arch/tlb: Clean up simple architectures
[linux-block.git] / arch / Kconfig
CommitLineData
b2441318 1# SPDX-License-Identifier: GPL-2.0
fb32e03f
MD
2#
3# General architecture dependent options
4#
125e5645 5
1572497c
CH
6#
7# Note: arch/$(SRCARCH)/Kconfig needs to be included first so that it can
8# override the default values in this file.
9#
10source "arch/$(SRCARCH)/Kconfig"
11
22471e13
RD
12menu "General architecture-dependent options"
13
692f66f2
HB
14config CRASH_CORE
15 bool
16
2965faa5 17config KEXEC_CORE
692f66f2 18 select CRASH_CORE
2965faa5
DY
19 bool
20
467d2782
TJB
21config HAVE_IMA_KEXEC
22 bool
23
05736e4a
TG
24config HOTPLUG_SMT
25 bool
26
125e5645 27config OPROFILE
b309a294 28 tristate "OProfile system profiling"
125e5645
MD
29 depends on PROFILING
30 depends on HAVE_OPROFILE
d69d59f4 31 select RING_BUFFER
9a5963eb 32 select RING_BUFFER_ALLOW_SWAP
125e5645
MD
33 help
34 OProfile is a profiling system capable of profiling the
35 whole system, include the kernel, kernel modules, libraries,
36 and applications.
37
38 If unsure, say N.
39
4d4036e0
JY
40config OPROFILE_EVENT_MULTIPLEX
41 bool "OProfile multiplexing support (EXPERIMENTAL)"
42 default n
43 depends on OPROFILE && X86
44 help
45 The number of hardware counters is limited. The multiplexing
46 feature enables OProfile to gather more events than counters
47 are provided by the hardware. This is realized by switching
9332ef9d 48 between events at a user specified time interval.
4d4036e0
JY
49
50 If unsure, say N.
51
125e5645 52config HAVE_OPROFILE
9ba16087 53 bool
125e5645 54
dcfce4a0
RR
55config OPROFILE_NMI_TIMER
56 def_bool y
af9feebe 57 depends on PERF_EVENTS && HAVE_PERF_EVENTS_NMI && !PPC64
dcfce4a0 58
125e5645
MD
59config KPROBES
60 bool "Kprobes"
05ed160e 61 depends on MODULES
125e5645 62 depends on HAVE_KPROBES
05ed160e 63 select KALLSYMS
125e5645
MD
64 help
65 Kprobes allows you to trap at almost any kernel address and
66 execute a callback function. register_kprobe() establishes
67 a probepoint and specifies the callback. Kprobes is useful
68 for kernel debugging, non-intrusive instrumentation and testing.
69 If in doubt, say "N".
70
45f81b1c 71config JUMP_LABEL
c5905afb 72 bool "Optimize very unlikely/likely branches"
45f81b1c 73 depends on HAVE_ARCH_JUMP_LABEL
e9666d10 74 depends on CC_HAS_ASM_GOTO
45f81b1c 75 help
c5905afb
IM
76 This option enables a transparent branch optimization that
77 makes certain almost-always-true or almost-always-false branch
78 conditions even cheaper to execute within the kernel.
79
80 Certain performance-sensitive kernel code, such as trace points,
81 scheduler functionality, networking code and KVM have such
82 branches and include support for this optimization technique.
83
45f81b1c 84 If it is detected that the compiler has support for "asm goto",
c5905afb
IM
85 the kernel will compile such branches with just a nop
86 instruction. When the condition flag is toggled to true, the
87 nop will be converted to a jump instruction to execute the
88 conditional block of instructions.
89
90 This technique lowers overhead and stress on the branch prediction
91 of the processor and generally makes the kernel faster. The update
92 of the condition is slower, but those are always very rare.
45f81b1c 93
c5905afb
IM
94 ( On 32-bit x86, the necessary options added to the compiler
95 flags may increase the size of the kernel slightly. )
45f81b1c 96
1987c947
PZ
97config STATIC_KEYS_SELFTEST
98 bool "Static key selftest"
99 depends on JUMP_LABEL
100 help
101 Boot time self-test of the branch patching code.
102
afd66255 103config OPTPROBES
5cc718b9
MH
104 def_bool y
105 depends on KPROBES && HAVE_OPTPROBES
a30b85df 106 select TASKS_RCU if PREEMPT
afd66255 107
e7dbfe34
MH
108config KPROBES_ON_FTRACE
109 def_bool y
110 depends on KPROBES && HAVE_KPROBES_ON_FTRACE
111 depends on DYNAMIC_FTRACE_WITH_REGS
112 help
113 If function tracer is enabled and the arch supports full
114 passing of pt_regs to function tracing, then kprobes can
115 optimize on top of function tracing.
116
2b144498 117config UPROBES
09294e31 118 def_bool n
e8f4aa60 119 depends on ARCH_SUPPORTS_UPROBES
2b144498 120 help
7b2d81d4
IM
121 Uprobes is the user-space counterpart to kprobes: they
122 enable instrumentation applications (such as 'perf probe')
123 to establish unintrusive probes in user-space binaries and
124 libraries, by executing handler functions when the probes
125 are hit by user-space applications.
126
127 ( These probes come in the form of single-byte breakpoints,
128 managed by the kernel and kept transparent to the probed
129 application. )
2b144498 130
c19fa94a
JH
131config HAVE_64BIT_ALIGNED_ACCESS
132 def_bool 64BIT && !HAVE_EFFICIENT_UNALIGNED_ACCESS
133 help
134 Some architectures require 64 bit accesses to be 64 bit
135 aligned, which also requires structs containing 64 bit values
136 to be 64 bit aligned too. This includes some 32 bit
137 architectures which can do 64 bit accesses, as well as 64 bit
138 architectures without unaligned access.
139
140 This symbol should be selected by an architecture if 64 bit
141 accesses are required to be 64 bit aligned in this way even
142 though it is not a 64 bit architecture.
143
144 See Documentation/unaligned-memory-access.txt for more
145 information on the topic of unaligned memory accesses.
146
58340a07 147config HAVE_EFFICIENT_UNALIGNED_ACCESS
9ba16087 148 bool
58340a07
JB
149 help
150 Some architectures are unable to perform unaligned accesses
151 without the use of get_unaligned/put_unaligned. Others are
152 unable to perform such accesses efficiently (e.g. trap on
153 unaligned access and require fixing it up in the exception
154 handler.)
155
156 This symbol should be selected by an architecture if it can
157 perform unaligned accesses efficiently to allow different
158 code paths to be selected for these cases. Some network
159 drivers, for example, could opt to not fix up alignment
160 problems with received packets if doing so would not help
161 much.
162
163 See Documentation/unaligned-memory-access.txt for more
164 information on the topic of unaligned memory accesses.
165
cf66bb93
DW
166config ARCH_USE_BUILTIN_BSWAP
167 bool
168 help
169 Modern versions of GCC (since 4.4) have builtin functions
170 for handling byte-swapping. Using these, instead of the old
171 inline assembler that the architecture code provides in the
172 __arch_bswapXX() macros, allows the compiler to see what's
173 happening and offers more opportunity for optimisation. In
174 particular, the compiler will be able to combine the byteswap
175 with a nearby load or store and use load-and-swap or
176 store-and-swap instructions if the architecture has them. It
177 should almost *never* result in code which is worse than the
178 hand-coded assembler in <asm/swab.h>. But just in case it
179 does, the use of the builtins is optional.
180
181 Any architecture with load-and-swap or store-and-swap
182 instructions should set this. And it shouldn't hurt to set it
183 on architectures that don't have such instructions.
184
9edddaa2
AM
185config KRETPROBES
186 def_bool y
187 depends on KPROBES && HAVE_KRETPROBES
188
7c68af6e
AK
189config USER_RETURN_NOTIFIER
190 bool
191 depends on HAVE_USER_RETURN_NOTIFIER
192 help
193 Provide a kernel-internal notification when a cpu is about to
194 switch to user mode.
195
28b2ee20 196config HAVE_IOREMAP_PROT
9ba16087 197 bool
28b2ee20 198
125e5645 199config HAVE_KPROBES
9ba16087 200 bool
9edddaa2
AM
201
202config HAVE_KRETPROBES
9ba16087 203 bool
74bc7cee 204
afd66255
MH
205config HAVE_OPTPROBES
206 bool
d314d74c 207
e7dbfe34
MH
208config HAVE_KPROBES_ON_FTRACE
209 bool
210
540adea3 211config HAVE_FUNCTION_ERROR_INJECTION
9802d865
JB
212 bool
213
42a0bb3f
PM
214config HAVE_NMI
215 bool
216
1f5a4ad9
RM
217#
218# An arch should select this if it provides all these things:
219#
220# task_pt_regs() in asm/processor.h or asm/ptrace.h
221# arch_has_single_step() if there is hardware single-step support
222# arch_has_block_step() if there is hardware block-step support
1f5a4ad9
RM
223# asm/syscall.h supplying asm-generic/syscall.h interface
224# linux/regset.h user_regset interfaces
225# CORE_DUMP_USE_REGSET #define'd in linux/elf.h
226# TIF_SYSCALL_TRACE calls tracehook_report_syscall_{entry,exit}
227# TIF_NOTIFY_RESUME calls tracehook_notify_resume()
228# signal delivery calls tracehook_signal_handler()
229#
230config HAVE_ARCH_TRACEHOOK
9ba16087 231 bool
1f5a4ad9 232
c64be2bb
MS
233config HAVE_DMA_CONTIGUOUS
234 bool
235
29d5e047
TG
236config GENERIC_SMP_IDLE_THREAD
237 bool
238
485cf5da
KH
239config GENERIC_IDLE_POLL_SETUP
240 bool
241
6974f0c4
DM
242config ARCH_HAS_FORTIFY_SOURCE
243 bool
244 help
245 An architecture should select this when it can successfully
246 build and run with CONFIG_FORTIFY_SOURCE.
247
d2852a22
DB
248# Select if arch has all set_memory_ro/rw/x/nx() functions in asm/cacheflush.h
249config ARCH_HAS_SET_MEMORY
250 bool
251
0500871f
DH
252# Select if arch init_task must go in the __init_task_data section
253config ARCH_TASK_STRUCT_ON_STACK
a4a2eb49
TG
254 bool
255
f5e10287
TG
256# Select if arch has its private alloc_task_struct() function
257config ARCH_TASK_STRUCT_ALLOCATOR
258 bool
259
5905429a
KC
260config HAVE_ARCH_THREAD_STRUCT_WHITELIST
261 bool
262 depends on !ARCH_TASK_STRUCT_ALLOCATOR
263 help
264 An architecture should select this to provide hardened usercopy
265 knowledge about what region of the thread_struct should be
266 whitelisted for copying to userspace. Normally this is only the
267 FPU registers. Specifically, arch_thread_struct_whitelist()
268 should be implemented. Without this, the entire thread_struct
269 field in task_struct will be left whitelisted.
270
b235beea
LT
271# Select if arch has its private alloc_thread_stack() function
272config ARCH_THREAD_STACK_ALLOCATOR
f5e10287
TG
273 bool
274
5aaeb5c0
IM
275# Select if arch wants to size task_struct dynamically via arch_task_struct_size:
276config ARCH_WANTS_DYNAMIC_TASK_STRUCT
277 bool
278
942fa985
YN
279config ARCH_32BIT_OFF_T
280 bool
281 depends on !64BIT
282 help
283 All new 32-bit architectures should have 64-bit off_t type on
284 userspace side which corresponds to the loff_t kernel type. This
285 is the requirement for modern ABIs. Some existing architectures
286 still support 32-bit off_t. This option is enabled for all such
287 architectures explicitly.
288
f850c30c
HC
289config HAVE_REGS_AND_STACK_ACCESS_API
290 bool
e01292b1
HC
291 help
292 This symbol should be selected by an architecure if it supports
293 the API needed to access registers and stack entries from pt_regs,
294 declared in asm/ptrace.h
295 For example the kprobes-based event tracer needs this API.
f850c30c 296
d7822b1e
MD
297config HAVE_RSEQ
298 bool
299 depends on HAVE_REGS_AND_STACK_ACCESS_API
300 help
301 This symbol should be selected by an architecture if it
302 supports an implementation of restartable sequences.
303
3c88ee19
MH
304config HAVE_FUNCTION_ARG_ACCESS_API
305 bool
306 help
307 This symbol should be selected by an architecure if it supports
308 the API needed to access function arguments from pt_regs,
309 declared in asm/ptrace.h
310
9483a578 311config HAVE_CLK
9ba16087 312 bool
9483a578
DB
313 help
314 The <linux/clk.h> calls support software clock gating and
315 thus are a key power management tool on many systems.
316
62a038d3
P
317config HAVE_HW_BREAKPOINT
318 bool
99e8c5a3 319 depends on PERF_EVENTS
62a038d3 320
0102752e
FW
321config HAVE_MIXED_BREAKPOINTS_REGS
322 bool
323 depends on HAVE_HW_BREAKPOINT
324 help
325 Depending on the arch implementation of hardware breakpoints,
326 some of them have separate registers for data and instruction
327 breakpoints addresses, others have mixed registers to store
328 them but define the access type in a control register.
329 Select this option if your arch implements breakpoints under the
330 latter fashion.
331
7c68af6e
AK
332config HAVE_USER_RETURN_NOTIFIER
333 bool
a1922ed6 334
c01d4323
FW
335config HAVE_PERF_EVENTS_NMI
336 bool
23637d47
FW
337 help
338 System hardware can generate an NMI using the perf event
339 subsystem. Also has support for calculating CPU cycle events
340 to determine how many clock cycles in a given period.
c01d4323 341
05a4a952
NP
342config HAVE_HARDLOCKUP_DETECTOR_PERF
343 bool
344 depends on HAVE_PERF_EVENTS_NMI
345 help
346 The arch chooses to use the generic perf-NMI-based hardlockup
347 detector. Must define HAVE_PERF_EVENTS_NMI.
348
349config HAVE_NMI_WATCHDOG
350 depends on HAVE_NMI
351 bool
352 help
353 The arch provides a low level NMI watchdog. It provides
354 asm/nmi.h, and defines its own arch_touch_nmi_watchdog().
355
356config HAVE_HARDLOCKUP_DETECTOR_ARCH
357 bool
358 select HAVE_NMI_WATCHDOG
359 help
360 The arch chooses to provide its own hardlockup detector, which is
361 a superset of the HAVE_NMI_WATCHDOG. It also conforms to config
362 interfaces and parameters provided by hardlockup detector subsystem.
363
c5e63197
JO
364config HAVE_PERF_REGS
365 bool
366 help
367 Support selective register dumps for perf events. This includes
368 bit-mapping of each registers and a unique architecture id.
369
c5ebcedb
JO
370config HAVE_PERF_USER_STACK_DUMP
371 bool
372 help
373 Support user stack dumps for perf event samples. This needs
374 access to the user stack pointer which is not unified across
375 architectures.
376
bf5438fc
JB
377config HAVE_ARCH_JUMP_LABEL
378 bool
379
50ff18ab
AB
380config HAVE_ARCH_JUMP_LABEL_RELATIVE
381 bool
382
26723911
PZ
383config HAVE_RCU_TABLE_FREE
384 bool
385
96bc9567 386config HAVE_RCU_TABLE_NO_INVALIDATE
d86564a2
PZ
387 bool
388
ed6a7935
PZ
389config HAVE_MMU_GATHER_PAGE_SIZE
390 bool
391
df013ffb
HY
392config ARCH_HAVE_NMI_SAFE_CMPXCHG
393 bool
394
43570fd2
HC
395config HAVE_ALIGNED_STRUCT_PAGE
396 bool
397 help
398 This makes sure that struct pages are double word aligned and that
399 e.g. the SLUB allocator can perform double word atomic operations
400 on a struct page for better performance. However selecting this
401 might increase the size of a struct page by a word.
402
4156153c
HC
403config HAVE_CMPXCHG_LOCAL
404 bool
405
2565409f
HC
406config HAVE_CMPXCHG_DOUBLE
407 bool
408
77e58496
PM
409config ARCH_WEAK_RELEASE_ACQUIRE
410 bool
411
c1d7e01d
WD
412config ARCH_WANT_IPC_PARSE_VERSION
413 bool
414
415config ARCH_WANT_COMPAT_IPC_PARSE_VERSION
416 bool
417
48b25c43 418config ARCH_WANT_OLD_COMPAT_IPC
c1d7e01d 419 select ARCH_WANT_COMPAT_IPC_PARSE_VERSION
48b25c43
CM
420 bool
421
e2cfabdf
WD
422config HAVE_ARCH_SECCOMP_FILTER
423 bool
424 help
fb0fadf9 425 An arch should select this symbol if it provides all of these things:
bb6ea430
WD
426 - syscall_get_arch()
427 - syscall_get_arguments()
428 - syscall_rollback()
429 - syscall_set_return_value()
fb0fadf9
WD
430 - SIGSYS siginfo_t support
431 - secure_computing is called from a ptrace_event()-safe context
432 - secure_computing return value is checked and a return value of -1
433 results in the system call being skipped immediately.
48dc92b9 434 - seccomp syscall wired up
e2cfabdf
WD
435
436config SECCOMP_FILTER
437 def_bool y
438 depends on HAVE_ARCH_SECCOMP_FILTER && SECCOMP && NET
439 help
440 Enable tasks to build secure computing environments defined
441 in terms of Berkeley Packet Filter programs which implement
442 task-defined system call filtering polices.
443
5fb94e9c 444 See Documentation/userspace-api/seccomp_filter.rst for details.
e2cfabdf 445
afaef01c
AP
446config HAVE_ARCH_STACKLEAK
447 bool
448 help
449 An architecture should select this if it has the code which
450 fills the used part of the kernel stack with the STACKLEAK_POISON
451 value before returning from system calls.
452
d148eac0 453config HAVE_STACKPROTECTOR
19952a92
KC
454 bool
455 help
456 An arch should select this symbol if:
19952a92
KC
457 - it has implemented a stack canary (e.g. __stack_chk_guard)
458
2a61f474
MY
459config CC_HAS_STACKPROTECTOR_NONE
460 def_bool $(cc-option,-fno-stack-protector)
461
050e9baa 462config STACKPROTECTOR
2a61f474 463 bool "Stack Protector buffer overflow detection"
d148eac0 464 depends on HAVE_STACKPROTECTOR
2a61f474
MY
465 depends on $(cc-option,-fstack-protector)
466 default y
19952a92 467 help
8779657d 468 This option turns on the "stack-protector" GCC feature. This
19952a92
KC
469 feature puts, at the beginning of functions, a canary value on
470 the stack just before the return address, and validates
471 the value just before actually returning. Stack based buffer
472 overflows (that need to overwrite this return address) now also
473 overwrite the canary, which gets detected and the attack is then
474 neutralized via a kernel panic.
475
8779657d
KC
476 Functions will have the stack-protector canary logic added if they
477 have an 8-byte or larger character array on the stack.
478
19952a92 479 This feature requires gcc version 4.2 or above, or a distribution
8779657d
KC
480 gcc with the feature backported ("-fstack-protector").
481
482 On an x86 "defconfig" build, this feature adds canary checks to
483 about 3% of all kernel functions, which increases kernel code size
484 by about 0.3%.
485
050e9baa 486config STACKPROTECTOR_STRONG
2a61f474 487 bool "Strong Stack Protector"
050e9baa 488 depends on STACKPROTECTOR
2a61f474
MY
489 depends on $(cc-option,-fstack-protector-strong)
490 default y
8779657d
KC
491 help
492 Functions will have the stack-protector canary logic added in any
493 of the following conditions:
494
495 - local variable's address used as part of the right hand side of an
496 assignment or function argument
497 - local variable is an array (or union containing an array),
498 regardless of array type or length
499 - uses register local variables
500
501 This feature requires gcc version 4.9 or above, or a distribution
502 gcc with the feature backported ("-fstack-protector-strong").
503
504 On an x86 "defconfig" build, this feature adds canary checks to
505 about 20% of all kernel functions, which increases the kernel code
506 size by about 2%.
507
0f60a8ef
KC
508config HAVE_ARCH_WITHIN_STACK_FRAMES
509 bool
510 help
511 An architecture should select this if it can walk the kernel stack
512 frames to determine if an object is part of either the arguments
513 or local variables (i.e. that it excludes saved return addresses,
514 and similar) by implementing an inline arch_within_stack_frames(),
515 which is used by CONFIG_HARDENED_USERCOPY.
516
91d1aa43 517config HAVE_CONTEXT_TRACKING
2b1d5024
FW
518 bool
519 help
91d1aa43
FW
520 Provide kernel/user boundaries probes necessary for subsystems
521 that need it, such as userspace RCU extended quiescent state.
522 Syscalls need to be wrapped inside user_exit()-user_enter() through
523 the slow path using TIF_NOHZ flag. Exceptions handlers must be
524 wrapped as well. Irqs are already protected inside
525 rcu_irq_enter/rcu_irq_exit() but preemption or signal handling on
526 irq exit still need to be protected.
2b1d5024 527
b952741c
FW
528config HAVE_VIRT_CPU_ACCOUNTING
529 bool
530
40565b5a
SG
531config ARCH_HAS_SCALED_CPUTIME
532 bool
533
554b0004
KH
534config HAVE_VIRT_CPU_ACCOUNTING_GEN
535 bool
536 default y if 64BIT
537 help
538 With VIRT_CPU_ACCOUNTING_GEN, cputime_t becomes 64-bit.
539 Before enabling this option, arch code must be audited
540 to ensure there are no races in concurrent read/write of
541 cputime_t. For example, reading/writing 64-bit cputime_t on
542 some 32-bit arches may require multiple accesses, so proper
543 locking is needed to protect against concurrent accesses.
544
545
fdf9c356
FW
546config HAVE_IRQ_TIME_ACCOUNTING
547 bool
548 help
549 Archs need to ensure they use a high enough resolution clock to
550 support irq time accounting and then call enable_sched_clock_irqtime().
551
2c91bd4a
JFG
552config HAVE_MOVE_PMD
553 bool
554 help
555 Archs that select this are able to move page tables at the PMD level.
556
15626062
GS
557config HAVE_ARCH_TRANSPARENT_HUGEPAGE
558 bool
559
a00cc7d9
MW
560config HAVE_ARCH_TRANSPARENT_HUGEPAGE_PUD
561 bool
562
0ddab1d2
TK
563config HAVE_ARCH_HUGE_VMAP
564 bool
565
0f8975ec
PE
566config HAVE_ARCH_SOFT_DIRTY
567 bool
568
786d35d4
DH
569config HAVE_MOD_ARCH_SPECIFIC
570 bool
571 help
572 The arch uses struct mod_arch_specific to store data. Many arches
573 just need a simple module loader without arch specific data - those
574 should not enable this.
575
576config MODULES_USE_ELF_RELA
577 bool
578 help
579 Modules only use ELF RELA relocations. Modules with ELF REL
580 relocations will give an error.
581
582config MODULES_USE_ELF_REL
583 bool
584 help
585 Modules only use ELF REL relocations. Modules with ELF RELA
586 relocations will give an error.
587
cc1f0274
FW
588config HAVE_IRQ_EXIT_ON_IRQ_STACK
589 bool
590 help
591 Architecture doesn't only execute the irq handler on the irq stack
592 but also irq_exit(). This way we can process softirqs on this irq
593 stack instead of switching to a new one when we call __do_softirq()
594 in the end of an hardirq.
595 This spares a stack switch and improves cache usage on softirq
596 processing.
597
235a8f02
KS
598config PGTABLE_LEVELS
599 int
600 default 2
601
2b68f6ca
KC
602config ARCH_HAS_ELF_RANDOMIZE
603 bool
604 help
605 An architecture supports choosing randomized locations for
606 stack, mmap, brk, and ET_DYN. Defined functions:
607 - arch_mmap_rnd()
204db6ed 608 - arch_randomize_brk()
2b68f6ca 609
d07e2259
DC
610config HAVE_ARCH_MMAP_RND_BITS
611 bool
612 help
613 An arch should select this symbol if it supports setting a variable
614 number of bits for use in establishing the base address for mmap
615 allocations, has MMU enabled and provides values for both:
616 - ARCH_MMAP_RND_BITS_MIN
617 - ARCH_MMAP_RND_BITS_MAX
618
5f56a5df
JS
619config HAVE_EXIT_THREAD
620 bool
621 help
622 An architecture implements exit_thread.
623
d07e2259
DC
624config ARCH_MMAP_RND_BITS_MIN
625 int
626
627config ARCH_MMAP_RND_BITS_MAX
628 int
629
630config ARCH_MMAP_RND_BITS_DEFAULT
631 int
632
633config ARCH_MMAP_RND_BITS
634 int "Number of bits to use for ASLR of mmap base address" if EXPERT
635 range ARCH_MMAP_RND_BITS_MIN ARCH_MMAP_RND_BITS_MAX
636 default ARCH_MMAP_RND_BITS_DEFAULT if ARCH_MMAP_RND_BITS_DEFAULT
637 default ARCH_MMAP_RND_BITS_MIN
638 depends on HAVE_ARCH_MMAP_RND_BITS
639 help
640 This value can be used to select the number of bits to use to
641 determine the random offset to the base address of vma regions
642 resulting from mmap allocations. This value will be bounded
643 by the architecture's minimum and maximum supported values.
644
645 This value can be changed after boot using the
646 /proc/sys/vm/mmap_rnd_bits tunable
647
648config HAVE_ARCH_MMAP_RND_COMPAT_BITS
649 bool
650 help
651 An arch should select this symbol if it supports running applications
652 in compatibility mode, supports setting a variable number of bits for
653 use in establishing the base address for mmap allocations, has MMU
654 enabled and provides values for both:
655 - ARCH_MMAP_RND_COMPAT_BITS_MIN
656 - ARCH_MMAP_RND_COMPAT_BITS_MAX
657
658config ARCH_MMAP_RND_COMPAT_BITS_MIN
659 int
660
661config ARCH_MMAP_RND_COMPAT_BITS_MAX
662 int
663
664config ARCH_MMAP_RND_COMPAT_BITS_DEFAULT
665 int
666
667config ARCH_MMAP_RND_COMPAT_BITS
668 int "Number of bits to use for ASLR of mmap base address for compatible applications" if EXPERT
669 range ARCH_MMAP_RND_COMPAT_BITS_MIN ARCH_MMAP_RND_COMPAT_BITS_MAX
670 default ARCH_MMAP_RND_COMPAT_BITS_DEFAULT if ARCH_MMAP_RND_COMPAT_BITS_DEFAULT
671 default ARCH_MMAP_RND_COMPAT_BITS_MIN
672 depends on HAVE_ARCH_MMAP_RND_COMPAT_BITS
673 help
674 This value can be used to select the number of bits to use to
675 determine the random offset to the base address of vma regions
676 resulting from mmap allocations for compatible applications This
677 value will be bounded by the architecture's minimum and maximum
678 supported values.
679
680 This value can be changed after boot using the
681 /proc/sys/vm/mmap_rnd_compat_bits tunable
682
1b028f78
DS
683config HAVE_ARCH_COMPAT_MMAP_BASES
684 bool
685 help
686 This allows 64bit applications to invoke 32-bit mmap() syscall
687 and vice-versa 32-bit applications to call 64-bit mmap().
688 Required for applications doing different bitness syscalls.
689
3033f14a
JT
690config HAVE_COPY_THREAD_TLS
691 bool
692 help
693 Architecture provides copy_thread_tls to accept tls argument via
694 normal C parameter passing, rather than extracting the syscall
695 argument from pt_regs.
696
b9ab5ebb
JP
697config HAVE_STACK_VALIDATION
698 bool
699 help
700 Architecture supports the 'objtool check' host tool command, which
701 performs compile-time stack metadata validation.
702
af085d90
JP
703config HAVE_RELIABLE_STACKTRACE
704 bool
705 help
706 Architecture has a save_stack_trace_tsk_reliable() function which
707 only returns a stack trace if it can guarantee the trace is reliable.
708
468a9428
GS
709config HAVE_ARCH_HASH
710 bool
711 default n
712 help
713 If this is set, the architecture provides an <asm/hash.h>
714 file which provides platform-specific implementations of some
715 functions in <linux/hash.h> or fs/namei.c.
716
666047fe
FT
717config HAVE_ARCH_NVRAM_OPS
718 bool
719
3a495511
WBG
720config ISA_BUS_API
721 def_bool ISA
722
d2125043
AV
723#
724# ABI hall of shame
725#
726config CLONE_BACKWARDS
727 bool
728 help
729 Architecture has tls passed as the 4th argument of clone(2),
730 not the 5th one.
731
732config CLONE_BACKWARDS2
733 bool
734 help
735 Architecture has the first two arguments of clone(2) swapped.
736
dfa9771a
MS
737config CLONE_BACKWARDS3
738 bool
739 help
740 Architecture has tls passed as the 3rd argument of clone(2),
741 not the 5th one.
742
eaca6eae
AV
743config ODD_RT_SIGACTION
744 bool
745 help
746 Architecture has unusual rt_sigaction(2) arguments
747
0a0e8cdf
AV
748config OLD_SIGSUSPEND
749 bool
750 help
751 Architecture has old sigsuspend(2) syscall, of one-argument variety
752
753config OLD_SIGSUSPEND3
754 bool
755 help
756 Even weirder antique ABI - three-argument sigsuspend(2)
757
495dfbf7
AV
758config OLD_SIGACTION
759 bool
760 help
761 Architecture has old sigaction(2) syscall. Nope, not the same
762 as OLD_SIGSUSPEND | OLD_SIGSUSPEND3 - alpha has sigsuspend(2),
763 but fairly different variant of sigaction(2), thanks to OSF/1
764 compatibility...
765
766config COMPAT_OLD_SIGACTION
767 bool
768
d4703dda
DD
769config 64BIT_TIME
770 def_bool ARCH_HAS_64BIT_TIME
771 help
772 This should be selected by all architectures that need to support
773 new system calls with a 64-bit time_t. This is relevant on all 32-bit
774 architectures, and 64-bit architectures as part of compat syscall
775 handling.
776
17435e5f 777config COMPAT_32BIT_TIME
00bf25d6 778 def_bool !64BIT || COMPAT
17435e5f
DD
779 help
780 This enables 32 bit time_t support in addition to 64 bit time_t support.
781 This is relevant on all 32-bit architectures, and 64-bit architectures
782 as part of compat syscall handling.
783
0d4a619b
CH
784config ARCH_NO_COHERENT_DMA_MMAP
785 bool
786
87a4c375
CH
787config ARCH_NO_PREEMPT
788 bool
789
fff7fb0b
ZZ
790config CPU_NO_EFFICIENT_FFS
791 def_bool n
792
ba14a194
AL
793config HAVE_ARCH_VMAP_STACK
794 def_bool n
795 help
796 An arch should select this symbol if it can support kernel stacks
797 in vmalloc space. This means:
798
799 - vmalloc space must be large enough to hold many kernel stacks.
800 This may rule out many 32-bit architectures.
801
802 - Stacks in vmalloc space need to work reliably. For example, if
803 vmap page tables are created on demand, either this mechanism
804 needs to work while the stack points to a virtual address with
805 unpopulated page tables or arch code (switch_to() and switch_mm(),
806 most likely) needs to ensure that the stack's page table entries
807 are populated before running on a possibly unpopulated stack.
808
809 - If the stack overflows into a guard page, something reasonable
810 should happen. The definition of "reasonable" is flexible, but
811 instantly rebooting without logging anything would be unfriendly.
812
813config VMAP_STACK
814 default y
815 bool "Use a virtually-mapped stack"
816 depends on HAVE_ARCH_VMAP_STACK && !KASAN
817 ---help---
818 Enable this if you want the use virtually-mapped kernel stacks
819 with guard pages. This causes kernel stack overflows to be
820 caught immediately rather than causing difficult-to-diagnose
821 corruption.
822
823 This is presently incompatible with KASAN because KASAN expects
824 the stack to map directly to the KASAN shadow map using a formula
825 that is incorrect if the stack is in vmalloc space.
826
ad21fc4f
LA
827config ARCH_OPTIONAL_KERNEL_RWX
828 def_bool n
829
830config ARCH_OPTIONAL_KERNEL_RWX_DEFAULT
831 def_bool n
832
833config ARCH_HAS_STRICT_KERNEL_RWX
834 def_bool n
835
0f5bf6d0 836config STRICT_KERNEL_RWX
ad21fc4f
LA
837 bool "Make kernel text and rodata read-only" if ARCH_OPTIONAL_KERNEL_RWX
838 depends on ARCH_HAS_STRICT_KERNEL_RWX
839 default !ARCH_OPTIONAL_KERNEL_RWX || ARCH_OPTIONAL_KERNEL_RWX_DEFAULT
840 help
841 If this is set, kernel text and rodata memory will be made read-only,
842 and non-text memory will be made non-executable. This provides
843 protection against certain security exploits (e.g. executing the heap
844 or modifying text)
845
846 These features are considered standard security practice these days.
847 You should say Y here in almost all cases.
848
849config ARCH_HAS_STRICT_MODULE_RWX
850 def_bool n
851
0f5bf6d0 852config STRICT_MODULE_RWX
ad21fc4f
LA
853 bool "Set loadable kernel module data as NX and text as RO" if ARCH_OPTIONAL_KERNEL_RWX
854 depends on ARCH_HAS_STRICT_MODULE_RWX && MODULES
855 default !ARCH_OPTIONAL_KERNEL_RWX || ARCH_OPTIONAL_KERNEL_RWX_DEFAULT
856 help
857 If this is set, module text and rodata memory will be made read-only,
858 and non-text memory will be made non-executable. This provides
859 protection against certain security exploits (e.g. writing to text)
860
ea8c64ac
CH
861# select if the architecture provides an asm/dma-direct.h header
862config ARCH_HAS_PHYS_TO_DMA
863 bool
864
7a46ec0e
KC
865config ARCH_HAS_REFCOUNT
866 bool
867 help
868 An architecture selects this when it has implemented refcount_t
869 using open coded assembly primitives that provide an optimized
870 refcount_t implementation, possibly at the expense of some full
871 refcount state checks of CONFIG_REFCOUNT_FULL=y.
872
873 The refcount overflow check behavior, however, must be retained.
874 Catching overflows is the primary security concern for protecting
875 against bugs in reference counts.
876
fd25d19f
KC
877config REFCOUNT_FULL
878 bool "Perform full reference count validation at the expense of speed"
879 help
880 Enabling this switches the refcounting infrastructure from a fast
881 unchecked atomic_t implementation to a fully state checked
882 implementation, which can be (slightly) slower but provides protections
883 against various use-after-free conditions that can be used in
884 security flaw exploits.
885
04f264d3
PB
886config HAVE_ARCH_COMPILER_H
887 bool
888 help
889 An architecture can select this if it provides an
890 asm/compiler.h header that should be included after
891 linux/compiler-*.h in order to override macro definitions that those
892 headers generally provide.
893
271ca788
AB
894config HAVE_ARCH_PREL32_RELOCATIONS
895 bool
896 help
897 May be selected by an architecture if it supports place-relative
898 32-bit relocations, both in the toolchain and in the module loader,
899 in which case relative references can be used in special sections
900 for PCI fixup, initcalls etc which are only half the size on 64 bit
901 architectures, and don't require runtime relocation on relocatable
902 kernels.
903
ce9084ba
AB
904config ARCH_USE_MEMREMAP_PROT
905 bool
906
2521f2c2 907source "kernel/gcov/Kconfig"
45332b1b
MY
908
909source "scripts/gcc-plugins/Kconfig"
fa1b5d09 910
22471e13 911endmenu