3 select ACPI_CCA_REQUIRED if ACPI
4 select ACPI_GENERIC_GSI if ACPI
5 select ACPI_REDUCED_HARDWARE_ONLY if ACPI
6 select ACPI_MCFG if ACPI
7 select ACPI_SPCR_TABLE if ACPI
8 select ARCH_CLOCKSOURCE_DATA
9 select ARCH_HAS_DEVMEM_IS_ALLOWED
10 select ARCH_HAS_ACPI_TABLE_UPGRADE if ACPI
11 select ARCH_HAS_ELF_RANDOMIZE
12 select ARCH_HAS_GCOV_PROFILE_ALL
13 select ARCH_HAS_GIGANTIC_PAGE
15 select ARCH_HAS_SG_CHAIN
16 select ARCH_HAS_TICK_BROADCAST if GENERIC_CLOCKEVENTS_BROADCAST
17 select ARCH_USE_CMPXCHG_LOCKREF
18 select ARCH_SUPPORTS_ATOMIC_RMW
19 select ARCH_SUPPORTS_NUMA_BALANCING
20 select ARCH_WANT_COMPAT_IPC_PARSE_VERSION
21 select ARCH_WANT_FRAME_POINTERS
22 select ARCH_HAS_UBSAN_SANITIZE_ALL
26 select AUDIT_ARCH_COMPAT_GENERIC
27 select ARM_GIC_V2M if PCI
29 select ARM_GIC_V3_ITS if PCI
31 select BUILDTIME_EXTABLE_SORT
32 select CLONE_BACKWARDS
34 select CPU_PM if (SUSPEND || CPU_IDLE)
35 select DCACHE_WORD_ACCESS
38 select GENERIC_ALLOCATOR
39 select GENERIC_CLOCKEVENTS
40 select GENERIC_CLOCKEVENTS_BROADCAST
41 select GENERIC_CPU_AUTOPROBE
42 select GENERIC_EARLY_IOREMAP
43 select GENERIC_IDLE_POLL_SETUP
44 select GENERIC_IRQ_PROBE
45 select GENERIC_IRQ_SHOW
46 select GENERIC_IRQ_SHOW_LEVEL
47 select GENERIC_PCI_IOMAP
48 select GENERIC_SCHED_CLOCK
49 select GENERIC_SMP_IDLE_THREAD
50 select GENERIC_STRNCPY_FROM_USER
51 select GENERIC_STRNLEN_USER
52 select GENERIC_TIME_VSYSCALL
53 select HANDLE_DOMAIN_IRQ
54 select HARDIRQS_SW_RESEND
55 select HAVE_ACPI_APEI if (ACPI && EFI)
56 select HAVE_ALIGNED_STRUCT_PAGE if SLUB
57 select HAVE_ARCH_AUDITSYSCALL
58 select HAVE_ARCH_BITREVERSE
59 select HAVE_ARCH_HARDENED_USERCOPY
60 select HAVE_ARCH_HUGE_VMAP
61 select HAVE_ARCH_JUMP_LABEL
62 select HAVE_ARCH_KASAN if SPARSEMEM_VMEMMAP && !(ARM64_16K_PAGES && ARM64_VA_BITS_48)
64 select HAVE_ARCH_MMAP_RND_BITS
65 select HAVE_ARCH_MMAP_RND_COMPAT_BITS if COMPAT
66 select HAVE_ARCH_SECCOMP_FILTER
67 select HAVE_ARCH_TRACEHOOK
68 select HAVE_ARCH_TRANSPARENT_HUGEPAGE
71 select HAVE_C_RECORDMCOUNT
72 select HAVE_CC_STACKPROTECTOR
73 select HAVE_CMPXCHG_DOUBLE
74 select HAVE_CMPXCHG_LOCAL
75 select HAVE_CONTEXT_TRACKING
76 select HAVE_DEBUG_BUGVERBOSE
77 select HAVE_DEBUG_KMEMLEAK
78 select HAVE_DMA_API_DEBUG
79 select HAVE_DMA_CONTIGUOUS
80 select HAVE_DYNAMIC_FTRACE
81 select HAVE_EFFICIENT_UNALIGNED_ACCESS
82 select HAVE_FTRACE_MCOUNT_RECORD
83 select HAVE_FUNCTION_TRACER
84 select HAVE_FUNCTION_GRAPH_TRACER
85 select HAVE_GCC_PLUGINS
86 select HAVE_GENERIC_DMA_COHERENT
87 select HAVE_HW_BREAKPOINT if PERF_EVENTS
88 select HAVE_IRQ_TIME_ACCOUNTING
90 select HAVE_MEMBLOCK_NODE_MAP if NUMA
91 select HAVE_PATA_PLATFORM
92 select HAVE_PERF_EVENTS
94 select HAVE_PERF_USER_STACK_DUMP
95 select HAVE_REGS_AND_STACK_ACCESS_API
96 select HAVE_RCU_TABLE_FREE
97 select HAVE_SYSCALL_TRACEPOINTS
99 select HAVE_KRETPROBES if HAVE_KPROBES
100 select IOMMU_DMA if IOMMU_SUPPORT
102 select IRQ_FORCED_THREADING
103 select MODULES_USE_ELF_RELA
106 select OF_EARLY_FLATTREE
107 select OF_RESERVED_MEM
108 select PCI_ECAM if ACPI
112 select SYSCTL_EXCEPTION_TRACE
113 select THREAD_INFO_IN_TASK
115 ARM 64-bit (AArch64) Linux support.
120 config ARCH_PHYS_ADDR_T_64BIT
129 config ARM64_PAGE_SHIFT
131 default 16 if ARM64_64K_PAGES
132 default 14 if ARM64_16K_PAGES
135 config ARM64_CONT_SHIFT
137 default 5 if ARM64_64K_PAGES
138 default 7 if ARM64_16K_PAGES
141 config ARCH_MMAP_RND_BITS_MIN
142 default 14 if ARM64_64K_PAGES
143 default 16 if ARM64_16K_PAGES
146 # max bits determined by the following formula:
147 # VA_BITS - PAGE_SHIFT - 3
148 config ARCH_MMAP_RND_BITS_MAX
149 default 19 if ARM64_VA_BITS=36
150 default 24 if ARM64_VA_BITS=39
151 default 27 if ARM64_VA_BITS=42
152 default 30 if ARM64_VA_BITS=47
153 default 29 if ARM64_VA_BITS=48 && ARM64_64K_PAGES
154 default 31 if ARM64_VA_BITS=48 && ARM64_16K_PAGES
155 default 33 if ARM64_VA_BITS=48
156 default 14 if ARM64_64K_PAGES
157 default 16 if ARM64_16K_PAGES
160 config ARCH_MMAP_RND_COMPAT_BITS_MIN
161 default 7 if ARM64_64K_PAGES
162 default 9 if ARM64_16K_PAGES
165 config ARCH_MMAP_RND_COMPAT_BITS_MAX
171 config STACKTRACE_SUPPORT
174 config ILLEGAL_POINTER_VALUE
176 default 0xdead000000000000
178 config LOCKDEP_SUPPORT
181 config TRACE_IRQFLAGS_SUPPORT
184 config RWSEM_XCHGADD_ALGORITHM
191 config GENERIC_BUG_RELATIVE_POINTERS
193 depends on GENERIC_BUG
195 config GENERIC_HWEIGHT
201 config GENERIC_CALIBRATE_DELAY
207 config HAVE_GENERIC_RCU_GUP
210 config ARCH_DMA_ADDR_T_64BIT
213 config NEED_DMA_MAP_STATE
216 config NEED_SG_DMA_LENGTH
228 config KERNEL_MODE_NEON
231 config FIX_EARLYCON_MEM
234 config PGTABLE_LEVELS
236 default 2 if ARM64_16K_PAGES && ARM64_VA_BITS_36
237 default 2 if ARM64_64K_PAGES && ARM64_VA_BITS_42
238 default 3 if ARM64_64K_PAGES && ARM64_VA_BITS_48
239 default 3 if ARM64_4K_PAGES && ARM64_VA_BITS_39
240 default 3 if ARM64_16K_PAGES && ARM64_VA_BITS_47
241 default 4 if !ARM64_64K_PAGES && ARM64_VA_BITS_48
243 config ARCH_SUPPORTS_UPROBES
246 source "init/Kconfig"
248 source "kernel/Kconfig.freezer"
250 source "arch/arm64/Kconfig.platforms"
257 This feature enables support for PCI bus system. If you say Y
258 here, the kernel will include drivers and infrastructure code
259 to support PCI bus devices.
264 config PCI_DOMAINS_GENERIC
270 source "drivers/pci/Kconfig"
274 menu "Kernel Features"
276 menu "ARM errata workarounds via the alternatives framework"
278 config ARM64_ERRATUM_826319
279 bool "Cortex-A53: 826319: System might deadlock if a write cannot complete until read data is accepted"
282 This option adds an alternative code sequence to work around ARM
283 erratum 826319 on Cortex-A53 parts up to r0p2 with an AMBA 4 ACE or
284 AXI master interface and an L2 cache.
286 If a Cortex-A53 uses an AMBA AXI4 ACE interface to other processors
287 and is unable to accept a certain write via this interface, it will
288 not progress on read data presented on the read data channel and the
291 The workaround promotes data cache clean instructions to
292 data cache clean-and-invalidate.
293 Please note that this does not necessarily enable the workaround,
294 as it depends on the alternative framework, which will only patch
295 the kernel if an affected CPU is detected.
299 config ARM64_ERRATUM_827319
300 bool "Cortex-A53: 827319: Data cache clean instructions might cause overlapping transactions to the interconnect"
303 This option adds an alternative code sequence to work around ARM
304 erratum 827319 on Cortex-A53 parts up to r0p2 with an AMBA 5 CHI
305 master interface and an L2 cache.
307 Under certain conditions this erratum can cause a clean line eviction
308 to occur at the same time as another transaction to the same address
309 on the AMBA 5 CHI interface, which can cause data corruption if the
310 interconnect reorders the two transactions.
312 The workaround promotes data cache clean instructions to
313 data cache clean-and-invalidate.
314 Please note that this does not necessarily enable the workaround,
315 as it depends on the alternative framework, which will only patch
316 the kernel if an affected CPU is detected.
320 config ARM64_ERRATUM_824069
321 bool "Cortex-A53: 824069: Cache line might not be marked as clean after a CleanShared snoop"
324 This option adds an alternative code sequence to work around ARM
325 erratum 824069 on Cortex-A53 parts up to r0p2 when it is connected
326 to a coherent interconnect.
328 If a Cortex-A53 processor is executing a store or prefetch for
329 write instruction at the same time as a processor in another
330 cluster is executing a cache maintenance operation to the same
331 address, then this erratum might cause a clean cache line to be
332 incorrectly marked as dirty.
334 The workaround promotes data cache clean instructions to
335 data cache clean-and-invalidate.
336 Please note that this option does not necessarily enable the
337 workaround, as it depends on the alternative framework, which will
338 only patch the kernel if an affected CPU is detected.
342 config ARM64_ERRATUM_819472
343 bool "Cortex-A53: 819472: Store exclusive instructions might cause data corruption"
346 This option adds an alternative code sequence to work around ARM
347 erratum 819472 on Cortex-A53 parts up to r0p1 with an L2 cache
348 present when it is connected to a coherent interconnect.
350 If the processor is executing a load and store exclusive sequence at
351 the same time as a processor in another cluster is executing a cache
352 maintenance operation to the same address, then this erratum might
353 cause data corruption.
355 The workaround promotes data cache clean instructions to
356 data cache clean-and-invalidate.
357 Please note that this does not necessarily enable the workaround,
358 as it depends on the alternative framework, which will only patch
359 the kernel if an affected CPU is detected.
363 config ARM64_ERRATUM_832075
364 bool "Cortex-A57: 832075: possible deadlock on mixing exclusive memory accesses with device loads"
367 This option adds an alternative code sequence to work around ARM
368 erratum 832075 on Cortex-A57 parts up to r1p2.
370 Affected Cortex-A57 parts might deadlock when exclusive load/store
371 instructions to Write-Back memory are mixed with Device loads.
373 The workaround is to promote device loads to use Load-Acquire
375 Please note that this does not necessarily enable the workaround,
376 as it depends on the alternative framework, which will only patch
377 the kernel if an affected CPU is detected.
381 config ARM64_ERRATUM_834220
382 bool "Cortex-A57: 834220: Stage 2 translation fault might be incorrectly reported in presence of a Stage 1 fault"
386 This option adds an alternative code sequence to work around ARM
387 erratum 834220 on Cortex-A57 parts up to r1p2.
389 Affected Cortex-A57 parts might report a Stage 2 translation
390 fault as the result of a Stage 1 fault for load crossing a
391 page boundary when there is a permission or device memory
392 alignment fault at Stage 1 and a translation fault at Stage 2.
394 The workaround is to verify that the Stage 1 translation
395 doesn't generate a fault before handling the Stage 2 fault.
396 Please note that this does not necessarily enable the workaround,
397 as it depends on the alternative framework, which will only patch
398 the kernel if an affected CPU is detected.
402 config ARM64_ERRATUM_845719
403 bool "Cortex-A53: 845719: a load might read incorrect data"
407 This option adds an alternative code sequence to work around ARM
408 erratum 845719 on Cortex-A53 parts up to r0p4.
410 When running a compat (AArch32) userspace on an affected Cortex-A53
411 part, a load at EL0 from a virtual address that matches the bottom 32
412 bits of the virtual address used by a recent load at (AArch64) EL1
413 might return incorrect data.
415 The workaround is to write the contextidr_el1 register on exception
416 return to a 32-bit task.
417 Please note that this does not necessarily enable the workaround,
418 as it depends on the alternative framework, which will only patch
419 the kernel if an affected CPU is detected.
423 config ARM64_ERRATUM_843419
424 bool "Cortex-A53: 843419: A load or store might access an incorrect address"
426 select ARM64_MODULE_CMODEL_LARGE if MODULES
428 This option links the kernel with '--fix-cortex-a53-843419' and
429 builds modules using the large memory model in order to avoid the use
430 of the ADRP instruction, which can cause a subsequent memory access
431 to use an incorrect address on Cortex-A53 parts up to r0p4.
435 config CAVIUM_ERRATUM_22375
436 bool "Cavium erratum 22375, 24313"
439 Enable workaround for erratum 22375, 24313.
441 This implements two gicv3-its errata workarounds for ThunderX. Both
442 with small impact affecting only ITS table allocation.
444 erratum 22375: only alloc 8MB table size
445 erratum 24313: ignore memory access type
447 The fixes are in ITS initialization and basically ignore memory access
448 type and table size provided by the TYPER and BASER registers.
452 config CAVIUM_ERRATUM_23144
453 bool "Cavium erratum 23144: ITS SYNC hang on dual socket system"
457 ITS SYNC command hang for cross node io and collections/cpu mapping.
461 config CAVIUM_ERRATUM_23154
462 bool "Cavium erratum 23154: Access to ICC_IAR1_EL1 is not sync'ed"
465 The gicv3 of ThunderX requires a modified version for
466 reading the IAR status to ensure data synchronization
467 (access to icc_iar1_el1 is not sync'ed before and after).
471 config CAVIUM_ERRATUM_27456
472 bool "Cavium erratum 27456: Broadcast TLBI instructions may cause icache corruption"
475 On ThunderX T88 pass 1.x through 2.1 parts, broadcast TLBI
476 instructions may cause the icache to become corrupted if it
477 contains data for a non-current ASID. The fix is to
478 invalidate the icache when changing the mm context.
487 default ARM64_4K_PAGES
489 Page size (translation granule) configuration.
491 config ARM64_4K_PAGES
494 This feature enables 4KB pages support.
496 config ARM64_16K_PAGES
499 The system will use 16KB pages support. AArch32 emulation
500 requires applications compiled with 16K (or a multiple of 16K)
503 config ARM64_64K_PAGES
506 This feature enables 64KB pages support (4KB by default)
507 allowing only two levels of page tables and faster TLB
508 look-up. AArch32 emulation requires applications compiled
509 with 64K aligned segments.
514 prompt "Virtual address space size"
515 default ARM64_VA_BITS_39 if ARM64_4K_PAGES
516 default ARM64_VA_BITS_47 if ARM64_16K_PAGES
517 default ARM64_VA_BITS_42 if ARM64_64K_PAGES
519 Allows choosing one of multiple possible virtual address
520 space sizes. The level of translation table is determined by
521 a combination of page size and virtual address space size.
523 config ARM64_VA_BITS_36
524 bool "36-bit" if EXPERT
525 depends on ARM64_16K_PAGES
527 config ARM64_VA_BITS_39
529 depends on ARM64_4K_PAGES
531 config ARM64_VA_BITS_42
533 depends on ARM64_64K_PAGES
535 config ARM64_VA_BITS_47
537 depends on ARM64_16K_PAGES
539 config ARM64_VA_BITS_48
546 default 36 if ARM64_VA_BITS_36
547 default 39 if ARM64_VA_BITS_39
548 default 42 if ARM64_VA_BITS_42
549 default 47 if ARM64_VA_BITS_47
550 default 48 if ARM64_VA_BITS_48
552 config CPU_BIG_ENDIAN
553 bool "Build big-endian kernel"
555 Say Y if you plan on running a kernel in big-endian mode.
558 bool "Multi-core scheduler support"
560 Multi-core scheduler support improves the CPU scheduler's decision
561 making when dealing with multi-core CPU chips at a cost of slightly
562 increased overhead in some places. If unsure say N here.
565 bool "SMT scheduler support"
567 Improves the CPU scheduler's decision making when dealing with
568 MultiThreading at a cost of slightly increased overhead in some
569 places. If unsure say N here.
572 int "Maximum number of CPUs (2-4096)"
574 # These have to remain sorted largest to smallest
578 bool "Support for hot-pluggable CPUs"
579 select GENERIC_IRQ_MIGRATION
581 Say Y here to experiment with turning CPUs off and on. CPUs
582 can be controlled through /sys/devices/system/cpu.
584 # Common NUMA Features
586 bool "Numa Memory Allocation and Scheduler Support"
587 select ACPI_NUMA if ACPI
590 Enable NUMA (Non Uniform Memory Access) support.
592 The kernel will try to allocate memory used by a CPU on the
593 local memory of the CPU and add some more
594 NUMA awareness to the kernel.
597 int "Maximum NUMA Nodes (as a power of 2)"
600 depends on NEED_MULTIPLE_NODES
602 Specify the maximum number of NUMA Nodes available on the target
603 system. Increases memory reserved to accommodate various tables.
605 config USE_PERCPU_NUMA_NODE_ID
609 config HAVE_SETUP_PER_CPU_AREA
613 config NEED_PER_CPU_EMBED_FIRST_CHUNK
617 source kernel/Kconfig.preempt
618 source kernel/Kconfig.hz
620 config ARCH_SUPPORTS_DEBUG_PAGEALLOC
623 config ARCH_HAS_HOLES_MEMORYMODEL
624 def_bool y if SPARSEMEM
626 config ARCH_SPARSEMEM_ENABLE
628 select SPARSEMEM_VMEMMAP_ENABLE
630 config ARCH_SPARSEMEM_DEFAULT
631 def_bool ARCH_SPARSEMEM_ENABLE
633 config ARCH_SELECT_MEMORY_MODEL
634 def_bool ARCH_SPARSEMEM_ENABLE
636 config HAVE_ARCH_PFN_VALID
637 def_bool ARCH_HAS_HOLES_MEMORYMODEL || !SPARSEMEM
639 config HW_PERF_EVENTS
643 config SYS_SUPPORTS_HUGETLBFS
646 config ARCH_WANT_HUGE_PMD_SHARE
647 def_bool y if ARM64_4K_PAGES || (ARM64_16K_PAGES && !ARM64_VA_BITS_36)
649 config ARCH_HAS_CACHE_LINE_SIZE
655 bool "Enable seccomp to safely compute untrusted bytecode"
657 This kernel feature is useful for number crunching applications
658 that may need to compute untrusted bytecode during their
659 execution. By using pipes or other transports made available to
660 the process as file descriptors supporting the read/write
661 syscalls, it's possible to isolate those applications in
662 their own address space using seccomp. Once seccomp is
663 enabled via prctl(PR_SET_SECCOMP), it cannot be disabled
664 and the task is only allowed to execute a few safe syscalls
665 defined by each seccomp mode.
668 bool "Enable paravirtualization code"
670 This changes the kernel so it can modify itself when it is run
671 under a hypervisor, potentially improving performance significantly
672 over full virtualization.
674 config PARAVIRT_TIME_ACCOUNTING
675 bool "Paravirtual steal time accounting"
679 Select this option to enable fine granularity task steal time
680 accounting. Time spent executing other tasks in parallel with
681 the current vCPU is discounted from the vCPU power. To account for
682 that, there can be a small performance impact.
684 If in doubt, say N here.
687 depends on PM_SLEEP_SMP
689 bool "kexec system call"
691 kexec is a system call that implements the ability to shutdown your
692 current kernel, and to start another kernel. It is like a reboot
693 but it is independent of the system firmware. And like a reboot
694 you can start any kernel with it, not just Linux.
701 bool "Xen guest support on ARM64"
702 depends on ARM64 && OF
706 Say Y if you want to run Linux in a Virtual Machine on Xen on ARM64.
708 config FORCE_MAX_ZONEORDER
710 default "14" if (ARM64_64K_PAGES && TRANSPARENT_HUGEPAGE)
711 default "12" if (ARM64_16K_PAGES && TRANSPARENT_HUGEPAGE)
714 The kernel memory allocator divides physically contiguous memory
715 blocks into "zones", where each zone is a power of two number of
716 pages. This option selects the largest power of two that the kernel
717 keeps in the memory allocator. If you need to allocate very large
718 blocks of physically contiguous memory, then you may need to
721 This config option is actually maximum order plus one. For example,
722 a value of 11 means that the largest free memory block is 2^10 pages.
724 We make sure that we can allocate upto a HugePage size for each configuration.
726 MAX_ORDER = (PMD_SHIFT - PAGE_SHIFT) + 1 => PAGE_SHIFT - 2
728 However for 4K, we choose a higher default value, 11 as opposed to 10, giving us
729 4M allocations matching the default size used by generic code.
731 menuconfig ARMV8_DEPRECATED
732 bool "Emulate deprecated/obsolete ARMv8 instructions"
735 Legacy software support may require certain instructions
736 that have been deprecated or obsoleted in the architecture.
738 Enable this config to enable selective emulation of these
746 bool "Emulate SWP/SWPB instructions"
748 ARMv8 obsoletes the use of A32 SWP/SWPB instructions such that
749 they are always undefined. Say Y here to enable software
750 emulation of these instructions for userspace using LDXR/STXR.
752 In some older versions of glibc [<=2.8] SWP is used during futex
753 trylock() operations with the assumption that the code will not
754 be preempted. This invalid assumption may be more likely to fail
755 with SWP emulation enabled, leading to deadlock of the user
758 NOTE: when accessing uncached shared regions, LDXR/STXR rely
759 on an external transaction monitoring block called a global
760 monitor to maintain update atomicity. If your system does not
761 implement a global monitor, this option can cause programs that
762 perform SWP operations to uncached memory to deadlock.
766 config CP15_BARRIER_EMULATION
767 bool "Emulate CP15 Barrier instructions"
769 The CP15 barrier instructions - CP15ISB, CP15DSB, and
770 CP15DMB - are deprecated in ARMv8 (and ARMv7). It is
771 strongly recommended to use the ISB, DSB, and DMB
772 instructions instead.
774 Say Y here to enable software emulation of these
775 instructions for AArch32 userspace code. When this option is
776 enabled, CP15 barrier usage is traced which can help
777 identify software that needs updating.
781 config SETEND_EMULATION
782 bool "Emulate SETEND instruction"
784 The SETEND instruction alters the data-endianness of the
785 AArch32 EL0, and is deprecated in ARMv8.
787 Say Y here to enable software emulation of the instruction
788 for AArch32 userspace code.
790 Note: All the cpus on the system must have mixed endian support at EL0
791 for this feature to be enabled. If a new CPU - which doesn't support mixed
792 endian - is hotplugged in after this feature has been enabled, there could
793 be unexpected results in the applications.
798 config ARM64_SW_TTBR0_PAN
799 bool "Emulate Privileged Access Never using TTBR0_EL1 switching"
801 Enabling this option prevents the kernel from accessing
802 user-space memory directly by pointing TTBR0_EL1 to a reserved
803 zeroed area and reserved ASID. The user access routines
804 restore the valid TTBR0_EL1 temporarily.
806 menu "ARMv8.1 architectural features"
808 config ARM64_HW_AFDBM
809 bool "Support for hardware updates of the Access and Dirty page flags"
812 The ARMv8.1 architecture extensions introduce support for
813 hardware updates of the access and dirty information in page
814 table entries. When enabled in TCR_EL1 (HA and HD bits) on
815 capable processors, accesses to pages with PTE_AF cleared will
816 set this bit instead of raising an access flag fault.
817 Similarly, writes to read-only pages with the DBM bit set will
818 clear the read-only bit (AP[2]) instead of raising a
821 Kernels built with this configuration option enabled continue
822 to work on pre-ARMv8.1 hardware and the performance impact is
823 minimal. If unsure, say Y.
826 bool "Enable support for Privileged Access Never (PAN)"
829 Privileged Access Never (PAN; part of the ARMv8.1 Extensions)
830 prevents the kernel or hypervisor from accessing user-space (EL0)
833 Choosing this option will cause any unprotected (not using
834 copy_to_user et al) memory access to fail with a permission fault.
836 The feature is detected at runtime, and will remain as a 'nop'
837 instruction if the cpu does not implement the feature.
839 config ARM64_LSE_ATOMICS
840 bool "Atomic instructions"
842 As part of the Large System Extensions, ARMv8.1 introduces new
843 atomic instructions that are designed specifically to scale in
846 Say Y here to make use of these instructions for the in-kernel
847 atomic routines. This incurs a small overhead on CPUs that do
848 not support these instructions and requires the kernel to be
849 built with binutils >= 2.25.
852 bool "Enable support for Virtualization Host Extensions (VHE)"
855 Virtualization Host Extensions (VHE) allow the kernel to run
856 directly at EL2 (instead of EL1) on processors that support
857 it. This leads to better performance for KVM, as they reduce
858 the cost of the world switch.
860 Selecting this option allows the VHE feature to be detected
861 at runtime, and does not affect processors that do not
862 implement this feature.
866 menu "ARMv8.2 architectural features"
869 bool "Enable support for User Access Override (UAO)"
872 User Access Override (UAO; part of the ARMv8.2 Extensions)
873 causes the 'unprivileged' variant of the load/store instructions to
874 be overriden to be privileged.
876 This option changes get_user() and friends to use the 'unprivileged'
877 variant of the load/store instructions. This ensures that user-space
878 really did have access to the supplied memory. When addr_limit is
879 set to kernel memory the UAO bit will be set, allowing privileged
880 access to kernel memory.
882 Choosing this option will cause copy_to_user() et al to use user-space
885 The feature is detected at runtime, the kernel will use the
886 regular load/store instructions if the cpu does not implement the
891 config ARM64_MODULE_CMODEL_LARGE
894 config ARM64_MODULE_PLTS
896 select ARM64_MODULE_CMODEL_LARGE
897 select HAVE_MOD_ARCH_SPECIFIC
902 This builds the kernel as a Position Independent Executable (PIE),
903 which retains all relocation metadata required to relocate the
904 kernel binary at runtime to a different virtual address than the
905 address it was linked at.
906 Since AArch64 uses the RELA relocation format, this requires a
907 relocation pass at runtime even if the kernel is loaded at the
908 same address it was linked at.
910 config RANDOMIZE_BASE
911 bool "Randomize the address of the kernel image"
912 select ARM64_MODULE_PLTS if MODULES
915 Randomizes the virtual address at which the kernel image is
916 loaded, as a security feature that deters exploit attempts
917 relying on knowledge of the location of kernel internals.
919 It is the bootloader's job to provide entropy, by passing a
920 random u64 value in /chosen/kaslr-seed at kernel entry.
922 When booting via the UEFI stub, it will invoke the firmware's
923 EFI_RNG_PROTOCOL implementation (if available) to supply entropy
924 to the kernel proper. In addition, it will randomise the physical
925 location of the kernel Image as well.
929 config RANDOMIZE_MODULE_REGION_FULL
930 bool "Randomize the module region independently from the core kernel"
931 depends on RANDOMIZE_BASE && !DYNAMIC_FTRACE
934 Randomizes the location of the module region without considering the
935 location of the core kernel. This way, it is impossible for modules
936 to leak information about the location of core kernel data structures
937 but it does imply that function calls between modules and the core
938 kernel will need to be resolved via veneers in the module PLT.
940 When this option is not set, the module region will be randomized over
941 a limited range that contains the [_stext, _etext] interval of the
942 core kernel, so branch relocations are always in range.
948 config ARM64_ACPI_PARKING_PROTOCOL
949 bool "Enable support for the ARM64 ACPI parking protocol"
952 Enable support for the ARM64 ACPI parking protocol. If disabled
953 the kernel will not allow booting through the ARM64 ACPI parking
954 protocol even if the corresponding data is present in the ACPI
958 string "Default kernel command string"
961 Provide a set of default command-line options at build time by
962 entering them here. As a minimum, you should specify the the
963 root device (e.g. root=/dev/nfs).
966 bool "Always use the default kernel command string"
968 Always use the default kernel command string, even if the boot
969 loader passes other arguments to the kernel.
970 This is useful if you cannot or don't want to change the
971 command-line options your boot loader passes to the kernel.
977 bool "UEFI runtime support"
978 depends on OF && !CPU_BIG_ENDIAN
981 select EFI_PARAMS_FROM_FDT
982 select EFI_RUNTIME_WRAPPERS
987 This option provides support for runtime services provided
988 by UEFI firmware (such as non-volatile variables, realtime
989 clock, and platform reset). A UEFI stub is also provided to
990 allow the kernel to be booted as an EFI application. This
991 is only useful on systems that have UEFI firmware.
994 bool "Enable support for SMBIOS (DMI) tables"
998 This enables SMBIOS/DMI feature for systems.
1000 This option is only useful on systems that have UEFI firmware.
1001 However, even with this option, the resultant kernel should
1002 continue to boot on existing non-UEFI platforms.
1006 menu "Userspace binary formats"
1008 source "fs/Kconfig.binfmt"
1011 bool "Kernel support for 32-bit EL0"
1012 depends on ARM64_4K_PAGES || EXPERT
1013 select COMPAT_BINFMT_ELF
1015 select OLD_SIGSUSPEND3
1016 select COMPAT_OLD_SIGACTION
1018 This option enables support for a 32-bit EL0 running under a 64-bit
1019 kernel at EL1. AArch32-specific components such as system calls,
1020 the user helper functions, VFP support and the ptrace interface are
1021 handled appropriately by the kernel.
1023 If you use a page size other than 4KB (i.e, 16KB or 64KB), please be aware
1024 that you will only be able to execute AArch32 binaries that were compiled
1025 with page size aligned segments.
1027 If you want to execute 32-bit userspace applications, say Y.
1029 config SYSVIPC_COMPAT
1031 depends on COMPAT && SYSVIPC
1035 menu "Power management options"
1037 source "kernel/power/Kconfig"
1039 config ARCH_HIBERNATION_POSSIBLE
1043 config ARCH_HIBERNATION_HEADER
1045 depends on HIBERNATION
1047 config ARCH_SUSPEND_POSSIBLE
1052 menu "CPU Power Management"
1054 source "drivers/cpuidle/Kconfig"
1056 source "drivers/cpufreq/Kconfig"
1060 source "net/Kconfig"
1062 source "drivers/Kconfig"
1064 source "drivers/firmware/Kconfig"
1066 source "drivers/acpi/Kconfig"
1070 source "arch/arm64/kvm/Kconfig"
1072 source "arch/arm64/Kconfig.debug"
1074 source "security/Kconfig"
1076 source "crypto/Kconfig"
1078 source "arch/arm64/crypto/Kconfig"
1081 source "lib/Kconfig"