blob: 17ea6d4a9a247ce261f8ae22a3f07f0bb80393e1 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001#
2# Makefile for the linux kernel.
3#
4
Joe Perchesb9ee9792013-07-31 13:53:42 -07005obj-y = fork.o exec_domain.o panic.o \
Thomas Gleixner5cee9642014-06-22 12:06:40 +02006 cpu.o exit.o softirq.o resource.o \
7 sysctl.o sysctl_binary.o capability.o ptrace.o user.o \
Oleg Nesterove73f8952012-05-11 10:59:07 +10008 signal.o sys.o kmod.o workqueue.o pid.o task_work.o \
Thomas Gleixner5cee9642014-06-22 12:06:40 +02009 extable.o params.o \
10 kthread.o sys_ni.o nsproxy.o \
Robin Holt15d94b82013-07-08 16:01:32 -070011 notifier.o ksysfs.o cred.o reboot.o \
Peter Zijlstracd4d2412013-11-04 11:51:33 +010012 async.o range.o groups.o smpboot.o
Peter Zijlstra029632f2011-10-25 10:00:11 +020013
Steven Rostedt606576c2008-10-06 19:06:12 -040014ifdef CONFIG_FUNCTION_TRACER
Steven Rostedt6ec56232008-05-14 21:30:30 -040015# Do not trace debug files and internal ftrace files
Steven Rostedt6ec56232008-05-14 21:30:30 -040016CFLAGS_REMOVE_cgroup-debug.o = -pg
Peter Zijlstrae360adb2010-10-14 14:01:34 +080017CFLAGS_REMOVE_irq_work.o = -pg
Steven Rostedt1d09daa2008-05-12 21:20:55 +020018endif
19
Andi Kleen58edae32014-02-08 09:01:10 +010020# cond_syscall is currently not LTO compatible
21CFLAGS_sys_ni.o = $(DISABLE_LTO)
22
Peter Zijlstra391e43d2011-11-15 17:14:39 +010023obj-y += sched/
Peter Zijlstra01768b42013-10-31 18:11:53 +010024obj-y += locking/
Rafael J. Wysockidae5cbc2012-01-14 00:33:03 +010025obj-y += power/
Joe Perchesb9ee9792013-07-31 13:53:42 -070026obj-y += printk/
Martin Schwidefsky0244ad02013-08-30 09:39:53 +020027obj-y += irq/
Paul E. McKenney4102ada2013-10-08 20:23:47 -070028obj-y += rcu/
Peter Zijlstra391e43d2011-11-15 17:14:39 +010029
Cyrill Gorcunov1e142b22013-02-27 17:05:58 -080030obj-$(CONFIG_CHECKPOINT_RESTORE) += kcmp.o
Matt Helsley8174f152008-10-18 20:27:19 -070031obj-$(CONFIG_FREEZER) += freezer.o
Adrian Bunkb03f6482008-07-25 01:45:35 -070032obj-$(CONFIG_PROFILING) += profile.o
Ingo Molnar8637c092006-07-03 00:24:38 -070033obj-$(CONFIG_STACKTRACE) += stacktrace.o
john stultzad596172006-06-26 00:25:06 -070034obj-y += time/
Linus Torvalds1da177e2005-04-16 15:20:36 -070035obj-$(CONFIG_FUTEX) += futex.o
Ingo Molnar34f192c2006-03-27 01:16:24 -080036ifeq ($(CONFIG_COMPAT),y)
37obj-$(CONFIG_FUTEX) += futex_compat.o
38endif
Linus Torvalds1da177e2005-04-16 15:20:36 -070039obj-$(CONFIG_GENERIC_ISA_DMA) += dma.o
Amerigo Wang351f8f82011-01-12 16:59:39 -080040obj-$(CONFIG_SMP) += smp.o
Andrew Morton9316fca2009-01-14 09:35:44 -080041ifneq ($(CONFIG_SMP),y)
Andrew Morton53ce3d92009-01-09 12:27:08 -080042obj-y += up.o
43endif
Linus Torvalds1da177e2005-04-16 15:20:36 -070044obj-$(CONFIG_UID16) += uid16.o
David Howellsb56e5a12013-08-30 16:07:30 +010045obj-$(CONFIG_SYSTEM_TRUSTED_KEYRING) += system_keyring.o system_certificates.o
Linus Torvalds1da177e2005-04-16 15:20:36 -070046obj-$(CONFIG_MODULES) += module.o
David Howellsb56e5a12013-08-30 16:07:30 +010047obj-$(CONFIG_MODULE_SIG) += module_signing.o
Linus Torvalds1da177e2005-04-16 15:20:36 -070048obj-$(CONFIG_KALLSYMS) += kallsyms.o
Linus Torvalds1da177e2005-04-16 15:20:36 -070049obj-$(CONFIG_BSD_PROCESS_ACCT) += acct.o
Eric W. Biedermandc009d92005-06-25 14:57:52 -070050obj-$(CONFIG_KEXEC) += kexec.o
Arjan van de Ven6dab2772008-01-30 13:33:08 +010051obj-$(CONFIG_BACKTRACE_SELF_TEST) += backtracetest.o
Linus Torvalds1da177e2005-04-16 15:20:36 -070052obj-$(CONFIG_COMPAT) += compat.o
Paul Menageddbcc7e2007-10-18 23:39:30 -070053obj-$(CONFIG_CGROUPS) += cgroup.o
Matt Helsleydc52ddc2008-10-18 20:27:21 -070054obj-$(CONFIG_CGROUP_FREEZER) += cgroup_freezer.o
Linus Torvalds1da177e2005-04-16 15:20:36 -070055obj-$(CONFIG_CPUSETS) += cpuset.o
Pavel Emelyanovaee16ce2008-02-08 04:18:23 -080056obj-$(CONFIG_UTS_NS) += utsname.o
57obj-$(CONFIG_USER_NS) += user_namespace.o
Pavel Emelyanov74bd59b2008-02-08 04:18:24 -080058obj-$(CONFIG_PID_NS) += pid_namespace.o
Linus Torvalds1da177e2005-04-16 15:20:36 -070059obj-$(CONFIG_IKCONFIG) += configs.o
Pavel Emelianove552b662008-02-07 00:13:49 -080060obj-$(CONFIG_RESOURCE_COUNTERS) += res_counter.o
Tejun Heobbf1bb32010-05-08 16:20:53 +020061obj-$(CONFIG_SMP) += stop_machine.o
Ananth N Mavinakayanahalli8c1c9352008-01-30 13:32:53 +010062obj-$(CONFIG_KPROBES_SANITY_TEST) += test_kprobes.o
Eric Paris939a67f2009-12-17 20:12:06 -050063obj-$(CONFIG_AUDIT) += audit.o auditfilter.o
Linus Torvalds1da177e2005-04-16 15:20:36 -070064obj-$(CONFIG_AUDITSYSCALL) += auditsc.o
Eric Paris939a67f2009-12-17 20:12:06 -050065obj-$(CONFIG_AUDIT_WATCH) += audit_watch.o
Al Viro74c3cbe2007-07-22 08:04:18 -040066obj-$(CONFIG_AUDIT_TREE) += audit_tree.o
Eric Paris939a67f2009-12-17 20:12:06 -050067obj-$(CONFIG_GCOV_KERNEL) += gcov/
Linus Torvalds1da177e2005-04-16 15:20:36 -070068obj-$(CONFIG_KPROBES) += kprobes.o
Jason Wesselc4338202009-05-19 07:49:32 -050069obj-$(CONFIG_KGDB) += debug/
Mandeep Singh Bainese162b392009-01-15 11:08:40 -080070obj-$(CONFIG_DETECT_HUNG_TASK) += hung_task.o
Don Zickus58687ac2010-05-07 17:11:44 -040071obj-$(CONFIG_LOCKUP_DETECTOR) += watchdog.o
Linus Torvalds1da177e2005-04-16 15:20:36 -070072obj-$(CONFIG_SECCOMP) += seccomp.o
Jens Axboeb86ff9812006-03-23 19:56:55 +010073obj-$(CONFIG_RELAY) += relay.o
Eric W. Biederman39732ac2007-02-14 00:33:58 -080074obj-$(CONFIG_SYSCTL) += utsname_sysctl.o
Shailabh Nagarca74e922006-07-14 00:24:36 -070075obj-$(CONFIG_TASK_DELAY_ACCT) += delayacct.o
Jay Lanf3cef7a2006-09-30 23:28:55 -070076obj-$(CONFIG_TASKSTATS) += taskstats.o tsacct.o
Mathieu Desnoyers97e1c182008-07-18 12:16:16 -040077obj-$(CONFIG_TRACEPOINTS) += tracepoint.o
Arjan van de Ven97455122008-01-25 21:08:34 +010078obj-$(CONFIG_LATENCYTOP) += latencytop.o
Daisuke HATAYAMA1fcccba2010-03-05 13:44:07 -080079obj-$(CONFIG_BINFMT_ELF) += elfcore.o
80obj-$(CONFIG_COMPAT_BINFMT_ELF) += elfcore.o
81obj-$(CONFIG_BINFMT_ELF_FDPIC) += elfcore.o
Steven Rostedt606576c2008-10-06 19:06:12 -040082obj-$(CONFIG_FUNCTION_TRACER) += trace/
Steven Rostedtbc0c38d2008-05-12 21:20:42 +020083obj-$(CONFIG_TRACING) += trace/
Josh Triplettea632e92012-09-02 19:45:14 -070084obj-$(CONFIG_TRACE_CLOCK) += trace/
Paul Mundt1155de42009-06-25 14:30:12 +090085obj-$(CONFIG_RING_BUFFER) += trace/
Mathieu Desnoyers870915e2010-10-28 11:31:17 -040086obj-$(CONFIG_TRACEPOINTS) += trace/
Peter Zijlstrae360adb2010-10-14 14:01:34 +080087obj-$(CONFIG_IRQ_WORK) += irq_work.o
Colin Crossab100232011-02-10 02:04:45 -080088obj-$(CONFIG_CPU_PM) += cpu_pm.o
Alexei Starovoitovf89b7752014-10-23 18:41:08 -070089obj-$(CONFIG_BPF) += bpf/
Borislav Petkovfae85b72010-10-26 20:24:03 +020090
91obj-$(CONFIG_PERF_EVENTS) += events/
92
Avi Kivity7a041092009-10-25 14:24:45 +020093obj-$(CONFIG_USER_RETURN_NOTIFIER) += user-return-notifier.o
Steffen Klassert16295be2010-01-06 19:47:10 +110094obj-$(CONFIG_PADATA) += padata.o
Olaf Hering93a72052011-03-23 16:43:29 -070095obj-$(CONFIG_CRASH_DUMP) += crash_dump.o
Jason Baronb77f0f32011-08-05 16:40:40 -040096obj-$(CONFIG_JUMP_LABEL) += jump_label.o
Frederic Weisbecker91d1aa432012-11-27 19:33:25 +010097obj-$(CONFIG_CONTEXT_TRACKING) += context_tracking.o
Paul E. McKenney51b11302014-01-27 11:49:39 -080098obj-$(CONFIG_TORTURE_TEST) += torture.o
Linus Torvalds1da177e2005-04-16 15:20:36 -070099
Linus Torvalds1da177e2005-04-16 15:20:36 -0700100$(obj)/configs.o: $(obj)/config_data.h
101
102# config_data.h contains the same information as ikconfig.h but gzipped.
103# Info from config_data can be extracted from /proc/config*
104targets += config_data.gz
Ben Gardiner41263fc2010-12-14 11:39:44 -0500105$(obj)/config_data.gz: $(KCONFIG_CONFIG) FORCE
Linus Torvalds1da177e2005-04-16 15:20:36 -0700106 $(call if_changed,gzip)
107
Vivek Goyal8370ede2014-08-08 14:25:38 -0700108 filechk_ikconfiggz = (echo "static const char kernel_config_data[] __used = MAGIC_START"; cat $< | scripts/basic/bin2c; echo "MAGIC_END;")
Linus Torvalds1da177e2005-04-16 15:20:36 -0700109targets += config_data.h
110$(obj)/config_data.h: $(obj)/config_data.gz FORCE
Peter Foleye78e8f22011-07-05 19:42:18 -0400111 $(call filechk,ikconfiggz)
H. Peter Anvinbdc80782008-02-08 04:21:26 -0800112
David Howellsf0e6d222013-08-30 16:07:13 +0100113###############################################################################
David Howells631cc662012-09-26 10:09:51 +0100114#
David Howells0fbd39c2013-08-30 17:13:15 +0100115# Roll all the X.509 certificates that we can find together and pull them into
David Howellsb56e5a12013-08-30 16:07:30 +0100116# the kernel so that they get loaded into the system trusted keyring during
117# boot.
David Howells0fbd39c2013-08-30 17:13:15 +0100118#
119# We look in the source root and the build root for all files whose name ends
120# in ".x509". Unfortunately, this will generate duplicate filenames, so we
121# have make canonicalise the pathnames and then sort them to discard the
122# duplicates.
David Howells631cc662012-09-26 10:09:51 +0100123#
David Howellsf0e6d222013-08-30 16:07:13 +0100124###############################################################################
David Howellsb56e5a12013-08-30 16:07:30 +0100125ifeq ($(CONFIG_SYSTEM_TRUSTED_KEYRING),y)
David Howellsf0e6d222013-08-30 16:07:13 +0100126X509_CERTIFICATES-y := $(wildcard *.x509) $(wildcard $(srctree)/*.x509)
David Howellsd7ec4352013-12-13 15:20:19 +0000127X509_CERTIFICATES-$(CONFIG_MODULE_SIG) += $(objtree)/signing_key.x509
128X509_CERTIFICATES-raw := $(sort $(foreach CERT,$(X509_CERTIFICATES-y), \
David Howells0fbd39c2013-08-30 17:13:15 +0100129 $(or $(realpath $(CERT)),$(CERT))))
David Howellsd7ec4352013-12-13 15:20:19 +0000130X509_CERTIFICATES := $(subst $(realpath $(objtree))/,,$(X509_CERTIFICATES-raw))
David Howells631cc662012-09-26 10:09:51 +0100131
David Howellsf0e6d222013-08-30 16:07:13 +0100132ifeq ($(X509_CERTIFICATES),)
133$(warning *** No X.509 certificates found ***)
134endif
Michal Mareke10e17742012-12-11 12:26:22 +1030135
David Howellsf0e6d222013-08-30 16:07:13 +0100136ifneq ($(wildcard $(obj)/.x509.list),)
137ifneq ($(shell cat $(obj)/.x509.list),$(X509_CERTIFICATES))
138$(info X.509 certificate list changed)
139$(shell rm $(obj)/.x509.list)
140endif
141endif
David Howells631cc662012-09-26 10:09:51 +0100142
David Howellsb56e5a12013-08-30 16:07:30 +0100143kernel/system_certificates.o: $(obj)/x509_certificate_list
David Howellsf0e6d222013-08-30 16:07:13 +0100144
145quiet_cmd_x509certs = CERTS $@
David Howellsb56e5a12013-08-30 16:07:30 +0100146 cmd_x509certs = cat $(X509_CERTIFICATES) /dev/null >$@ $(foreach X509,$(X509_CERTIFICATES),; echo " - Including cert $(X509)")
147
David Howellsf0e6d222013-08-30 16:07:13 +0100148targets += $(obj)/x509_certificate_list
149$(obj)/x509_certificate_list: $(X509_CERTIFICATES) $(obj)/.x509.list
150 $(call if_changed,x509certs)
151
152targets += $(obj)/.x509.list
153$(obj)/.x509.list:
154 @echo $(X509_CERTIFICATES) >$@
Kirill Tkhaif46a3cb2013-12-10 22:39:57 +0400155endif
David Howellsf0e6d222013-08-30 16:07:13 +0100156
157clean-files := x509_certificate_list .x509.list
David Howellsd4411082012-09-26 10:09:51 +0100158
H. Peter Anvinbdc80782008-02-08 04:21:26 -0800159ifeq ($(CONFIG_MODULE_SIG),y)
David Howellsd4411082012-09-26 10:09:51 +0100160###############################################################################
161#
162# If module signing is requested, say by allyesconfig, but a key has not been
163# supplied, then one will need to be generated to make sure the build does not
164# fail and that the kernel may be used afterwards.
165#
166###############################################################################
Michal Marek22753672013-01-25 13:41:00 +1030167ifndef CONFIG_MODULE_SIG_HASH
David Howells5e8cb1e2012-09-28 11:16:57 +0100168$(error Could not determine digest type to use from kernel config)
169endif
170
David Howellsd4411082012-09-26 10:09:51 +0100171signing_key.priv signing_key.x509: x509.genkey
172 @echo "###"
173 @echo "### Now generating an X.509 key pair to be used for signing modules."
174 @echo "###"
175 @echo "### If this takes a long time, you might wish to run rngd in the"
176 @echo "### background to keep the supply of entropy topped up. It"
H. Peter Anvin20087132012-10-24 14:11:48 -0700177 @echo "### needs to be run as root, and uses a hardware random"
178 @echo "### number generator if one is available."
David Howellsd4411082012-09-26 10:09:51 +0100179 @echo "###"
Michal Marek22753672013-01-25 13:41:00 +1030180 openssl req -new -nodes -utf8 -$(CONFIG_MODULE_SIG_HASH) -days 36500 \
181 -batch -x509 -config x509.genkey \
David Howellsd4411082012-09-26 10:09:51 +0100182 -outform DER -out signing_key.x509 \
David Cohen07c449b2013-04-11 13:22:14 +0930183 -keyout signing_key.priv 2>&1
David Howellsd4411082012-09-26 10:09:51 +0100184 @echo "###"
185 @echo "### Key pair generated."
186 @echo "###"
187
188x509.genkey:
189 @echo Generating X.509 key generation config
190 @echo >x509.genkey "[ req ]"
191 @echo >>x509.genkey "default_bits = 4096"
192 @echo >>x509.genkey "distinguished_name = req_distinguished_name"
193 @echo >>x509.genkey "prompt = no"
David Howellse7d113b2012-09-28 11:16:57 +0100194 @echo >>x509.genkey "string_mask = utf8only"
David Howellsd4411082012-09-26 10:09:51 +0100195 @echo >>x509.genkey "x509_extensions = myexts"
196 @echo >>x509.genkey
197 @echo >>x509.genkey "[ req_distinguished_name ]"
198 @echo >>x509.genkey "O = Magrathea"
199 @echo >>x509.genkey "CN = Glacier signing key"
200 @echo >>x509.genkey "emailAddress = slartibartfast@magrathea.h2g2"
201 @echo >>x509.genkey
202 @echo >>x509.genkey "[ myexts ]"
203 @echo >>x509.genkey "basicConstraints=critical,CA:FALSE"
204 @echo >>x509.genkey "keyUsage=digitalSignature"
205 @echo >>x509.genkey "subjectKeyIdentifier=hash"
206 @echo >>x509.genkey "authorityKeyIdentifier=keyid"
207endif