s390,alpha: switch to 64-bit ino_t
[linux-2.6-block.git] / arch / Kconfig
CommitLineData
b2441318 1# SPDX-License-Identifier: GPL-2.0
fb32e03f
MD
2#
3# General architecture dependent options
4#
125e5645 5
1572497c
CH
6#
7# Note: arch/$(SRCARCH)/Kconfig needs to be included first so that it can
8# override the default values in this file.
9#
10source "arch/$(SRCARCH)/Kconfig"
11
22471e13
RD
12menu "General architecture-dependent options"
13
692f66f2
HB
14config CRASH_CORE
15 bool
16
2965faa5 17config KEXEC_CORE
692f66f2 18 select CRASH_CORE
2965faa5
DY
19 bool
20
175fca3b
SS
21config KEXEC_ELF
22 bool
23
467d2782
TJB
24config HAVE_IMA_KEXEC
25 bool
26
5e6e9852
CH
27config SET_FS
28 bool
29
05736e4a
TG
30config HOTPLUG_SMT
31 bool
32
142781e1
TG
33config GENERIC_ENTRY
34 bool
35
125e5645 36config OPROFILE
b309a294 37 tristate "OProfile system profiling"
125e5645
MD
38 depends on PROFILING
39 depends on HAVE_OPROFILE
d69d59f4 40 select RING_BUFFER
9a5963eb 41 select RING_BUFFER_ALLOW_SWAP
125e5645
MD
42 help
43 OProfile is a profiling system capable of profiling the
44 whole system, include the kernel, kernel modules, libraries,
45 and applications.
46
47 If unsure, say N.
48
4d4036e0
JY
49config OPROFILE_EVENT_MULTIPLEX
50 bool "OProfile multiplexing support (EXPERIMENTAL)"
51 default n
52 depends on OPROFILE && X86
53 help
54 The number of hardware counters is limited. The multiplexing
55 feature enables OProfile to gather more events than counters
56 are provided by the hardware. This is realized by switching
9332ef9d 57 between events at a user specified time interval.
4d4036e0
JY
58
59 If unsure, say N.
60
125e5645 61config HAVE_OPROFILE
9ba16087 62 bool
125e5645 63
dcfce4a0
RR
64config OPROFILE_NMI_TIMER
65 def_bool y
af9feebe 66 depends on PERF_EVENTS && HAVE_PERF_EVENTS_NMI && !PPC64
dcfce4a0 67
125e5645
MD
68config KPROBES
69 bool "Kprobes"
05ed160e 70 depends on MODULES
125e5645 71 depends on HAVE_KPROBES
05ed160e 72 select KALLSYMS
125e5645
MD
73 help
74 Kprobes allows you to trap at almost any kernel address and
75 execute a callback function. register_kprobe() establishes
76 a probepoint and specifies the callback. Kprobes is useful
77 for kernel debugging, non-intrusive instrumentation and testing.
78 If in doubt, say "N".
79
45f81b1c 80config JUMP_LABEL
24b54fee
KK
81 bool "Optimize very unlikely/likely branches"
82 depends on HAVE_ARCH_JUMP_LABEL
83 depends on CC_HAS_ASM_GOTO
84 help
85 This option enables a transparent branch optimization that
c5905afb
IM
86 makes certain almost-always-true or almost-always-false branch
87 conditions even cheaper to execute within the kernel.
88
89 Certain performance-sensitive kernel code, such as trace points,
90 scheduler functionality, networking code and KVM have such
91 branches and include support for this optimization technique.
92
24b54fee 93 If it is detected that the compiler has support for "asm goto",
c5905afb
IM
94 the kernel will compile such branches with just a nop
95 instruction. When the condition flag is toggled to true, the
96 nop will be converted to a jump instruction to execute the
97 conditional block of instructions.
98
99 This technique lowers overhead and stress on the branch prediction
100 of the processor and generally makes the kernel faster. The update
101 of the condition is slower, but those are always very rare.
45f81b1c 102
c5905afb
IM
103 ( On 32-bit x86, the necessary options added to the compiler
104 flags may increase the size of the kernel slightly. )
45f81b1c 105
1987c947
PZ
106config STATIC_KEYS_SELFTEST
107 bool "Static key selftest"
108 depends on JUMP_LABEL
109 help
110 Boot time self-test of the branch patching code.
111
f03c4129
PZ
112config STATIC_CALL_SELFTEST
113 bool "Static call selftest"
114 depends on HAVE_STATIC_CALL
115 help
116 Boot time self-test of the call patching code.
117
afd66255 118config OPTPROBES
5cc718b9
MH
119 def_bool y
120 depends on KPROBES && HAVE_OPTPROBES
01b1d88b 121 select TASKS_RCU if PREEMPTION
afd66255 122
e7dbfe34
MH
123config KPROBES_ON_FTRACE
124 def_bool y
125 depends on KPROBES && HAVE_KPROBES_ON_FTRACE
126 depends on DYNAMIC_FTRACE_WITH_REGS
127 help
128 If function tracer is enabled and the arch supports full
129 passing of pt_regs to function tracing, then kprobes can
130 optimize on top of function tracing.
131
2b144498 132config UPROBES
09294e31 133 def_bool n
e8f4aa60 134 depends on ARCH_SUPPORTS_UPROBES
2b144498 135 help
7b2d81d4
IM
136 Uprobes is the user-space counterpart to kprobes: they
137 enable instrumentation applications (such as 'perf probe')
138 to establish unintrusive probes in user-space binaries and
139 libraries, by executing handler functions when the probes
140 are hit by user-space applications.
141
142 ( These probes come in the form of single-byte breakpoints,
143 managed by the kernel and kept transparent to the probed
144 application. )
2b144498 145
adab66b7
SRV
146config HAVE_64BIT_ALIGNED_ACCESS
147 def_bool 64BIT && !HAVE_EFFICIENT_UNALIGNED_ACCESS
148 help
149 Some architectures require 64 bit accesses to be 64 bit
150 aligned, which also requires structs containing 64 bit values
151 to be 64 bit aligned too. This includes some 32 bit
152 architectures which can do 64 bit accesses, as well as 64 bit
153 architectures without unaligned access.
154
155 This symbol should be selected by an architecture if 64 bit
156 accesses are required to be 64 bit aligned in this way even
157 though it is not a 64 bit architecture.
158
159 See Documentation/unaligned-memory-access.txt for more
160 information on the topic of unaligned memory accesses.
161
58340a07 162config HAVE_EFFICIENT_UNALIGNED_ACCESS
9ba16087 163 bool
58340a07
JB
164 help
165 Some architectures are unable to perform unaligned accesses
166 without the use of get_unaligned/put_unaligned. Others are
167 unable to perform such accesses efficiently (e.g. trap on
168 unaligned access and require fixing it up in the exception
169 handler.)
170
171 This symbol should be selected by an architecture if it can
172 perform unaligned accesses efficiently to allow different
173 code paths to be selected for these cases. Some network
174 drivers, for example, could opt to not fix up alignment
175 problems with received packets if doing so would not help
176 much.
177
c9b54d6f 178 See Documentation/core-api/unaligned-memory-access.rst for more
58340a07
JB
179 information on the topic of unaligned memory accesses.
180
cf66bb93 181config ARCH_USE_BUILTIN_BSWAP
24b54fee
KK
182 bool
183 help
cf66bb93
DW
184 Modern versions of GCC (since 4.4) have builtin functions
185 for handling byte-swapping. Using these, instead of the old
186 inline assembler that the architecture code provides in the
187 __arch_bswapXX() macros, allows the compiler to see what's
188 happening and offers more opportunity for optimisation. In
189 particular, the compiler will be able to combine the byteswap
190 with a nearby load or store and use load-and-swap or
191 store-and-swap instructions if the architecture has them. It
192 should almost *never* result in code which is worse than the
193 hand-coded assembler in <asm/swab.h>. But just in case it
194 does, the use of the builtins is optional.
195
196 Any architecture with load-and-swap or store-and-swap
197 instructions should set this. And it shouldn't hurt to set it
198 on architectures that don't have such instructions.
199
9edddaa2
AM
200config KRETPROBES
201 def_bool y
202 depends on KPROBES && HAVE_KRETPROBES
203
7c68af6e
AK
204config USER_RETURN_NOTIFIER
205 bool
206 depends on HAVE_USER_RETURN_NOTIFIER
207 help
208 Provide a kernel-internal notification when a cpu is about to
209 switch to user mode.
210
28b2ee20 211config HAVE_IOREMAP_PROT
9ba16087 212 bool
28b2ee20 213
125e5645 214config HAVE_KPROBES
9ba16087 215 bool
9edddaa2
AM
216
217config HAVE_KRETPROBES
9ba16087 218 bool
74bc7cee 219
afd66255
MH
220config HAVE_OPTPROBES
221 bool
d314d74c 222
e7dbfe34
MH
223config HAVE_KPROBES_ON_FTRACE
224 bool
225
540adea3 226config HAVE_FUNCTION_ERROR_INJECTION
9802d865
JB
227 bool
228
42a0bb3f
PM
229config HAVE_NMI
230 bool
231
1f5a4ad9
RM
232#
233# An arch should select this if it provides all these things:
234#
235# task_pt_regs() in asm/processor.h or asm/ptrace.h
236# arch_has_single_step() if there is hardware single-step support
237# arch_has_block_step() if there is hardware block-step support
1f5a4ad9
RM
238# asm/syscall.h supplying asm-generic/syscall.h interface
239# linux/regset.h user_regset interfaces
240# CORE_DUMP_USE_REGSET #define'd in linux/elf.h
241# TIF_SYSCALL_TRACE calls tracehook_report_syscall_{entry,exit}
242# TIF_NOTIFY_RESUME calls tracehook_notify_resume()
243# signal delivery calls tracehook_signal_handler()
244#
245config HAVE_ARCH_TRACEHOOK
9ba16087 246 bool
1f5a4ad9 247
c64be2bb
MS
248config HAVE_DMA_CONTIGUOUS
249 bool
250
29d5e047 251config GENERIC_SMP_IDLE_THREAD
24b54fee 252 bool
29d5e047 253
485cf5da 254config GENERIC_IDLE_POLL_SETUP
24b54fee 255 bool
485cf5da 256
6974f0c4
DM
257config ARCH_HAS_FORTIFY_SOURCE
258 bool
259 help
260 An architecture should select this when it can successfully
261 build and run with CONFIG_FORTIFY_SOURCE.
262
d8ae8a37
CH
263#
264# Select if the arch provides a historic keepinit alias for the retain_initrd
265# command line option
266#
267config ARCH_HAS_KEEPINITRD
268 bool
269
d2852a22
DB
270# Select if arch has all set_memory_ro/rw/x/nx() functions in asm/cacheflush.h
271config ARCH_HAS_SET_MEMORY
272 bool
273
d253ca0c
RE
274# Select if arch has all set_direct_map_invalid/default() functions
275config ARCH_HAS_SET_DIRECT_MAP
276 bool
277
c30700db 278#
fa7e2247 279# Select if the architecture provides the arch_dma_set_uncached symbol to
a86ecfa6 280# either provide an uncached segment alias for a DMA allocation, or
fa7e2247 281# to remap the page tables in place.
c30700db 282#
fa7e2247 283config ARCH_HAS_DMA_SET_UNCACHED
c30700db
CH
284 bool
285
999a5d12
CH
286#
287# Select if the architectures provides the arch_dma_clear_uncached symbol
288# to undo an in-place page table remap for uncached access.
289#
290config ARCH_HAS_DMA_CLEAR_UNCACHED
c30700db
CH
291 bool
292
0500871f
DH
293# Select if arch init_task must go in the __init_task_data section
294config ARCH_TASK_STRUCT_ON_STACK
24b54fee 295 bool
a4a2eb49 296
f5e10287
TG
297# Select if arch has its private alloc_task_struct() function
298config ARCH_TASK_STRUCT_ALLOCATOR
299 bool
300
5905429a
KC
301config HAVE_ARCH_THREAD_STRUCT_WHITELIST
302 bool
303 depends on !ARCH_TASK_STRUCT_ALLOCATOR
304 help
305 An architecture should select this to provide hardened usercopy
306 knowledge about what region of the thread_struct should be
307 whitelisted for copying to userspace. Normally this is only the
308 FPU registers. Specifically, arch_thread_struct_whitelist()
309 should be implemented. Without this, the entire thread_struct
310 field in task_struct will be left whitelisted.
311
b235beea
LT
312# Select if arch has its private alloc_thread_stack() function
313config ARCH_THREAD_STACK_ALLOCATOR
f5e10287
TG
314 bool
315
5aaeb5c0
IM
316# Select if arch wants to size task_struct dynamically via arch_task_struct_size:
317config ARCH_WANTS_DYNAMIC_TASK_STRUCT
318 bool
319
942fa985
YN
320config ARCH_32BIT_OFF_T
321 bool
322 depends on !64BIT
323 help
324 All new 32-bit architectures should have 64-bit off_t type on
325 userspace side which corresponds to the loff_t kernel type. This
326 is the requirement for modern ABIs. Some existing architectures
327 still support 32-bit off_t. This option is enabled for all such
328 architectures explicitly.
329
96c0a6a7
HC
330# Selected by 64 bit architectures which have a 32 bit f_tinode in struct ustat
331config ARCH_32BIT_USTAT_F_TINODE
332 bool
333
2ff2b7ec
MY
334config HAVE_ASM_MODVERSIONS
335 bool
336 help
a86ecfa6 337 This symbol should be selected by an architecture if it provides
2ff2b7ec
MY
338 <asm/asm-prototypes.h> to support the module versioning for symbols
339 exported from assembly code.
340
f850c30c
HC
341config HAVE_REGS_AND_STACK_ACCESS_API
342 bool
e01292b1 343 help
a86ecfa6 344 This symbol should be selected by an architecture if it supports
e01292b1
HC
345 the API needed to access registers and stack entries from pt_regs,
346 declared in asm/ptrace.h
347 For example the kprobes-based event tracer needs this API.
f850c30c 348
d7822b1e
MD
349config HAVE_RSEQ
350 bool
351 depends on HAVE_REGS_AND_STACK_ACCESS_API
352 help
353 This symbol should be selected by an architecture if it
354 supports an implementation of restartable sequences.
355
3c88ee19
MH
356config HAVE_FUNCTION_ARG_ACCESS_API
357 bool
358 help
a86ecfa6 359 This symbol should be selected by an architecture if it supports
3c88ee19
MH
360 the API needed to access function arguments from pt_regs,
361 declared in asm/ptrace.h
362
62a038d3
P
363config HAVE_HW_BREAKPOINT
364 bool
99e8c5a3 365 depends on PERF_EVENTS
62a038d3 366
0102752e
FW
367config HAVE_MIXED_BREAKPOINTS_REGS
368 bool
369 depends on HAVE_HW_BREAKPOINT
370 help
371 Depending on the arch implementation of hardware breakpoints,
372 some of them have separate registers for data and instruction
373 breakpoints addresses, others have mixed registers to store
374 them but define the access type in a control register.
375 Select this option if your arch implements breakpoints under the
376 latter fashion.
377
7c68af6e
AK
378config HAVE_USER_RETURN_NOTIFIER
379 bool
a1922ed6 380
c01d4323
FW
381config HAVE_PERF_EVENTS_NMI
382 bool
23637d47
FW
383 help
384 System hardware can generate an NMI using the perf event
385 subsystem. Also has support for calculating CPU cycle events
386 to determine how many clock cycles in a given period.
c01d4323 387
05a4a952
NP
388config HAVE_HARDLOCKUP_DETECTOR_PERF
389 bool
390 depends on HAVE_PERF_EVENTS_NMI
391 help
392 The arch chooses to use the generic perf-NMI-based hardlockup
393 detector. Must define HAVE_PERF_EVENTS_NMI.
394
395config HAVE_NMI_WATCHDOG
396 depends on HAVE_NMI
397 bool
398 help
399 The arch provides a low level NMI watchdog. It provides
400 asm/nmi.h, and defines its own arch_touch_nmi_watchdog().
401
402config HAVE_HARDLOCKUP_DETECTOR_ARCH
403 bool
404 select HAVE_NMI_WATCHDOG
405 help
406 The arch chooses to provide its own hardlockup detector, which is
407 a superset of the HAVE_NMI_WATCHDOG. It also conforms to config
408 interfaces and parameters provided by hardlockup detector subsystem.
409
c5e63197
JO
410config HAVE_PERF_REGS
411 bool
412 help
413 Support selective register dumps for perf events. This includes
414 bit-mapping of each registers and a unique architecture id.
415
c5ebcedb
JO
416config HAVE_PERF_USER_STACK_DUMP
417 bool
418 help
419 Support user stack dumps for perf event samples. This needs
420 access to the user stack pointer which is not unified across
421 architectures.
422
bf5438fc
JB
423config HAVE_ARCH_JUMP_LABEL
424 bool
425
50ff18ab
AB
426config HAVE_ARCH_JUMP_LABEL_RELATIVE
427 bool
428
0d6e24d4
PZ
429config MMU_GATHER_TABLE_FREE
430 bool
431
ff2e6d72 432config MMU_GATHER_RCU_TABLE_FREE
26723911 433 bool
0d6e24d4 434 select MMU_GATHER_TABLE_FREE
26723911 435
3af4bd03 436config MMU_GATHER_PAGE_SIZE
ed6a7935
PZ
437 bool
438
27796d03
PZ
439config MMU_GATHER_NO_RANGE
440 bool
441
580a586c 442config MMU_GATHER_NO_GATHER
952a31c9 443 bool
0d6e24d4 444 depends on MMU_GATHER_TABLE_FREE
952a31c9 445
d53c3dfb
NP
446config ARCH_WANT_IRQS_OFF_ACTIVATE_MM
447 bool
448 help
449 Temporary select until all architectures can be converted to have
450 irqs disabled over activate_mm. Architectures that do IPI based TLB
451 shootdowns should enable this.
452
df013ffb
HY
453config ARCH_HAVE_NMI_SAFE_CMPXCHG
454 bool
455
43570fd2
HC
456config HAVE_ALIGNED_STRUCT_PAGE
457 bool
458 help
459 This makes sure that struct pages are double word aligned and that
460 e.g. the SLUB allocator can perform double word atomic operations
461 on a struct page for better performance. However selecting this
462 might increase the size of a struct page by a word.
463
4156153c
HC
464config HAVE_CMPXCHG_LOCAL
465 bool
466
2565409f
HC
467config HAVE_CMPXCHG_DOUBLE
468 bool
469
77e58496
PM
470config ARCH_WEAK_RELEASE_ACQUIRE
471 bool
472
c1d7e01d
WD
473config ARCH_WANT_IPC_PARSE_VERSION
474 bool
475
476config ARCH_WANT_COMPAT_IPC_PARSE_VERSION
477 bool
478
48b25c43 479config ARCH_WANT_OLD_COMPAT_IPC
c1d7e01d 480 select ARCH_WANT_COMPAT_IPC_PARSE_VERSION
48b25c43
CM
481 bool
482
282a181b
YZ
483config HAVE_ARCH_SECCOMP
484 bool
485 help
486 An arch should select this symbol to support seccomp mode 1 (the fixed
487 syscall policy), and must provide an overrides for __NR_seccomp_sigreturn,
488 and compat syscalls if the asm-generic/seccomp.h defaults need adjustment:
489 - __NR_seccomp_read_32
490 - __NR_seccomp_write_32
491 - __NR_seccomp_exit_32
492 - __NR_seccomp_sigreturn_32
493
e2cfabdf
WD
494config HAVE_ARCH_SECCOMP_FILTER
495 bool
282a181b 496 select HAVE_ARCH_SECCOMP
e2cfabdf 497 help
fb0fadf9 498 An arch should select this symbol if it provides all of these things:
282a181b 499 - all the requirements for HAVE_ARCH_SECCOMP
bb6ea430
WD
500 - syscall_get_arch()
501 - syscall_get_arguments()
502 - syscall_rollback()
503 - syscall_set_return_value()
fb0fadf9
WD
504 - SIGSYS siginfo_t support
505 - secure_computing is called from a ptrace_event()-safe context
506 - secure_computing return value is checked and a return value of -1
507 results in the system call being skipped immediately.
48dc92b9 508 - seccomp syscall wired up
0d8315dd
YZ
509 - if !HAVE_SPARSE_SYSCALL_NR, have SECCOMP_ARCH_NATIVE,
510 SECCOMP_ARCH_NATIVE_NR, SECCOMP_ARCH_NATIVE_NAME defined. If
511 COMPAT is supported, have the SECCOMP_ARCH_COMPAT* defines too.
e2cfabdf 512
282a181b
YZ
513config SECCOMP
514 prompt "Enable seccomp to safely execute untrusted bytecode"
515 def_bool y
516 depends on HAVE_ARCH_SECCOMP
517 help
518 This kernel feature is useful for number crunching applications
519 that may need to handle untrusted bytecode during their
520 execution. By using pipes or other transports made available
521 to the process as file descriptors supporting the read/write
522 syscalls, it's possible to isolate those applications in their
523 own address space using seccomp. Once seccomp is enabled via
524 prctl(PR_SET_SECCOMP) or the seccomp() syscall, it cannot be
525 disabled and the task is only allowed to execute a few safe
526 syscalls defined by each seccomp mode.
527
528 If unsure, say Y.
529
e2cfabdf
WD
530config SECCOMP_FILTER
531 def_bool y
532 depends on HAVE_ARCH_SECCOMP_FILTER && SECCOMP && NET
533 help
534 Enable tasks to build secure computing environments defined
535 in terms of Berkeley Packet Filter programs which implement
536 task-defined system call filtering polices.
537
5fb94e9c 538 See Documentation/userspace-api/seccomp_filter.rst for details.
e2cfabdf 539
0d8315dd
YZ
540config SECCOMP_CACHE_DEBUG
541 bool "Show seccomp filter cache status in /proc/pid/seccomp_cache"
542 depends on SECCOMP_FILTER && !HAVE_SPARSE_SYSCALL_NR
543 depends on PROC_FS
544 help
545 This enables the /proc/pid/seccomp_cache interface to monitor
546 seccomp cache data. The file format is subject to change. Reading
547 the file requires CAP_SYS_ADMIN.
548
549 This option is for debugging only. Enabling presents the risk that
550 an adversary may be able to infer the seccomp filter logic.
551
552 If unsure, say N.
553
afaef01c
AP
554config HAVE_ARCH_STACKLEAK
555 bool
556 help
557 An architecture should select this if it has the code which
558 fills the used part of the kernel stack with the STACKLEAK_POISON
559 value before returning from system calls.
560
d148eac0 561config HAVE_STACKPROTECTOR
19952a92
KC
562 bool
563 help
564 An arch should select this symbol if:
19952a92
KC
565 - it has implemented a stack canary (e.g. __stack_chk_guard)
566
050e9baa 567config STACKPROTECTOR
2a61f474 568 bool "Stack Protector buffer overflow detection"
d148eac0 569 depends on HAVE_STACKPROTECTOR
2a61f474
MY
570 depends on $(cc-option,-fstack-protector)
571 default y
19952a92 572 help
8779657d 573 This option turns on the "stack-protector" GCC feature. This
19952a92
KC
574 feature puts, at the beginning of functions, a canary value on
575 the stack just before the return address, and validates
576 the value just before actually returning. Stack based buffer
577 overflows (that need to overwrite this return address) now also
578 overwrite the canary, which gets detected and the attack is then
579 neutralized via a kernel panic.
580
8779657d
KC
581 Functions will have the stack-protector canary logic added if they
582 have an 8-byte or larger character array on the stack.
583
19952a92 584 This feature requires gcc version 4.2 or above, or a distribution
8779657d
KC
585 gcc with the feature backported ("-fstack-protector").
586
587 On an x86 "defconfig" build, this feature adds canary checks to
588 about 3% of all kernel functions, which increases kernel code size
589 by about 0.3%.
590
050e9baa 591config STACKPROTECTOR_STRONG
2a61f474 592 bool "Strong Stack Protector"
050e9baa 593 depends on STACKPROTECTOR
2a61f474
MY
594 depends on $(cc-option,-fstack-protector-strong)
595 default y
8779657d
KC
596 help
597 Functions will have the stack-protector canary logic added in any
598 of the following conditions:
599
600 - local variable's address used as part of the right hand side of an
601 assignment or function argument
602 - local variable is an array (or union containing an array),
603 regardless of array type or length
604 - uses register local variables
605
606 This feature requires gcc version 4.9 or above, or a distribution
607 gcc with the feature backported ("-fstack-protector-strong").
608
609 On an x86 "defconfig" build, this feature adds canary checks to
610 about 20% of all kernel functions, which increases the kernel code
611 size by about 2%.
612
d08b9f0c
ST
613config ARCH_SUPPORTS_SHADOW_CALL_STACK
614 bool
615 help
616 An architecture should select this if it supports Clang's Shadow
aa7a65ae
WD
617 Call Stack and implements runtime support for shadow stack
618 switching.
d08b9f0c
ST
619
620config SHADOW_CALL_STACK
621 bool "Clang Shadow Call Stack"
622 depends on CC_IS_CLANG && ARCH_SUPPORTS_SHADOW_CALL_STACK
ddc9863e 623 depends on DYNAMIC_FTRACE_WITH_REGS || !FUNCTION_GRAPH_TRACER
d08b9f0c
ST
624 help
625 This option enables Clang's Shadow Call Stack, which uses a
626 shadow stack to protect function return addresses from being
627 overwritten by an attacker. More information can be found in
628 Clang's documentation:
629
630 https://clang.llvm.org/docs/ShadowCallStack.html
631
632 Note that security guarantees in the kernel differ from the
633 ones documented for user space. The kernel must store addresses
634 of shadow stacks in memory, which means an attacker capable of
635 reading and writing arbitrary memory may be able to locate them
636 and hijack control flow by modifying the stacks.
637
0f60a8ef
KC
638config HAVE_ARCH_WITHIN_STACK_FRAMES
639 bool
640 help
641 An architecture should select this if it can walk the kernel stack
642 frames to determine if an object is part of either the arguments
643 or local variables (i.e. that it excludes saved return addresses,
644 and similar) by implementing an inline arch_within_stack_frames(),
645 which is used by CONFIG_HARDENED_USERCOPY.
646
91d1aa43 647config HAVE_CONTEXT_TRACKING
2b1d5024
FW
648 bool
649 help
91d1aa43
FW
650 Provide kernel/user boundaries probes necessary for subsystems
651 that need it, such as userspace RCU extended quiescent state.
490f561b
FW
652 Syscalls need to be wrapped inside user_exit()-user_enter(), either
653 optimized behind static key or through the slow path using TIF_NOHZ
654 flag. Exceptions handlers must be wrapped as well. Irqs are already
655 protected inside rcu_irq_enter/rcu_irq_exit() but preemption or signal
656 handling on irq exit still need to be protected.
657
83c2da2e
FW
658config HAVE_CONTEXT_TRACKING_OFFSTACK
659 bool
660 help
661 Architecture neither relies on exception_enter()/exception_exit()
662 nor on schedule_user(). Also preempt_schedule_notrace() and
663 preempt_schedule_irq() can't be called in a preemptible section
664 while context tracking is CONTEXT_USER. This feature reflects a sane
665 entry implementation where the following requirements are met on
666 critical entry code, ie: before user_exit() or after user_enter():
667
668 - Critical entry code isn't preemptible (or better yet:
669 not interruptible).
670 - No use of RCU read side critical sections, unless rcu_nmi_enter()
671 got called.
672 - No use of instrumentation, unless instrumentation_begin() got
673 called.
674
490f561b
FW
675config HAVE_TIF_NOHZ
676 bool
677 help
678 Arch relies on TIF_NOHZ and syscall slow path to implement context
679 tracking calls to user_enter()/user_exit().
2b1d5024 680
b952741c
FW
681config HAVE_VIRT_CPU_ACCOUNTING
682 bool
683
2b91ec9f
FW
684config HAVE_VIRT_CPU_ACCOUNTING_IDLE
685 bool
686 help
687 Architecture has its own way to account idle CPU time and therefore
688 doesn't implement vtime_account_idle().
689
40565b5a
SG
690config ARCH_HAS_SCALED_CPUTIME
691 bool
692
554b0004
KH
693config HAVE_VIRT_CPU_ACCOUNTING_GEN
694 bool
695 default y if 64BIT
696 help
697 With VIRT_CPU_ACCOUNTING_GEN, cputime_t becomes 64-bit.
698 Before enabling this option, arch code must be audited
699 to ensure there are no races in concurrent read/write of
700 cputime_t. For example, reading/writing 64-bit cputime_t on
701 some 32-bit arches may require multiple accesses, so proper
702 locking is needed to protect against concurrent accesses.
703
fdf9c356
FW
704config HAVE_IRQ_TIME_ACCOUNTING
705 bool
706 help
707 Archs need to ensure they use a high enough resolution clock to
708 support irq time accounting and then call enable_sched_clock_irqtime().
709
c49dd340
KS
710config HAVE_MOVE_PUD
711 bool
712 help
713 Architectures that select this are able to move page tables at the
714 PUD level. If there are only 3 page table levels, the move effectively
715 happens at the PGD level.
716
2c91bd4a
JFG
717config HAVE_MOVE_PMD
718 bool
719 help
720 Archs that select this are able to move page tables at the PMD level.
721
15626062
GS
722config HAVE_ARCH_TRANSPARENT_HUGEPAGE
723 bool
724
a00cc7d9
MW
725config HAVE_ARCH_TRANSPARENT_HUGEPAGE_PUD
726 bool
727
0ddab1d2
TK
728config HAVE_ARCH_HUGE_VMAP
729 bool
730
3876d4a3
AG
731config ARCH_WANT_HUGE_PMD_SHARE
732 bool
733
0f8975ec
PE
734config HAVE_ARCH_SOFT_DIRTY
735 bool
736
786d35d4
DH
737config HAVE_MOD_ARCH_SPECIFIC
738 bool
739 help
740 The arch uses struct mod_arch_specific to store data. Many arches
741 just need a simple module loader without arch specific data - those
742 should not enable this.
743
744config MODULES_USE_ELF_RELA
745 bool
746 help
747 Modules only use ELF RELA relocations. Modules with ELF REL
748 relocations will give an error.
749
750config MODULES_USE_ELF_REL
751 bool
752 help
753 Modules only use ELF REL relocations. Modules with ELF RELA
754 relocations will give an error.
755
cc1f0274
FW
756config HAVE_IRQ_EXIT_ON_IRQ_STACK
757 bool
758 help
759 Architecture doesn't only execute the irq handler on the irq stack
760 but also irq_exit(). This way we can process softirqs on this irq
761 stack instead of switching to a new one when we call __do_softirq()
762 in the end of an hardirq.
763 This spares a stack switch and improves cache usage on softirq
764 processing.
765
235a8f02
KS
766config PGTABLE_LEVELS
767 int
768 default 2
769
2b68f6ca
KC
770config ARCH_HAS_ELF_RANDOMIZE
771 bool
772 help
773 An architecture supports choosing randomized locations for
774 stack, mmap, brk, and ET_DYN. Defined functions:
775 - arch_mmap_rnd()
204db6ed 776 - arch_randomize_brk()
2b68f6ca 777
d07e2259
DC
778config HAVE_ARCH_MMAP_RND_BITS
779 bool
780 help
781 An arch should select this symbol if it supports setting a variable
782 number of bits for use in establishing the base address for mmap
783 allocations, has MMU enabled and provides values for both:
784 - ARCH_MMAP_RND_BITS_MIN
785 - ARCH_MMAP_RND_BITS_MAX
786
5f56a5df
JS
787config HAVE_EXIT_THREAD
788 bool
789 help
790 An architecture implements exit_thread.
791
d07e2259
DC
792config ARCH_MMAP_RND_BITS_MIN
793 int
794
795config ARCH_MMAP_RND_BITS_MAX
796 int
797
798config ARCH_MMAP_RND_BITS_DEFAULT
799 int
800
801config ARCH_MMAP_RND_BITS
802 int "Number of bits to use for ASLR of mmap base address" if EXPERT
803 range ARCH_MMAP_RND_BITS_MIN ARCH_MMAP_RND_BITS_MAX
804 default ARCH_MMAP_RND_BITS_DEFAULT if ARCH_MMAP_RND_BITS_DEFAULT
805 default ARCH_MMAP_RND_BITS_MIN
806 depends on HAVE_ARCH_MMAP_RND_BITS
807 help
808 This value can be used to select the number of bits to use to
809 determine the random offset to the base address of vma regions
810 resulting from mmap allocations. This value will be bounded
811 by the architecture's minimum and maximum supported values.
812
813 This value can be changed after boot using the
814 /proc/sys/vm/mmap_rnd_bits tunable
815
816config HAVE_ARCH_MMAP_RND_COMPAT_BITS
817 bool
818 help
819 An arch should select this symbol if it supports running applications
820 in compatibility mode, supports setting a variable number of bits for
821 use in establishing the base address for mmap allocations, has MMU
822 enabled and provides values for both:
823 - ARCH_MMAP_RND_COMPAT_BITS_MIN
824 - ARCH_MMAP_RND_COMPAT_BITS_MAX
825
826config ARCH_MMAP_RND_COMPAT_BITS_MIN
827 int
828
829config ARCH_MMAP_RND_COMPAT_BITS_MAX
830 int
831
832config ARCH_MMAP_RND_COMPAT_BITS_DEFAULT
833 int
834
835config ARCH_MMAP_RND_COMPAT_BITS
836 int "Number of bits to use for ASLR of mmap base address for compatible applications" if EXPERT
837 range ARCH_MMAP_RND_COMPAT_BITS_MIN ARCH_MMAP_RND_COMPAT_BITS_MAX
838 default ARCH_MMAP_RND_COMPAT_BITS_DEFAULT if ARCH_MMAP_RND_COMPAT_BITS_DEFAULT
839 default ARCH_MMAP_RND_COMPAT_BITS_MIN
840 depends on HAVE_ARCH_MMAP_RND_COMPAT_BITS
841 help
842 This value can be used to select the number of bits to use to
843 determine the random offset to the base address of vma regions
844 resulting from mmap allocations for compatible applications This
845 value will be bounded by the architecture's minimum and maximum
846 supported values.
847
848 This value can be changed after boot using the
849 /proc/sys/vm/mmap_rnd_compat_bits tunable
850
1b028f78
DS
851config HAVE_ARCH_COMPAT_MMAP_BASES
852 bool
853 help
854 This allows 64bit applications to invoke 32-bit mmap() syscall
855 and vice-versa 32-bit applications to call 64-bit mmap().
856 Required for applications doing different bitness syscalls.
857
67f3977f
AG
858# This allows to use a set of generic functions to determine mmap base
859# address by giving priority to top-down scheme only if the process
860# is not in legacy mode (compat task, unlimited stack size or
861# sysctl_legacy_va_layout).
862# Architecture that selects this option can provide its own version of:
863# - STACK_RND_MASK
864config ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT
865 bool
866 depends on MMU
e7142bf5 867 select ARCH_HAS_ELF_RANDOMIZE
67f3977f 868
b9ab5ebb
JP
869config HAVE_STACK_VALIDATION
870 bool
871 help
872 Architecture supports the 'objtool check' host tool command, which
873 performs compile-time stack metadata validation.
874
af085d90
JP
875config HAVE_RELIABLE_STACKTRACE
876 bool
877 help
140d7e88
MB
878 Architecture has either save_stack_trace_tsk_reliable() or
879 arch_stack_walk_reliable() function which only returns a stack trace
880 if it can guarantee the trace is reliable.
af085d90 881
468a9428
GS
882config HAVE_ARCH_HASH
883 bool
884 default n
885 help
886 If this is set, the architecture provides an <asm/hash.h>
887 file which provides platform-specific implementations of some
888 functions in <linux/hash.h> or fs/namei.c.
889
666047fe
FT
890config HAVE_ARCH_NVRAM_OPS
891 bool
892
3a495511
WBG
893config ISA_BUS_API
894 def_bool ISA
895
d2125043
AV
896#
897# ABI hall of shame
898#
899config CLONE_BACKWARDS
900 bool
901 help
902 Architecture has tls passed as the 4th argument of clone(2),
903 not the 5th one.
904
905config CLONE_BACKWARDS2
906 bool
907 help
908 Architecture has the first two arguments of clone(2) swapped.
909
dfa9771a
MS
910config CLONE_BACKWARDS3
911 bool
912 help
913 Architecture has tls passed as the 3rd argument of clone(2),
914 not the 5th one.
915
eaca6eae
AV
916config ODD_RT_SIGACTION
917 bool
918 help
919 Architecture has unusual rt_sigaction(2) arguments
920
0a0e8cdf
AV
921config OLD_SIGSUSPEND
922 bool
923 help
924 Architecture has old sigsuspend(2) syscall, of one-argument variety
925
926config OLD_SIGSUSPEND3
927 bool
928 help
929 Even weirder antique ABI - three-argument sigsuspend(2)
930
495dfbf7
AV
931config OLD_SIGACTION
932 bool
933 help
934 Architecture has old sigaction(2) syscall. Nope, not the same
935 as OLD_SIGSUSPEND | OLD_SIGSUSPEND3 - alpha has sigsuspend(2),
936 but fairly different variant of sigaction(2), thanks to OSF/1
937 compatibility...
938
939config COMPAT_OLD_SIGACTION
940 bool
941
17435e5f 942config COMPAT_32BIT_TIME
942437c9
AB
943 bool "Provide system calls for 32-bit time_t"
944 default !64BIT || COMPAT
17435e5f
DD
945 help
946 This enables 32 bit time_t support in addition to 64 bit time_t support.
947 This is relevant on all 32-bit architectures, and 64-bit architectures
948 as part of compat syscall handling.
949
87a4c375
CH
950config ARCH_NO_PREEMPT
951 bool
952
a50a3f4b
TG
953config ARCH_SUPPORTS_RT
954 bool
955
fff7fb0b
ZZ
956config CPU_NO_EFFICIENT_FFS
957 def_bool n
958
ba14a194
AL
959config HAVE_ARCH_VMAP_STACK
960 def_bool n
961 help
962 An arch should select this symbol if it can support kernel stacks
963 in vmalloc space. This means:
964
965 - vmalloc space must be large enough to hold many kernel stacks.
966 This may rule out many 32-bit architectures.
967
968 - Stacks in vmalloc space need to work reliably. For example, if
969 vmap page tables are created on demand, either this mechanism
970 needs to work while the stack points to a virtual address with
971 unpopulated page tables or arch code (switch_to() and switch_mm(),
972 most likely) needs to ensure that the stack's page table entries
973 are populated before running on a possibly unpopulated stack.
974
975 - If the stack overflows into a guard page, something reasonable
976 should happen. The definition of "reasonable" is flexible, but
977 instantly rebooting without logging anything would be unfriendly.
978
979config VMAP_STACK
980 default y
981 bool "Use a virtually-mapped stack"
eafb149e 982 depends on HAVE_ARCH_VMAP_STACK
38dd767d 983 depends on !KASAN || KASAN_HW_TAGS || KASAN_VMALLOC
a7f7f624 984 help
ba14a194
AL
985 Enable this if you want the use virtually-mapped kernel stacks
986 with guard pages. This causes kernel stack overflows to be
987 caught immediately rather than causing difficult-to-diagnose
988 corruption.
989
38dd767d
AK
990 To use this with software KASAN modes, the architecture must support
991 backing virtual mappings with real shadow memory, and KASAN_VMALLOC
992 must be enabled.
ba14a194 993
ad21fc4f
LA
994config ARCH_OPTIONAL_KERNEL_RWX
995 def_bool n
996
997config ARCH_OPTIONAL_KERNEL_RWX_DEFAULT
998 def_bool n
999
1000config ARCH_HAS_STRICT_KERNEL_RWX
1001 def_bool n
1002
0f5bf6d0 1003config STRICT_KERNEL_RWX
ad21fc4f
LA
1004 bool "Make kernel text and rodata read-only" if ARCH_OPTIONAL_KERNEL_RWX
1005 depends on ARCH_HAS_STRICT_KERNEL_RWX
1006 default !ARCH_OPTIONAL_KERNEL_RWX || ARCH_OPTIONAL_KERNEL_RWX_DEFAULT
1007 help
1008 If this is set, kernel text and rodata memory will be made read-only,
1009 and non-text memory will be made non-executable. This provides
1010 protection against certain security exploits (e.g. executing the heap
1011 or modifying text)
1012
1013 These features are considered standard security practice these days.
1014 You should say Y here in almost all cases.
1015
1016config ARCH_HAS_STRICT_MODULE_RWX
1017 def_bool n
1018
0f5bf6d0 1019config STRICT_MODULE_RWX
ad21fc4f
LA
1020 bool "Set loadable kernel module data as NX and text as RO" if ARCH_OPTIONAL_KERNEL_RWX
1021 depends on ARCH_HAS_STRICT_MODULE_RWX && MODULES
1022 default !ARCH_OPTIONAL_KERNEL_RWX || ARCH_OPTIONAL_KERNEL_RWX_DEFAULT
1023 help
1024 If this is set, module text and rodata memory will be made read-only,
1025 and non-text memory will be made non-executable. This provides
1026 protection against certain security exploits (e.g. writing to text)
1027
ea8c64ac
CH
1028# select if the architecture provides an asm/dma-direct.h header
1029config ARCH_HAS_PHYS_TO_DMA
1030 bool
1031
04f264d3
PB
1032config HAVE_ARCH_COMPILER_H
1033 bool
1034 help
1035 An architecture can select this if it provides an
1036 asm/compiler.h header that should be included after
1037 linux/compiler-*.h in order to override macro definitions that those
1038 headers generally provide.
1039
271ca788
AB
1040config HAVE_ARCH_PREL32_RELOCATIONS
1041 bool
1042 help
1043 May be selected by an architecture if it supports place-relative
1044 32-bit relocations, both in the toolchain and in the module loader,
1045 in which case relative references can be used in special sections
1046 for PCI fixup, initcalls etc which are only half the size on 64 bit
1047 architectures, and don't require runtime relocation on relocatable
1048 kernels.
1049
ce9084ba
AB
1050config ARCH_USE_MEMREMAP_PROT
1051 bool
1052
fb346fd9
WL
1053config LOCK_EVENT_COUNTS
1054 bool "Locking event counts collection"
1055 depends on DEBUG_FS
a7f7f624 1056 help
fb346fd9
WL
1057 Enable light-weight counting of various locking related events
1058 in the system with minimal performance impact. This reduces
1059 the chance of application behavior change because of timing
1060 differences. The counts are reported via debugfs.
1061
5cf896fb
PC
1062# Select if the architecture has support for applying RELR relocations.
1063config ARCH_HAS_RELR
1064 bool
1065
1066config RELR
1067 bool "Use RELR relocation packing"
1068 depends on ARCH_HAS_RELR && TOOLS_SUPPORT_RELR
1069 default y
1070 help
1071 Store the kernel's dynamic relocations in the RELR relocation packing
1072 format. Requires a compatible linker (LLD supports this feature), as
1073 well as compatible NM and OBJCOPY utilities (llvm-nm and llvm-objcopy
1074 are compatible).
1075
0c9c1d56
TJB
1076config ARCH_HAS_MEM_ENCRYPT
1077 bool
1078
0e242208
HN
1079config HAVE_SPARSE_SYSCALL_NR
1080 bool
1081 help
1082 An architecture should select this if its syscall numbering is sparse
1083 to save space. For example, MIPS architecture has a syscall array with
1084 entries at 4000, 5000 and 6000 locations. This option turns on syscall
1085 related optimizations for a given architecture.
1086
d60d7de3
SS
1087config ARCH_HAS_VDSO_DATA
1088 bool
1089
115284d8
JP
1090config HAVE_STATIC_CALL
1091 bool
1092
9183c3f9
JP
1093config HAVE_STATIC_CALL_INLINE
1094 bool
1095 depends on HAVE_STATIC_CALL
1096
59612b24
NC
1097config ARCH_WANT_LD_ORPHAN_WARN
1098 bool
1099 help
1100 An arch should select this symbol once all linker sections are explicitly
1101 included, size-asserted, or discarded in the linker scripts. This is
1102 important because we never want expected sections to be placed heuristically
1103 by the linker, since the locations of such sections can change between linker
1104 versions.
1105
4f5b0c17
MR
1106config HAVE_ARCH_PFN_VALID
1107 bool
1108
5d6ad668
MR
1109config ARCH_SUPPORTS_DEBUG_PAGEALLOC
1110 bool
1111
2ca408d9
BG
1112config ARCH_SPLIT_ARG64
1113 bool
1114 help
1115 If a 32-bit architecture requires 64-bit arguments to be split into
1116 pairs of 32-bit arguments, select this option.
1117
2521f2c2 1118source "kernel/gcov/Kconfig"
45332b1b
MY
1119
1120source "scripts/gcc-plugins/Kconfig"
fa1b5d09 1121
22471e13 1122endmenu