 2014-08-05 14:43:07 +0900 | [diff] [blame] | 1048 | Enabling this option will pass "-Os" instead of "-O2" to |
| 1049 | your compiler resulting in a smaller kernel. |
Linus Torvalds | c45b4f1 | 2005-12-14 18:52:21 -0800 | [diff] [blame] | 1050 | |
Kirill Smelkov | 3a55fb0 | 2012-11-02 15:41:01 +0400 | [diff] [blame] | 1051 | If unsure, say N. |
Linus Torvalds | c45b4f1 | 2005-12-14 18:52:21 -0800 | [diff] [blame] | 1052 | |
Arnd Bergmann | 877417e | 2016-04-25 17:35:27 +0200 | [diff] [blame] | 1053 | endchoice |
| 1054 | |
Randy Dunlap | 0847062 | 2006-09-30 23:28:13 -0700 | [diff] [blame] | 1055 | config SYSCTL |
| 1056 | bool |
| 1057 | |
Randy Dunlap | b943c46 | 2009-03-10 12:55:46 -0700 | [diff] [blame] | 1058 | config ANON_INODES |
| 1059 | bool |
| 1060 | |
Mike Frysinger | 657a520 | 2013-04-30 15:28:45 -0700 | [diff] [blame] | 1061 | config HAVE_UID16 |
| 1062 | bool |
| 1063 | |
| 1064 | config SYSCTL_EXCEPTION_TRACE |
| 1065 | bool |
| 1066 | help |
| 1067 | Enable support for /proc/sys/debug/exception-trace. |
| 1068 | |
| 1069 | config SYSCTL_ARCH_UNALIGN_NO_WARN |
| 1070 | bool |
| 1071 | help |
| 1072 | Enable support for /proc/sys/kernel/ignore-unaligned-usertrap |
| 1073 | Allows arch to define/use @no_unaligned_warning to possibly warn |
| 1074 | about unaligned access emulation going on under the hood. |
| 1075 | |
| 1076 | config SYSCTL_ARCH_UNALIGN_ALLOW |
| 1077 | bool |
| 1078 | help |
| 1079 | Enable support for /proc/sys/kernel/unaligned-trap |
| 1080 | Allows arches to define/use @unaligned_enabled to runtime toggle |
| 1081 | the unaligned access emulation. |
| 1082 | see arch/parisc/kernel/unaligned.c for reference |
| 1083 | |
Mike Frysinger | 657a520 | 2013-04-30 15:28:45 -0700 | [diff] [blame] | 1084 | config HAVE_PCSPKR_PLATFORM |
| 1085 | bool |
| 1086 | |
Alexei Starovoitov | f89b775 | 2014-10-23 18:41:08 -0700 | [diff] [blame] | 1087 | # interpreter that classic socket filters depend on |
| 1088 | config BPF |
| 1089 | bool |
| 1090 | |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1091 | menuconfig EXPERT |
| 1092 | bool "Configure standard kernel features (expert users)" |
Josh Triplett | f505c55 | 2011-06-05 18:23:58 -0700 | [diff] [blame] | 1093 | # Unhide debug options, to make the on-by-default options visible |
| 1094 | select DEBUG_KERNEL |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1095 | help |
| 1096 | This option allows certain base kernel options and settings |
| 1097 | to be disabled or tweaked. This is for specialized |
| 1098 | environments which can tolerate a "non-standard" kernel. |
| 1099 | Only use this if you really know what you are doing. |
| 1100 | |
Chuck Ebbert | ae81f9e | 2006-09-16 12:15:53 -0700 | [diff] [blame] | 1101 | config UID16 |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1102 | bool "Enable 16-bit UID system calls" if EXPERT |
Iulia Manda | 2813893 | 2015-04-15 16:16:41 -0700 | [diff] [blame] | 1103 | depends on HAVE_UID16 && MULTIUSER |
Chuck Ebbert | ae81f9e | 2006-09-16 12:15:53 -0700 | [diff] [blame] | 1104 | default y |
| 1105 | help |
| 1106 | This enables the legacy 16-bit UID syscall wrappers. |
| 1107 | |
Iulia Manda | 2813893 | 2015-04-15 16:16:41 -0700 | [diff] [blame] | 1108 | config MULTIUSER |
| 1109 | bool "Multiple users, groups and capabilities support" if EXPERT |
| 1110 | default y |
| 1111 | help |
| 1112 | This option enables support for non-root users, groups and |
| 1113 | capabilities. |
| 1114 | |
| 1115 | If you say N here, all processes will run with UID 0, GID 0, and all |
| 1116 | possible capabilities. Saying N here also compiles out support for |
| 1117 | system calls related to UIDs, GIDs, and capabilities, such as setuid, |
| 1118 | setgid, and capset. |
| 1119 | |
| 1120 | If unsure, say Y here. |
| 1121 | |
Fabian Frederick | f618776 | 2014-06-04 16:11:12 -0700 | [diff] [blame] | 1122 | config SGETMASK_SYSCALL |
| 1123 | bool "sgetmask/ssetmask syscalls support" if EXPERT |
| 1124 | def_bool PARISC || MN10300 || BLACKFIN || M68K || PPC || MIPS || X86 || SPARC || CRIS || MICROBLAZE || SUPERH |
| 1125 | ---help--- |
| 1126 | sys_sgetmask and sys_ssetmask are obsolete system calls |
| 1127 | no longer supported in libc but still enabled by default in some |
| 1128 | architectures. |
| 1129 | |
| 1130 | If unsure, leave the default option here. |
| 1131 | |
Fabian Frederick | 6af9f7b | 2014-04-03 14:48:25 -0700 | [diff] [blame] | 1132 | config SYSFS_SYSCALL |
| 1133 | bool "Sysfs syscall support" if EXPERT |
| 1134 | default y |
| 1135 | ---help--- |
| 1136 | sys_sysfs is an obsolete system call no longer supported in libc. |
| 1137 | Note that disabling this option is more secure but might break |
| 1138 | compatibility with some systems. |
| 1139 | |
| 1140 | If unsure say Y here. |
| 1141 | |
Eric W. Biederman | b89a817 | 2006-09-27 01:51:04 -0700 | [diff] [blame] | 1142 | config SYSCTL_SYSCALL |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1143 | bool "Sysctl syscall support" if EXPERT |
Eric W. Biederman | 26a7034 | 2009-11-05 05:26:41 -0800 | [diff] [blame] | 1144 | depends on PROC_SYSCTL |
WANG Cong | c736de6 | 2011-11-02 13:39:25 -0700 | [diff] [blame] | 1145 | default n |
Eric W. Biederman | b89a817 | 2006-09-27 01:51:04 -0700 | [diff] [blame] | 1146 | select SYSCTL |
| 1147 | ---help--- |
Eric W. Biederman | 13bb7e3 | 2006-11-08 17:44:51 -0800 | [diff] [blame] | 1148 | sys_sysctl uses binary paths that have been found challenging |
| 1149 | to properly maintain and use. The interface in /proc/sys |
| 1150 | using paths with ascii names is now the primary path to this |
| 1151 | information. |
Eric W. Biederman | b89a817 | 2006-09-27 01:51:04 -0700 | [diff] [blame] | 1152 | |
Eric W. Biederman | 13bb7e3 | 2006-11-08 17:44:51 -0800 | [diff] [blame] | 1153 | Almost nothing using the binary sysctl interface so if you are |
| 1154 | trying to save some space it is probably safe to disable this, |
| 1155 | making your kernel marginally smaller. |
Eric W. Biederman | b89a817 | 2006-09-27 01:51:04 -0700 | [diff] [blame] | 1156 | |
WANG Cong | c736de6 | 2011-11-02 13:39:25 -0700 | [diff] [blame] | 1157 | If unsure say N here. |
Chuck Ebbert | ae81f9e | 2006-09-16 12:15:53 -0700 | [diff] [blame] | 1158 | |
Nicolas Pitre | baa73d9 | 2016-11-11 00:10:10 -0500 | [diff] [blame] | 1159 | config POSIX_TIMERS |
| 1160 | bool "Posix Clocks & timers" if EXPERT |
| 1161 | default y |
| 1162 | help |
| 1163 | This includes native support for POSIX timers to the kernel. |
| 1164 | Some embedded systems have no use for them and therefore they |
| 1165 | can be configured out to reduce the size of the kernel image. |
| 1166 | |
| 1167 | When this option is disabled, the following syscalls won't be |
| 1168 | available: timer_create, timer_gettime: timer_getoverrun, |
| 1169 | timer_settime, timer_delete, clock_adjtime, getitimer, |
| 1170 | setitimer, alarm. Furthermore, the clock_settime, clock_gettime, |
| 1171 | clock_getres and clock_nanosleep syscalls will be limited to |
| 1172 | CLOCK_REALTIME, CLOCK_MONOTONIC and CLOCK_BOOTTIME only. |
| 1173 | |
| 1174 | If unsure say y. |
| 1175 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1176 | config KALLSYMS |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1177 | bool "Load all symbols for debugging/ksymoops" if EXPERT |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1178 | default y |
| 1179 | help |
| 1180 | Say Y here to let the kernel print out symbolic crash information and |
| 1181 | symbolic stack backtraces. This increases the size of the kernel |
| 1182 | somewhat, as all symbols have to be loaded into the kernel image. |
| 1183 | |
| 1184 | config KALLSYMS_ALL |
| 1185 | bool "Include all symbols in kallsyms" |
| 1186 | depends on DEBUG_KERNEL && KALLSYMS |
| 1187 | help |
Artem Bityutskiy | 71a83ec | 2011-04-05 13:24:57 +0300 | [diff] [blame] | 1188 | Normally kallsyms only contains the symbols of functions for nicer |
| 1189 | OOPS messages and backtraces (i.e., symbols from the text and inittext |
| 1190 | sections). This is sufficient for most cases. And only in very rare |
| 1191 | cases (e.g., when a debugger is used) all symbols are required (e.g., |
| 1192 | names of variables from the data sections, etc). |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1193 | |
Artem Bityutskiy | 71a83ec | 2011-04-05 13:24:57 +0300 | [diff] [blame] | 1194 | This option makes sure that all symbols are loaded into the kernel |
| 1195 | image (i.e., symbols from all sections) in cost of increased kernel |
| 1196 | size (depending on the kernel configuration, it may be 300KiB or |
| 1197 | something like this). |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1198 | |
Artem Bityutskiy | 71a83ec | 2011-04-05 13:24:57 +0300 | [diff] [blame] | 1199 | Say N unless you really need all symbols. |
Matt Mackall | d59745c | 2005-05-01 08:59:02 -0700 | [diff] [blame] | 1200 | |
Ard Biesheuvel | 4d5d566 | 2016-03-15 14:58:12 -0700 | [diff] [blame] | 1201 | config KALLSYMS_ABSOLUTE_PERCPU |
| 1202 | bool |
Randy Dunlap | 076501f | 2016-07-06 16:06:53 -0700 | [diff] [blame] | 1203 | depends on KALLSYMS |
Ard Biesheuvel | 4d5d566 | 2016-03-15 14:58:12 -0700 | [diff] [blame] | 1204 | default X86_64 && SMP |
| 1205 | |
Ard Biesheuvel | 2213e9a | 2016-03-15 14:58:19 -0700 | [diff] [blame] | 1206 | config KALLSYMS_BASE_RELATIVE |
| 1207 | bool |
| 1208 | depends on KALLSYMS |
| 1209 | default !IA64 && !(TILE && 64BIT) |
| 1210 | help |
| 1211 | Instead of emitting them as absolute values in the native word size, |
| 1212 | emit the symbol references in the kallsyms table as 32-bit entries, |
| 1213 | each containing a relative value in the range [base, base + U32_MAX] |
| 1214 | or, when KALLSYMS_ABSOLUTE_PERCPU is in effect, each containing either |
| 1215 | an absolute value in the range [0, S32_MAX] or a relative value in the |
| 1216 | range [base, base + S32_MAX], where base is the lowest relative symbol |
| 1217 | address encountered in the image. |
| 1218 | |
| 1219 | On 64-bit builds, this reduces the size of the address table by 50%, |
| 1220 | but more importantly, it results in entries whose values are build |
| 1221 | time constants, and no relocation pass is required at runtime to fix |
| 1222 | up the entries based on the runtime load address of the kernel. |
| 1223 | |
Matt Mackall | d59745c | 2005-05-01 08:59:02 -0700 | [diff] [blame] | 1224 | config PRINTK |
| 1225 | default y |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1226 | bool "Enable support for printk" if EXPERT |
Frederic Weisbecker | 74876a9 | 2012-10-12 18:00:23 +0200 | [diff] [blame] | 1227 | select IRQ_WORK |
Matt Mackall | d59745c | 2005-05-01 08:59:02 -0700 | [diff] [blame] | 1228 | help |
| 1229 | This option enables normal printk support. Removing it |
| 1230 | eliminates most of the message strings from the kernel image |
| 1231 | and makes the kernel more or less silent. As this makes it |
| 1232 | very difficult to diagnose system problems, saying N here is |
| 1233 | strongly discouraged. |
| 1234 | |
Petr Mladek | 42a0bb3 | 2016-05-20 17:00:33 -0700 | [diff] [blame] | 1235 | config PRINTK_NMI |
| 1236 | def_bool y |
| 1237 | depends on PRINTK |
| 1238 | depends on HAVE_NMI |
| 1239 | |
Matt Mackall | c8538a7 | 2005-05-01 08:59:01 -0700 | [diff] [blame] | 1240 | config BUG |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1241 | bool "BUG() support" if EXPERT |
Matt Mackall | c8538a7 | 2005-05-01 08:59:01 -0700 | [diff] [blame] | 1242 | default y |
| 1243 | help |
| 1244 | Disabling this option eliminates support for BUG and WARN, reducing |
| 1245 | the size of your kernel image and potentially quietly ignoring |
| 1246 | numerous fatal conditions. You should only consider disabling this |
| 1247 | option for embedded systems with no facilities for reporting errors. |
| 1248 | Just say Y. |
| 1249 | |
Matt Mackall | 708e9a7 | 2006-01-08 01:05:25 -0800 | [diff] [blame] | 1250 | config ELF_CORE |
Alex Kelly | 046d662 | 2012-10-04 17:15:23 -0700 | [diff] [blame] | 1251 | depends on COREDUMP |
Matt Mackall | 708e9a7 | 2006-01-08 01:05:25 -0800 | [diff] [blame] | 1252 | default y |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1253 | bool "Enable ELF core dumps" if EXPERT |
Matt Mackall | 708e9a7 | 2006-01-08 01:05:25 -0800 | [diff] [blame] | 1254 | help |
| 1255 | Enable support for generating core dumps. Disabling saves about 4k. |
| 1256 | |
Ralf Baechle | 8761f1a | 2011-06-01 19:05:09 +0100 | [diff] [blame] | 1257 | |
Stas Sergeev | e5e1d3c | 2008-05-07 12:39:56 +0200 | [diff] [blame] | 1258 | config PCSPKR_PLATFORM |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1259 | bool "Enable PC-Speaker support" if EXPERT |
Ralf Baechle | 8761f1a | 2011-06-01 19:05:09 +0100 | [diff] [blame] | 1260 | depends on HAVE_PCSPKR_PLATFORM |
Ralf Baechle | 15f304b | 2011-06-01 19:04:59 +0100 | [diff] [blame] | 1261 | select I8253_LOCK |
Stas Sergeev | e5e1d3c | 2008-05-07 12:39:56 +0200 | [diff] [blame] | 1262 | default y |
| 1263 | help |
| 1264 | This option allows to disable the internal PC-Speaker |
| 1265 | support, saving some memory. |
| 1266 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1267 | config BASE_FULL |
| 1268 | default y |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1269 | bool "Enable full-sized data structures for core" if EXPERT |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1270 | help |
| 1271 | Disabling this option reduces the size of miscellaneous core |
| 1272 | kernel data structures. This saves memory on small machines, |
| 1273 | but may reduce performance. |
| 1274 | |
| 1275 | config FUTEX |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1276 | bool "Enable futex support" if EXPERT |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1277 | default y |
Nicolas Pitre | bc2eecd | 2017-08-01 00:31:32 -0400 | [diff] [blame] | 1278 | imply RT_MUTEXES |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1279 | help |
| 1280 | Disabling this option will cause the kernel to be built without |
| 1281 | support for "fast userspace mutexes". The resulting kernel may not |
| 1282 | run glibc-based applications correctly. |
| 1283 | |
Nicolas Pitre | bc2eecd | 2017-08-01 00:31:32 -0400 | [diff] [blame] | 1284 | config FUTEX_PI |
| 1285 | bool |
| 1286 | depends on FUTEX && RT_MUTEXES |
| 1287 | default y |
| 1288 | |
Heiko Carstens | 03b8c7b | 2014-03-02 13:09:47 +0100 | [diff] [blame] | 1289 | config HAVE_FUTEX_CMPXCHG |
| 1290 | bool |
Josh Triplett | 62b4d20 | 2014-10-03 16:19:24 -0700 | [diff] [blame] | 1291 | depends on FUTEX |
Heiko Carstens | 03b8c7b | 2014-03-02 13:09:47 +0100 | [diff] [blame] | 1292 | help |
| 1293 | Architectures should select this if futex_atomic_cmpxchg_inatomic() |
| 1294 | is implemented and always working. This removes a couple of runtime |
| 1295 | checks. |
| 1296 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1297 | config EPOLL |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1298 | bool "Enable eventpoll support" if EXPERT |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1299 | default y |
Adrian Bunk | 448e3ce | 2007-07-31 00:39:10 -0700 | [diff] [blame] | 1300 | select ANON_INODES |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1301 | help |
| 1302 | Disabling this option will cause the kernel to be built without |
| 1303 | support for epoll family of system calls. |
| 1304 | |
Davide Libenzi | fba2afa | 2007-05-10 22:23:13 -0700 | [diff] [blame] | 1305 | config SIGNALFD |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1306 | bool "Enable signalfd() system call" if EXPERT |
Adrian Bunk | 448e3ce | 2007-07-31 00:39:10 -0700 | [diff] [blame] | 1307 | select ANON_INODES |
Davide Libenzi | fba2afa | 2007-05-10 22:23:13 -0700 | [diff] [blame] | 1308 | default y |
| 1309 | help |
| 1310 | Enable the signalfd() system call that allows to receive signals |
| 1311 | on a file descriptor. |
| 1312 | |
| 1313 | If unsure, say Y. |
| 1314 | |
Davide Libenzi | b215e28 | 2007-05-10 22:23:16 -0700 | [diff] [blame] | 1315 | config TIMERFD |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1316 | bool "Enable timerfd() system call" if EXPERT |
Adrian Bunk | 448e3ce | 2007-07-31 00:39:10 -0700 | [diff] [blame] | 1317 | select ANON_INODES |
Davide Libenzi | b215e28 | 2007-05-10 22:23:16 -0700 | [diff] [blame] | 1318 | default y |
| 1319 | help |
| 1320 | Enable the timerfd() system call that allows to receive timer |
| 1321 | events on a file descriptor. |
| 1322 | |
| 1323 | If unsure, say Y. |
| 1324 | |
Davide Libenzi | e1ad746 | 2007-05-10 22:23:19 -0700 | [diff] [blame] | 1325 | config EVENTFD |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1326 | bool "Enable eventfd() system call" if EXPERT |
Adrian Bunk | 448e3ce | 2007-07-31 00:39:10 -0700 | [diff] [blame] | 1327 | select ANON_INODES |
Davide Libenzi | e1ad746 | 2007-05-10 22:23:19 -0700 | [diff] [blame] | 1328 | default y |
| 1329 | help |
| 1330 | Enable the eventfd() system call that allows to receive both |
| 1331 | kernel notification (ie. KAIO) or userspace notifications. |
| 1332 | |
| 1333 | If unsure, say Y. |
| 1334 | |
Alexei Starovoitov | f89b775 | 2014-10-23 18:41:08 -0700 | [diff] [blame] | 1335 | # syscall, maps, verifier |
| 1336 | config BPF_SYSCALL |
Ingo Molnar | e1abf2c | 2015-04-02 15:51:39 +0200 | [diff] [blame] | 1337 | bool "Enable bpf() system call" |
Alexei Starovoitov | f89b775 | 2014-10-23 18:41:08 -0700 | [diff] [blame] | 1338 | select ANON_INODES |
| 1339 | select BPF |
| 1340 | default n |
| 1341 | help |
| 1342 | Enable the bpf() system call that allows to manipulate eBPF |
| 1343 | programs and maps via file descriptors. |
| 1344 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1345 | config SHMEM |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1346 | bool "Use full shmem filesystem" if EXPERT |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1347 | default y |
| 1348 | depends on MMU |
| 1349 | help |
| 1350 | The shmem is an internal filesystem used to manage shared memory. |
| 1351 | It is backed by swap and manages resource limits. It is also exported |
| 1352 | to userspace as tmpfs if TMPFS is enabled. Disabling this |
| 1353 | option replaces shmem and tmpfs with the much simpler ramfs code, |
| 1354 | which may be appropriate on small systems without swap. |
| 1355 | |
Thomas Petazzoni | ebf3f09 | 2008-10-15 22:05:12 -0700 | [diff] [blame] | 1356 | config AIO |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1357 | bool "Enable AIO support" if EXPERT |
Thomas Petazzoni | ebf3f09 | 2008-10-15 22:05:12 -0700 | [diff] [blame] | 1358 | default y |
| 1359 | help |
| 1360 | This option enables POSIX asynchronous I/O which may by used |
Mike Frysinger | 657a520 | 2013-04-30 15:28:45 -0700 | [diff] [blame] | 1361 | by some high performance threaded applications. Disabling |
| 1362 | this option saves about 7k. |
| 1363 | |
Josh Triplett | d3ac21c | 2014-08-17 19:41:09 -0500 | [diff] [blame] | 1364 | config ADVISE_SYSCALLS |
| 1365 | bool "Enable madvise/fadvise syscalls" if EXPERT |
| 1366 | default y |
| 1367 | help |
| 1368 | This option enables the madvise and fadvise syscalls, used by |
| 1369 | applications to advise the kernel about their future memory or file |
| 1370 | usage, improving performance. If building an embedded system where no |
| 1371 | applications use these syscalls, you can disable this option to save |
| 1372 | space. |
| 1373 | |
Andrea Arcangeli | a14c151 | 2015-09-04 15:46:54 -0700 | [diff] [blame] | 1374 | config USERFAULTFD |
| 1375 | bool "Enable userfaultfd() system call" |
| 1376 | select ANON_INODES |
Andrea Arcangeli | a14c151 | 2015-09-04 15:46:54 -0700 | [diff] [blame] | 1377 | depends on MMU |
| 1378 | help |
| 1379 | Enable the userfaultfd() system call that allows to intercept and |
| 1380 | handle page faults in userland. |
| 1381 | |
Mike Frysinger | 657a520 | 2013-04-30 15:28:45 -0700 | [diff] [blame] | 1382 | config PCI_QUIRKS |
| 1383 | default y |
| 1384 | bool "Enable PCI quirk workarounds" if EXPERT |
| 1385 | depends on PCI |
| 1386 | help |
| 1387 | This enables workarounds for various PCI chipset |
| 1388 | bugs/quirks. Disable this only if your target machine is |
| 1389 | unaffected by PCI quirks. |
Thomas Petazzoni | ebf3f09 | 2008-10-15 22:05:12 -0700 | [diff] [blame] | 1390 | |
Mathieu Desnoyers | 5b25b13 | 2015-09-11 13:07:39 -0700 | [diff] [blame] | 1391 | config MEMBARRIER |
| 1392 | bool "Enable membarrier() system call" if EXPERT |
| 1393 | default y |
| 1394 | help |
| 1395 | Enable the membarrier() system call that allows issuing memory |
| 1396 | barriers across all running threads, which can be used to distribute |
| 1397 | the cost of user-space memory barriers asymmetrically by transforming |
| 1398 | pairs of memory barriers into pairs consisting of membarrier() and a |
| 1399 | compiler barrier. |
| 1400 | |
| 1401 | If unsure, say Y. |
| 1402 | |
Randy Dunlap | 6befe5f | 2011-04-26 12:33:21 -0700 | [diff] [blame] | 1403 | config EMBEDDED |
| 1404 | bool "Embedded system" |
Josh Triplett | 5d2acfc | 2014-04-07 15:39:09 -0700 | [diff] [blame] | 1405 | option allnoconfig_y |
Randy Dunlap | 6befe5f | 2011-04-26 12:33:21 -0700 | [diff] [blame] | 1406 | select EXPERT |
| 1407 | help |
| 1408 | This option should be enabled if compiling the kernel for |
| 1409 | an embedded system so certain expert options are available |
| 1410 | for configuration. |
| 1411 | |
Ingo Molnar | cdd6c48 | 2009-09-21 12:02:48 +0200 | [diff] [blame] | 1412 | config HAVE_PERF_EVENTS |
Thomas Gleixner | 0793a61 | 2008-12-04 20:12:29 +0100 | [diff] [blame] | 1413 | bool |
Mike Frysinger | 018df72 | 2009-06-12 13:17:43 -0400 | [diff] [blame] | 1414 | help |
| 1415 | See tools/perf/design.txt for details. |
Thomas Gleixner | 0793a61 | 2008-12-04 20:12:29 +0100 | [diff] [blame] | 1416 | |
Peter Zijlstra | 906010b | 2009-09-21 16:08:49 +0200 | [diff] [blame] | 1417 | config PERF_USE_VMALLOC |
| 1418 | bool |
| 1419 | help |
| 1420 | See tools/perf/design.txt for details |
| 1421 | |
William Breathitt Gray | ad90a3d | 2017-01-10 13:50:54 -0500 | [diff] [blame] | 1422 | config PC104 |
| 1423 | bool "PC/104 support" |
| 1424 | help |
| 1425 | Expose PC/104 form factor device drivers and options available for |
| 1426 | selection and configuration. Enable this option if your target |
| 1427 | machine has a PC/104 bus. |
| 1428 | |
Ingo Molnar | 57c0c15 | 2009-09-21 12:20:38 +0200 | [diff] [blame] | 1429 | menu "Kernel Performance Events And Counters" |
Thomas Gleixner | 0793a61 | 2008-12-04 20:12:29 +0100 | [diff] [blame] | 1430 | |
Ingo Molnar | cdd6c48 | 2009-09-21 12:02:48 +0200 | [diff] [blame] | 1431 | config PERF_EVENTS |
Ingo Molnar | 57c0c15 | 2009-09-21 12:20:38 +0200 | [diff] [blame] | 1432 | bool "Kernel performance events and counters" |
Robert Richter | 392d65a | 2012-04-05 18:24:44 +0200 | [diff] [blame] | 1433 | default y if PROFILING |
Ingo Molnar | cdd6c48 | 2009-09-21 12:02:48 +0200 | [diff] [blame] | 1434 | depends on HAVE_PERF_EVENTS |
Ingo Molnar | 4c59e46 | 2008-12-08 19:38:33 +0100 | [diff] [blame] | 1435 | select ANON_INODES |
Peter Zijlstra | e360adb | 2010-10-14 14:01:34 +0800 | [diff] [blame] | 1436 | select IRQ_WORK |
Pranith Kumar | 83fe27e | 2014-12-05 11:24:45 -0500 | [diff] [blame] | 1437 | select SRCU |
Thomas Gleixner | 0793a61 | 2008-12-04 20:12:29 +0100 | [diff] [blame] | 1438 | help |
Ingo Molnar | 57c0c15 | 2009-09-21 12:20:38 +0200 | [diff] [blame] | 1439 | Enable kernel support for various performance events provided |
| 1440 | by software and hardware. |
Thomas Gleixner | 0793a61 | 2008-12-04 20:12:29 +0100 | [diff] [blame] | 1441 | |
Thadeu Lima de Souza Cascardo | dd77038 | 2009-10-30 19:32:25 -0200 | [diff] [blame] | 1442 | Software events are supported either built-in or via the |
Ingo Molnar | 57c0c15 | 2009-09-21 12:20:38 +0200 | [diff] [blame] | 1443 | use of generic tracepoints. |
| 1444 | |
| 1445 | Most modern CPUs support performance events via performance |
| 1446 | counter registers. These registers count the number of certain |
Thomas Gleixner | 0793a61 | 2008-12-04 20:12:29 +0100 | [diff] [blame] | 1447 | types of hw events: such as instructions executed, cachemisses |
| 1448 | suffered, or branches mis-predicted - without slowing down the |
| 1449 | kernel or applications. These registers can also trigger interrupts |
| 1450 | when a threshold number of events have passed - and can thus be |
| 1451 | used to profile the code that runs on that CPU. |
| 1452 | |
Ingo Molnar | 57c0c15 | 2009-09-21 12:20:38 +0200 | [diff] [blame] | 1453 | The Linux Performance Event subsystem provides an abstraction of |
Thadeu Lima de Souza Cascardo | dd77038 | 2009-10-30 19:32:25 -0200 | [diff] [blame] | 1454 | these software and hardware event capabilities, available via a |
Ingo Molnar | 57c0c15 | 2009-09-21 12:20:38 +0200 | [diff] [blame] | 1455 | system call and used by the "perf" utility in tools/perf/. It |
Thomas Gleixner | 0793a61 | 2008-12-04 20:12:29 +0100 | [diff] [blame] | 1456 | provides per task and per CPU counters, and it provides event |
| 1457 | capabilities on top of those. |
| 1458 | |
| 1459 | Say Y if unsure. |
| 1460 | |
Peter Zijlstra | 906010b | 2009-09-21 16:08:49 +0200 | [diff] [blame] | 1461 | config DEBUG_PERF_USE_VMALLOC |
| 1462 | default n |
| 1463 | bool "Debug: use vmalloc to back perf mmap() buffers" |
Michael Ellerman | cb30711 | 2015-05-04 16:26:39 +1000 | [diff] [blame] | 1464 | depends on PERF_EVENTS && DEBUG_KERNEL && !PPC |
Peter Zijlstra | 906010b | 2009-09-21 16:08:49 +0200 | [diff] [blame] | 1465 | select PERF_USE_VMALLOC |
| 1466 | help |
| 1467 | Use vmalloc memory to back perf mmap() buffers. |
| 1468 | |
| 1469 | Mostly useful for debugging the vmalloc code on platforms |
| 1470 | that don't require it. |
| 1471 | |
| 1472 | Say N if unsure. |
| 1473 | |
Thomas Gleixner | 0793a61 | 2008-12-04 20:12:29 +0100 | [diff] [blame] | 1474 | endmenu |
| 1475 | |
Christoph Lameter | f8891e5 | 2006-06-30 01:55:45 -0700 | [diff] [blame] | 1476 | config VM_EVENT_COUNTERS |
| 1477 | default y |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1478 | bool "Enable VM event counters for /proc/vmstat" if EXPERT |
Christoph Lameter | f8891e5 | 2006-06-30 01:55:45 -0700 | [diff] [blame] | 1479 | help |
Paul Jackson | 2aea4fb | 2006-12-22 01:06:10 -0800 | [diff] [blame] | 1480 | VM event counters are needed for event counts to be shown. |
| 1481 | This option allows the disabling of the VM event counters |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1482 | on EXPERT systems. /proc/vmstat will only show page counts |
Paul Jackson | 2aea4fb | 2006-12-22 01:06:10 -0800 | [diff] [blame] | 1483 | if VM event counters are disabled. |
Christoph Lameter | f8891e5 | 2006-06-30 01:55:45 -0700 | [diff] [blame] | 1484 | |
Christoph Lameter | 41ecc55 | 2007-05-09 02:32:44 -0700 | [diff] [blame] | 1485 | config SLUB_DEBUG |
| 1486 | default y |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1487 | bool "Enable SLUB debugging support" if EXPERT |
Christoph Lameter | f6acb63 | 2008-04-29 16:16:06 -0700 | [diff] [blame] | 1488 | depends on SLUB && SYSFS |
Christoph Lameter | 41ecc55 | 2007-05-09 02:32:44 -0700 | [diff] [blame] | 1489 | help |
| 1490 | SLUB has extensive debug support features. Disabling these can |
| 1491 | result in significant savings in code size. This also disables |
| 1492 | SLUB sysfs support. /sys/slab will not exist and there will be |
| 1493 | no support for cache validation etc. |
| 1494 | |
Tejun Heo | 1663f26 | 2017-02-22 15:41:39 -0800 | [diff] [blame] | 1495 | config SLUB_MEMCG_SYSFS_ON |
| 1496 | default n |
| 1497 | bool "Enable memcg SLUB sysfs support by default" if EXPERT |
| 1498 | depends on SLUB && SYSFS && MEMCG |
| 1499 | help |
| 1500 | SLUB creates a directory under /sys/kernel/slab for each |
| 1501 | allocation cache to host info and debug files. If memory |
| 1502 | cgroup is enabled, each cache can have per memory cgroup |
| 1503 | caches. SLUB can create the same sysfs directories for these |
| 1504 | caches under /sys/kernel/slab/CACHE/cgroup but it can lead |
| 1505 | to a very high number of debug files being created. This is |
| 1506 | controlled by slub_memcg_sysfs boot parameter and this |
| 1507 | config option determines the parameter's default value. |
| 1508 | |
Randy Dunlap | b943c46 | 2009-03-10 12:55:46 -0700 | [diff] [blame] | 1509 | config COMPAT_BRK |
| 1510 | bool "Disable heap randomization" |
| 1511 | default y |
| 1512 | help |
| 1513 | Randomizing heap placement makes heap exploits harder, but it |
| 1514 | also breaks ancient binaries (including anything libc5 based). |
| 1515 | This option changes the bootup default to heap randomization |
Matt LaPlante | 692105b | 2009-01-26 11:12:25 +0100 | [diff] [blame] | 1516 | disabled, and can be overridden at runtime by setting |
Randy Dunlap | b943c46 | 2009-03-10 12:55:46 -0700 | [diff] [blame] | 1517 | /proc/sys/kernel/randomize_va_space to 2. |
| 1518 | |
| 1519 | On non-ancient distros (post-2000 ones) N is usually a safe choice. |
| 1520 | |
Christoph Lameter | 81819f0 | 2007-05-06 14:49:36 -0700 | [diff] [blame] | 1521 | choice |
| 1522 | prompt "Choose SLAB allocator" |
Christoph Lameter | a0acd82 | 2007-07-17 04:03:32 -0700 | [diff] [blame] | 1523 | default SLUB |
Christoph Lameter | 81819f0 | 2007-05-06 14:49:36 -0700 | [diff] [blame] | 1524 | help |
| 1525 | This option allows to select a slab allocator. |
| 1526 | |
| 1527 | config SLAB |
| 1528 | bool "SLAB" |
Kees Cook | 04385fc | 2016-06-23 15:20:59 -0700 | [diff] [blame] | 1529 | select HAVE_HARDENED_USERCOPY_ALLOCATOR |
Christoph Lameter | 81819f0 | 2007-05-06 14:49:36 -0700 | [diff] [blame] | 1530 | help |
| 1531 | The regular slab allocator that is established and known to work |
Christoph Lameter | 3401388 | 2007-05-09 02:32:47 -0700 | [diff] [blame] | 1532 | well in all environments. It organizes cache hot objects in |
Simon Arlott | 02f5621 | 2008-11-05 22:18:19 +0000 | [diff] [blame] | 1533 | per cpu and per node queues. |
Christoph Lameter | 81819f0 | 2007-05-06 14:49:36 -0700 | [diff] [blame] | 1534 | |
| 1535 | config SLUB |
Christoph Lameter | 81819f0 | 2007-05-06 14:49:36 -0700 | [diff] [blame] | 1536 | bool "SLUB (Unqueued Allocator)" |
Kees Cook | ed18adc | 2016-06-23 15:24:05 -0700 | [diff] [blame] | 1537 | select HAVE_HARDENED_USERCOPY_ALLOCATOR |
Christoph Lameter | 81819f0 | 2007-05-06 14:49:36 -0700 | [diff] [blame] | 1538 | help |
| 1539 | SLUB is a slab allocator that minimizes cache line usage |
| 1540 | instead of managing queues of cached objects (SLAB approach). |
| 1541 | Per cpu caching is realized using slabs of objects instead |
| 1542 | of queues of objects. SLUB can use memory efficiently |
Simon Arlott | 02f5621 | 2008-11-05 22:18:19 +0000 | [diff] [blame] | 1543 | and has enhanced diagnostics. SLUB is the default choice for |
| 1544 | a slab allocator. |
Christoph Lameter | 81819f0 | 2007-05-06 14:49:36 -0700 | [diff] [blame] | 1545 | |
| 1546 | config SLOB |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1547 | depends on EXPERT |
Christoph Lameter | 81819f0 | 2007-05-06 14:49:36 -0700 | [diff] [blame] | 1548 | bool "SLOB (Simple Allocator)" |
| 1549 | help |
Matt Mackall | 3729145 | 2008-02-04 22:29:38 -0800 | [diff] [blame] | 1550 | SLOB replaces the stock allocator with a drastically simpler |
| 1551 | allocator. SLOB is generally more space efficient but |
| 1552 | does not perform as well on large systems. |
Christoph Lameter | 81819f0 | 2007-05-06 14:49:36 -0700 | [diff] [blame] | 1553 | |
| 1554 | endchoice |
| 1555 | |
Kees Cook | 7660a6f | 2017-07-06 15:36:40 -0700 | [diff] [blame] | 1556 | config SLAB_MERGE_DEFAULT |
| 1557 | bool "Allow slab caches to be merged" |
| 1558 | default y |
| 1559 | help |
| 1560 | For reduced kernel memory fragmentation, slab caches can be |
| 1561 | merged when they share the same size and other characteristics. |
| 1562 | This carries a risk of kernel heap overflows being able to |
| 1563 | overwrite objects from merged caches (and more easily control |
| 1564 | cache layout), which makes such heap attacks easier to exploit |
| 1565 | by attackers. By keeping caches unmerged, these kinds of exploits |
| 1566 | can usually only damage objects in the same cache. To disable |
| 1567 | merging at runtime, "slab_nomerge" can be passed on the kernel |
| 1568 | command line. |
| 1569 | |
Thomas Garnier | c7ce4f60 | 2016-05-19 17:10:37 -0700 | [diff] [blame] | 1570 | config SLAB_FREELIST_RANDOM |
| 1571 | default n |
Thomas Garnier | 210e7a4 | 2016-07-26 15:21:59 -0700 | [diff] [blame] | 1572 | depends on SLAB || SLUB |
Thomas Garnier | c7ce4f60 | 2016-05-19 17:10:37 -0700 | [diff] [blame] | 1573 | bool "SLAB freelist randomization" |
| 1574 | help |
Thomas Garnier | 210e7a4 | 2016-07-26 15:21:59 -0700 | [diff] [blame] | 1575 | Randomizes the freelist order used on creating new pages. This |
Thomas Garnier | c7ce4f60 | 2016-05-19 17:10:37 -0700 | [diff] [blame] | 1576 | security feature reduces the predictability of the kernel slab |
| 1577 | allocator against heap overflows. |
| 1578 | |
Kees Cook | 2482dde | 2017-09-06 16:19:18 -0700 | [diff] [blame] | 1579 | config SLAB_FREELIST_HARDENED |
| 1580 | bool "Harden slab freelist metadata" |
| 1581 | depends on SLUB |
| 1582 | help |
| 1583 | Many kernel heap attacks try to target slab cache metadata and |
| 1584 | other infrastructure. This options makes minor performance |
| 1585 | sacrifies to harden the kernel slab allocator against common |
| 1586 | freelist exploit methods. |
| 1587 | |
Joonsoo Kim | 345c905 | 2013-06-19 14:05:52 +0900 | [diff] [blame] | 1588 | config SLUB_CPU_PARTIAL |
| 1589 | default y |
Uwe Kleine-König | b39ffbf | 2013-07-17 16:54:59 +0200 | [diff] [blame] | 1590 | depends on SLUB && SMP |
Joonsoo Kim | 345c905 | 2013-06-19 14:05:52 +0900 | [diff] [blame] | 1591 | bool "SLUB per cpu partial cache" |
| 1592 | help |
| 1593 | Per cpu partial caches accellerate objects allocation and freeing |
| 1594 | that is local to a processor at the price of more indeterminism |
| 1595 | in the latency of the free. On overflow these caches will be cleared |
| 1596 | which requires the taking of locks that may cause latency spikes. |
| 1597 | Typically one would choose no for a realtime system. |
| 1598 | |
Jie Zhang | ea63763 | 2009-12-14 18:00:02 -0800 | [diff] [blame] | 1599 | config MMAP_ALLOW_UNINITIALIZED |
| 1600 | bool "Allow mmapped anonymous memory to be uninitialized" |
David Rientjes | 6a108a1 | 2011-01-20 14:44:16 -0800 | [diff] [blame] | 1601 | depends on EXPERT && !MMU |
Jie Zhang | ea63763 | 2009-12-14 18:00:02 -0800 | [diff] [blame] | 1602 | default n |
| 1603 | help |
| 1604 | Normally, and according to the Linux spec, anonymous memory obtained |
| 1605 | from mmap() has it's contents cleared before it is passed to |
| 1606 | userspace. Enabling this config option allows you to request that |
| 1607 | mmap() skip that if it is given an MAP_UNINITIALIZED flag, thus |
| 1608 | providing a huge performance boost. If this option is not enabled, |
| 1609 | then the flag will be ignored. |
| 1610 | |
| 1611 | This is taken advantage of by uClibc's malloc(), and also by |
| 1612 | ELF-FDPIC binfmt's brk and stack allocator. |
| 1613 | |
| 1614 | Because of the obvious security issues, this option should only be |
| 1615 | enabled on embedded devices where you control what is run in |
| 1616 | userspace. Since that isn't generally a problem on no-MMU systems, |
| 1617 | it is normally safe to say Y here. |
| 1618 | |
| 1619 | See Documentation/nommu-mmap.txt for more information. |
| 1620 | |
David Howells | 091f6e2 | 2015-07-20 21:16:28 +0100 | [diff] [blame] | 1621 | config SYSTEM_DATA_VERIFICATION |
| 1622 | def_bool n |
| 1623 | select SYSTEM_TRUSTED_KEYRING |
| 1624 | select KEYS |
| 1625 | select CRYPTO |
David Howells | d43de6c | 2016-03-03 21:49:27 +0000 | [diff] [blame] | 1626 | select CRYPTO_RSA |
David Howells | 091f6e2 | 2015-07-20 21:16:28 +0100 | [diff] [blame] | 1627 | select ASYMMETRIC_KEY_TYPE |
| 1628 | select ASYMMETRIC_PUBLIC_KEY_SUBTYPE |
David Howells | 091f6e2 | 2015-07-20 21:16:28 +0100 | [diff] [blame] | 1629 | select ASN1 |
| 1630 | select OID_REGISTRY |
| 1631 | select X509_CERTIFICATE_PARSER |
| 1632 | select PKCS7_MESSAGE_PARSER |
Peter Foley | 82c04ff | 2014-04-18 15:07:11 -0700 | [diff] [blame] | 1633 | help |
David Howells | 091f6e2 | 2015-07-20 21:16:28 +0100 | [diff] [blame] | 1634 | Provide PKCS#7 message verification using the contents of the system |
| 1635 | trusted keyring to provide public keys. This then can be used for |
| 1636 | module verification, kexec image verification and firmware blob |
| 1637 | verification. |
Peter Foley | 82c04ff | 2014-04-18 15:07:11 -0700 | [diff] [blame] | 1638 | |
Mathieu Desnoyers | 125e564 | 2008-02-02 15:10:36 -0500 | [diff] [blame] | 1639 | config PROFILING |
Robert Richter | b309a29 | 2010-02-26 15:01:23 +0100 | [diff] [blame] | 1640 | bool "Profiling support" |
Mathieu Desnoyers | 125e564 | 2008-02-02 15:10:36 -0500 | [diff] [blame] | 1641 | help |
| 1642 | Say Y here to enable the extended profiling support mechanisms used |
| 1643 | by profilers such as OProfile. |
| 1644 | |
Ingo Molnar | 5f87f11 | 2008-07-23 14:15:22 +0200 | [diff] [blame] | 1645 | # |
| 1646 | # Place an empty function call at each tracepoint site. Can be |
| 1647 | # dynamically changed for a probe function. |
| 1648 | # |
Mathieu Desnoyers | 97e1c18 | 2008-07-18 12:16:16 -0400 | [diff] [blame] | 1649 | config TRACEPOINTS |
Ingo Molnar | 5f87f11 | 2008-07-23 14:15:22 +0200 | [diff] [blame] | 1650 | bool |
Mathieu Desnoyers | 97e1c18 | 2008-07-18 12:16:16 -0400 | [diff] [blame] | 1651 | |
Mathieu Desnoyers | fb32e03 | 2008-02-02 15:10:33 -0500 | [diff] [blame] | 1652 | source "arch/Kconfig" |
| 1653 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1654 | endmenu # General setup |
| 1655 | |
Dmitry Baryshkov | ee7e551 | 2008-06-29 14:18:46 +0400 | [diff] [blame] | 1656 | config HAVE_GENERIC_DMA_COHERENT |
| 1657 | bool |
| 1658 | default n |
| 1659 | |
Linus Torvalds | 158a962 | 2008-01-02 13:04:48 -0800 | [diff] [blame] | 1660 | config SLABINFO |
| 1661 | bool |
| 1662 | depends on PROC_FS |
Christoph Lameter | 0f389ec | 2008-04-14 18:53:02 +0300 | [diff] [blame] | 1663 | depends on SLAB || SLUB_DEBUG |
Linus Torvalds | 158a962 | 2008-01-02 13:04:48 -0800 | [diff] [blame] | 1664 | default y |
| 1665 | |
Chuck Ebbert | ae81f9e | 2006-09-16 12:15:53 -0700 | [diff] [blame] | 1666 | config RT_MUTEXES |
Christoph Jaeger | 6341e62 | 2014-12-20 15:41:11 -0500 | [diff] [blame] | 1667 | bool |
Chuck Ebbert | ae81f9e | 2006-09-16 12:15:53 -0700 | [diff] [blame] | 1668 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1669 | config BASE_SMALL |
| 1670 | int |
| 1671 | default 0 if BASE_FULL |
| 1672 | default 1 if !BASE_FULL |
| 1673 | |
Jan Engelhardt | 66da573 | 2007-07-15 23:39:29 -0700 | [diff] [blame] | 1674 | menuconfig MODULES |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1675 | bool "Enable loadable module support" |
Yann E. MORIN | 11097a0 | 2013-08-11 16:07:50 +0200 | [diff] [blame] | 1676 | option modules |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1677 | help |
| 1678 | Kernel modules are small pieces of compiled code which can |
| 1679 | be inserted in the running kernel, rather than being |
| 1680 | permanently built into the kernel. You use the "modprobe" |
| 1681 | tool to add (and sometimes remove) them. If you say Y here, |
| 1682 | many parts of the kernel can be built as modules (by |
| 1683 | answering M instead of Y where indicated): this is most |
| 1684 | useful for infrequently used options which are not required |
| 1685 | for booting. For more information, see the man pages for |
| 1686 | modprobe, lsmod, modinfo, insmod and rmmod. |
| 1687 | |
| 1688 | If you say Y here, you will need to run "make |
| 1689 | modules_install" to put the modules under /lib/modules/ |
| 1690 | where modprobe can find them (you may need to be root to do |
| 1691 | this). |
| 1692 | |
| 1693 | If unsure, say Y. |
| 1694 | |
Robert P. J. Day | 0b0de14 | 2008-08-04 13:31:32 -0400 | [diff] [blame] | 1695 | if MODULES |
| 1696 | |
Linus Torvalds | 826e450 | 2008-05-04 17:04:16 -0700 | [diff] [blame] | 1697 | config MODULE_FORCE_LOAD |
| 1698 | bool "Forced module loading" |
Linus Torvalds | 826e450 | 2008-05-04 17:04:16 -0700 | [diff] [blame] | 1699 | default n |
| 1700 | help |
Rusty Russell | 91e37a7 | 2008-05-09 16:25:28 +1000 | [diff] [blame] | 1701 | Allow loading of modules without version information (ie. modprobe |
| 1702 | --force). Forced module loading sets the 'F' (forced) taint flag and |
| 1703 | is usually a really bad idea. |
Linus Torvalds | 826e450 | 2008-05-04 17:04:16 -0700 | [diff] [blame] | 1704 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1705 | config MODULE_UNLOAD |
| 1706 | bool "Module unloading" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1707 | help |
| 1708 | Without this option you will not be able to unload any |
| 1709 | modules (note that some modules may not be unloadable |
Denys Vlasenko | f7f5b67 | 2008-07-22 19:24:26 -0500 | [diff] [blame] | 1710 | anyway), which makes your kernel smaller, faster |
| 1711 | and simpler. If unsure, say Y. |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1712 | |
| 1713 | config MODULE_FORCE_UNLOAD |
| 1714 | bool "Forced module unloading" |
Kees Cook | 19c9239 | 2012-10-02 11:19:29 -0700 | [diff] [blame] | 1715 | depends on MODULE_UNLOAD |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1716 | help |
| 1717 | This option allows you to force a module to unload, even if the |
| 1718 | kernel believes it is unsafe: the kernel will remove the module |
| 1719 | without waiting for anyone to stop using it (using the -f option to |
| 1720 | rmmod). This is mainly for kernel developers and desperate users. |
| 1721 | If unsure, say N. |
| 1722 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1723 | config MODVERSIONS |
Sam Ravnborg | 0d54164 | 2005-12-26 23:04:02 +0100 | [diff] [blame] | 1724 | bool "Module versioning support" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1725 | help |
| 1726 | Usually, you have to use modules compiled with your kernel. |
| 1727 | Saying Y here makes it sometimes possible to use modules |
| 1728 | compiled for different kernels, by adding enough information |
| 1729 | to the modules to (hopefully) spot any changes which would |
| 1730 | make them incompatible with the kernel you are running. If |
| 1731 | unsure, say N. |
| 1732 | |
Ard Biesheuvel | 5606781 | 2017-02-03 09:54:05 +0000 | [diff] [blame] | 1733 | config MODULE_REL_CRCS |
| 1734 | bool |
| 1735 | depends on MODVERSIONS |
| 1736 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1737 | config MODULE_SRCVERSION_ALL |
| 1738 | bool "Source checksum for all modules" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1739 | help |
| 1740 | Modules which contain a MODULE_VERSION get an extra "srcversion" |
| 1741 | field inserted into their modinfo section, which contains a |
| 1742 | sum of the source files which made it. This helps maintainers |
| 1743 | see exactly which source was used to build a module (since |
| 1744 | others sometimes change the module source without updating |
| 1745 | the version). With this option, such a "srcversion" field |
| 1746 | will be created for all modules. If unsure, say N. |
| 1747 | |
Rusty Russell | 106a4ee | 2012-09-26 10:09:40 +0100 | [diff] [blame] | 1748 | config MODULE_SIG |
| 1749 | bool "Module signature verification" |
| 1750 | depends on MODULES |
David Howells | 091f6e2 | 2015-07-20 21:16:28 +0100 | [diff] [blame] | 1751 | select SYSTEM_DATA_VERIFICATION |
Rusty Russell | 106a4ee | 2012-09-26 10:09:40 +0100 | [diff] [blame] | 1752 | help |
| 1753 | Check modules for valid signatures upon load: the signature |
| 1754 | is simply appended to the module. For more information see |
| 1755 | Documentation/module-signing.txt. |
| 1756 | |
David Howells | 228c37f | 2015-08-11 12:38:54 +0100 | [diff] [blame] | 1757 | Note that this option adds the OpenSSL development packages as a |
| 1758 | kernel build dependency so that the signing tool can use its crypto |
| 1759 | library. |
| 1760 | |
David Howells | ea0b6dc | 2012-09-26 10:09:50 +0100 | [diff] [blame] | 1761 | !!!WARNING!!! If you enable this option, you MUST make sure that the |
| 1762 | module DOES NOT get stripped after being signed. This includes the |
| 1763 | debuginfo strip done by some packagers (such as rpmbuild) and |
| 1764 | inclusion into an initramfs that wants the module size reduced. |
| 1765 | |
Rusty Russell | 106a4ee | 2012-09-26 10:09:40 +0100 | [diff] [blame] | 1766 | config MODULE_SIG_FORCE |
| 1767 | bool "Require modules to be validly signed" |
| 1768 | depends on MODULE_SIG |
| 1769 | help |
| 1770 | Reject unsigned modules or signed modules for which we don't have a |
| 1771 | key. Without this, such modules will simply taint the kernel. |
David Howells | ea0b6dc | 2012-09-26 10:09:50 +0100 | [diff] [blame] | 1772 | |
Michal Marek | d9d8d7e | 2013-01-25 13:41:31 +1030 | [diff] [blame] | 1773 | config MODULE_SIG_ALL |
| 1774 | bool "Automatically sign all modules" |
| 1775 | default y |
| 1776 | depends on MODULE_SIG |
| 1777 | help |
| 1778 | Sign all modules during make modules_install. Without this option, |
| 1779 | modules must be signed manually, using the scripts/sign-file tool. |
| 1780 | |
| 1781 | comment "Do not forget to sign required modules with scripts/sign-file" |
| 1782 | depends on MODULE_SIG_FORCE && !MODULE_SIG_ALL |
| 1783 | |
David Howells | ea0b6dc | 2012-09-26 10:09:50 +0100 | [diff] [blame] | 1784 | choice |
| 1785 | prompt "Which hash algorithm should modules be signed with?" |
| 1786 | depends on MODULE_SIG |
| 1787 | help |
| 1788 | This determines which sort of hashing algorithm will be used during |
| 1789 | signature generation. This algorithm _must_ be built into the kernel |
| 1790 | directly so that signature verification can take place. It is not |
| 1791 | possible to load a signed module containing the algorithm to check |
| 1792 | the signature on that module. |
| 1793 | |
| 1794 | config MODULE_SIG_SHA1 |
| 1795 | bool "Sign modules with SHA-1" |
| 1796 | select CRYPTO_SHA1 |
| 1797 | |
| 1798 | config MODULE_SIG_SHA224 |
| 1799 | bool "Sign modules with SHA-224" |
| 1800 | select CRYPTO_SHA256 |
| 1801 | |
| 1802 | config MODULE_SIG_SHA256 |
| 1803 | bool "Sign modules with SHA-256" |
| 1804 | select CRYPTO_SHA256 |
| 1805 | |
| 1806 | config MODULE_SIG_SHA384 |
| 1807 | bool "Sign modules with SHA-384" |
| 1808 | select CRYPTO_SHA512 |
| 1809 | |
| 1810 | config MODULE_SIG_SHA512 |
| 1811 | bool "Sign modules with SHA-512" |
| 1812 | select CRYPTO_SHA512 |
| 1813 | |
| 1814 | endchoice |
| 1815 | |
Michal Marek | 2275367 | 2013-01-25 13:41:00 +1030 | [diff] [blame] | 1816 | config MODULE_SIG_HASH |
| 1817 | string |
| 1818 | depends on MODULE_SIG |
| 1819 | default "sha1" if MODULE_SIG_SHA1 |
| 1820 | default "sha224" if MODULE_SIG_SHA224 |
| 1821 | default "sha256" if MODULE_SIG_SHA256 |
| 1822 | default "sha384" if MODULE_SIG_SHA384 |
| 1823 | default "sha512" if MODULE_SIG_SHA512 |
| 1824 | |
Bertrand Jacquin | beb50df | 2014-08-27 20:31:56 +0930 | [diff] [blame] | 1825 | config MODULE_COMPRESS |
| 1826 | bool "Compress modules on installation" |
| 1827 | depends on MODULES |
| 1828 | help |
Bertrand Jacquin | beb50df | 2014-08-27 20:31:56 +0930 | [diff] [blame] | 1829 | |
Rusty Russell | b6c09b5 | 2015-06-16 12:16:22 +0930 | [diff] [blame] | 1830 | Compresses kernel modules when 'make modules_install' is run; gzip or |
| 1831 | xz depending on "Compression algorithm" below. |
Bertrand Jacquin | beb50df | 2014-08-27 20:31:56 +0930 | [diff] [blame] | 1832 | |
Rusty Russell | b6c09b5 | 2015-06-16 12:16:22 +0930 | [diff] [blame] | 1833 | module-init-tools MAY support gzip, and kmod MAY support gzip and xz. |
Bertrand Jacquin | beb50df | 2014-08-27 20:31:56 +0930 | [diff] [blame] | 1834 | |
Rusty Russell | b6c09b5 | 2015-06-16 12:16:22 +0930 | [diff] [blame] | 1835 | Out-of-tree kernel modules installed using Kbuild will also be |
| 1836 | compressed upon installation. |
Bertrand Jacquin | beb50df | 2014-08-27 20:31:56 +0930 | [diff] [blame] | 1837 | |
Rusty Russell | b6c09b5 | 2015-06-16 12:16:22 +0930 | [diff] [blame] | 1838 | Note: for modules inside an initrd or initramfs, it's more efficient |
| 1839 | to compress the whole initrd or initramfs instead. |
Bertrand Jacquin | beb50df | 2014-08-27 20:31:56 +0930 | [diff] [blame] | 1840 | |
Rusty Russell | b6c09b5 | 2015-06-16 12:16:22 +0930 | [diff] [blame] | 1841 | Note: This is fully compatible with signed modules. |
| 1842 | |
| 1843 | If in doubt, say N. |
Bertrand Jacquin | beb50df | 2014-08-27 20:31:56 +0930 | [diff] [blame] | 1844 | |
| 1845 | choice |
| 1846 | prompt "Compression algorithm" |
| 1847 | depends on MODULE_COMPRESS |
| 1848 | default MODULE_COMPRESS_GZIP |
| 1849 | help |
| 1850 | This determines which sort of compression will be used during |
| 1851 | 'make modules_install'. |
| 1852 | |
| 1853 | GZIP (default) and XZ are supported. |
| 1854 | |
| 1855 | config MODULE_COMPRESS_GZIP |
| 1856 | bool "GZIP" |
| 1857 | |
| 1858 | config MODULE_COMPRESS_XZ |
| 1859 | bool "XZ" |
| 1860 | |
| 1861 | endchoice |
| 1862 | |
Nicolas Pitre | dbacb0e | 2016-01-26 21:51:05 -0500 | [diff] [blame] | 1863 | config TRIM_UNUSED_KSYMS |
| 1864 | bool "Trim unused exported kernel symbols" |
| 1865 | depends on MODULES && !UNUSED_SYMBOLS |
| 1866 | help |
| 1867 | The kernel and some modules make many symbols available for |
| 1868 | other modules to use via EXPORT_SYMBOL() and variants. Depending |
| 1869 | on the set of modules being selected in your kernel configuration, |
| 1870 | many of those exported symbols might never be used. |
| 1871 | |
| 1872 | This option allows for unused exported symbols to be dropped from |
| 1873 | the build. In turn, this provides the compiler more opportunities |
| 1874 | (especially when using LTO) for optimizing the code and reducing |
| 1875 | binary size. This might have some security advantages as well. |
| 1876 | |
Valdis Kletnieks | f1cb637 | 2016-08-02 14:07:27 -0700 | [diff] [blame] | 1877 | If unsure, or if you need to build out-of-tree modules, say N. |
Nicolas Pitre | dbacb0e | 2016-01-26 21:51:05 -0500 | [diff] [blame] | 1878 | |
Robert P. J. Day | 0b0de14 | 2008-08-04 13:31:32 -0400 | [diff] [blame] | 1879 | endif # MODULES |
| 1880 | |
Peter Zijlstra | 6c9692e | 2015-05-27 11:09:37 +0930 | [diff] [blame] | 1881 | config MODULES_TREE_LOOKUP |
| 1882 | def_bool y |
| 1883 | depends on PERF_EVENTS || TRACING |
| 1884 | |
Rusty Russell | 98a79d6 | 2008-12-13 21:19:41 +1030 | [diff] [blame] | 1885 | config INIT_ALL_POSSIBLE |
| 1886 | bool |
| 1887 | help |
Rusty Russell | 5f054e3 | 2012-03-29 15:38:31 +1030 | [diff] [blame] | 1888 | Back when each arch used to define their own cpu_online_mask and |
| 1889 | cpu_possible_mask, some of them chose to initialize cpu_possible_mask |
Rusty Russell | 98a79d6 | 2008-12-13 21:19:41 +1030 | [diff] [blame] | 1890 | with all 1s, and others with all 0s. When they were centralised, |
| 1891 | it was better to provide this option than to break all the archs |
Matt LaPlante | 692105b | 2009-01-26 11:12:25 +0100 | [diff] [blame] | 1892 | and have several arch maintainers pursuing me down dark alleys. |
Rusty Russell | 98a79d6 | 2008-12-13 21:19:41 +1030 | [diff] [blame] | 1893 | |
Jens Axboe | 3a65dfe | 2005-11-04 08:43:35 +0100 | [diff] [blame] | 1894 | source "block/Kconfig" |
Avi Kivity | e98c320 | 2007-10-16 23:27:31 -0700 | [diff] [blame] | 1895 | |
| 1896 | config PREEMPT_NOTIFIERS |
| 1897 | bool |
Paul E. McKenney | e260be6 | 2008-01-25 21:08:24 +0100 | [diff] [blame] | 1898 | |
Steffen Klassert | 16295be | 2010-01-06 19:47:10 +1100 | [diff] [blame] | 1899 | config PADATA |
| 1900 | depends on SMP |
| 1901 | bool |
| 1902 | |
David Howells | 4520c6a | 2012-09-21 23:31:13 +0100 | [diff] [blame] | 1903 | config ASN1 |
| 1904 | tristate |
| 1905 | help |
| 1906 | Build a simple ASN.1 grammar compiler that produces a bytecode output |
| 1907 | that can be interpreted by the ASN.1 stream decoder and used to |
| 1908 | inform it as to what tags are to be expected in a stream and what |
| 1909 | functions to call on what tags. |
| 1910 | |
Thomas Gleixner | 6beb000 | 2009-11-09 15:21:34 +0000 | [diff] [blame] | 1911 | source "kernel/Kconfig.locks" |