3 select ACPI_CCA_REQUIRED if ACPI
4 select ACPI_GENERIC_GSI if ACPI
5 select ACPI_REDUCED_HARDWARE_ONLY if ACPI
6 select ARCH_HAS_DEVMEM_IS_ALLOWED
7 select ARCH_HAS_ATOMIC64_DEC_IF_POSITIVE
8 select ARCH_HAS_ELF_RANDOMIZE
9 select ARCH_HAS_GCOV_PROFILE_ALL
10 select ARCH_HAS_SG_CHAIN
11 select ARCH_HAS_TICK_BROADCAST if GENERIC_CLOCKEVENTS_BROADCAST
12 select ARCH_USE_CMPXCHG_LOCKREF
13 select ARCH_SUPPORTS_ATOMIC_RMW
14 select ARCH_WANT_OPTIONAL_GPIOLIB
15 select ARCH_WANT_COMPAT_IPC_PARSE_VERSION
16 select ARCH_WANT_FRAME_POINTERS
17 select ARCH_HAS_UBSAN_SANITIZE_ALL
21 select AUDIT_ARCH_COMPAT_GENERIC
22 select ARM_GIC_V2M if PCI_MSI
24 select ARM_GIC_V3_ITS if PCI_MSI
26 select BUILDTIME_EXTABLE_SORT
27 select CLONE_BACKWARDS
29 select CPU_PM if (SUSPEND || CPU_IDLE)
30 select DCACHE_WORD_ACCESS
33 select GENERIC_ALLOCATOR
34 select GENERIC_CLOCKEVENTS
35 select GENERIC_CLOCKEVENTS_BROADCAST
36 select GENERIC_CPU_AUTOPROBE
37 select GENERIC_EARLY_IOREMAP
38 select GENERIC_IDLE_POLL_SETUP
39 select GENERIC_IRQ_PROBE
40 select GENERIC_IRQ_SHOW
41 select GENERIC_IRQ_SHOW_LEVEL
42 select GENERIC_PCI_IOMAP
43 select GENERIC_SCHED_CLOCK
44 select GENERIC_SMP_IDLE_THREAD
45 select GENERIC_STRNCPY_FROM_USER
46 select GENERIC_STRNLEN_USER
47 select GENERIC_TIME_VSYSCALL
48 select HANDLE_DOMAIN_IRQ
49 select HARDIRQS_SW_RESEND
50 select HAVE_ALIGNED_STRUCT_PAGE if SLUB
51 select HAVE_ARCH_AUDITSYSCALL
52 select HAVE_ARCH_BITREVERSE
53 select HAVE_ARCH_HUGE_VMAP
54 select HAVE_ARCH_JUMP_LABEL
55 select HAVE_ARCH_KASAN if SPARSEMEM_VMEMMAP && !(ARM64_16K_PAGES && ARM64_VA_BITS_48)
57 select HAVE_ARCH_MMAP_RND_BITS
58 select HAVE_ARCH_MMAP_RND_COMPAT_BITS if COMPAT
59 select HAVE_ARCH_SECCOMP_FILTER
60 select HAVE_ARCH_TRACEHOOK
62 select HAVE_C_RECORDMCOUNT
63 select HAVE_CC_STACKPROTECTOR
64 select HAVE_CMPXCHG_DOUBLE
65 select HAVE_CMPXCHG_LOCAL
66 select HAVE_DEBUG_BUGVERBOSE
67 select HAVE_DEBUG_KMEMLEAK
68 select HAVE_DMA_API_DEBUG
69 select HAVE_DMA_CONTIGUOUS
70 select HAVE_DYNAMIC_FTRACE
71 select HAVE_EFFICIENT_UNALIGNED_ACCESS
72 select HAVE_FTRACE_MCOUNT_RECORD
73 select HAVE_FUNCTION_TRACER
74 select HAVE_FUNCTION_GRAPH_TRACER
75 select HAVE_GENERIC_DMA_COHERENT
76 select HAVE_HW_BREAKPOINT if PERF_EVENTS
77 select HAVE_IRQ_TIME_ACCOUNTING
79 select HAVE_PATA_PLATFORM
80 select HAVE_PERF_EVENTS
82 select HAVE_PERF_USER_STACK_DUMP
83 select HAVE_RCU_TABLE_FREE
84 select HAVE_SYSCALL_TRACEPOINTS
85 select IOMMU_DMA if IOMMU_SUPPORT
87 select IRQ_FORCED_THREADING
88 select MODULES_USE_ELF_RELA
91 select OF_EARLY_FLATTREE
92 select OF_RESERVED_MEM
93 select PERF_USE_VMALLOC
98 select SYSCTL_EXCEPTION_TRACE
99 select HAVE_CONTEXT_TRACKING
100 select HAVE_ARM_SMCCC
102 ARM 64-bit (AArch64) Linux support.
107 config ARCH_PHYS_ADDR_T_64BIT
113 config ARCH_MMAP_RND_BITS_MIN
114 default 14 if ARM64_64K_PAGES
115 default 16 if ARM64_16K_PAGES
118 # max bits determined by the following formula:
119 # VA_BITS - PAGE_SHIFT - 3
120 config ARCH_MMAP_RND_BITS_MAX
121 default 19 if ARM64_VA_BITS=36
122 default 24 if ARM64_VA_BITS=39
123 default 27 if ARM64_VA_BITS=42
124 default 30 if ARM64_VA_BITS=47
125 default 29 if ARM64_VA_BITS=48 && ARM64_64K_PAGES
126 default 31 if ARM64_VA_BITS=48 && ARM64_16K_PAGES
127 default 33 if ARM64_VA_BITS=48
128 default 14 if ARM64_64K_PAGES
129 default 16 if ARM64_16K_PAGES
132 config ARCH_MMAP_RND_COMPAT_BITS_MIN
133 default 7 if ARM64_64K_PAGES
134 default 9 if ARM64_16K_PAGES
137 config ARCH_MMAP_RND_COMPAT_BITS_MAX
143 config STACKTRACE_SUPPORT
146 config ILLEGAL_POINTER_VALUE
148 default 0xdead000000000000
150 config LOCKDEP_SUPPORT
153 config TRACE_IRQFLAGS_SUPPORT
156 config RWSEM_XCHGADD_ALGORITHM
163 config GENERIC_BUG_RELATIVE_POINTERS
165 depends on GENERIC_BUG
167 config GENERIC_HWEIGHT
173 config GENERIC_CALIBRATE_DELAY
179 config HAVE_GENERIC_RCU_GUP
182 config ARCH_DMA_ADDR_T_64BIT
185 config NEED_DMA_MAP_STATE
188 config NEED_SG_DMA_LENGTH
200 config KERNEL_MODE_NEON
203 config FIX_EARLYCON_MEM
206 config PGTABLE_LEVELS
208 default 2 if ARM64_16K_PAGES && ARM64_VA_BITS_36
209 default 2 if ARM64_64K_PAGES && ARM64_VA_BITS_42
210 default 3 if ARM64_64K_PAGES && ARM64_VA_BITS_48
211 default 3 if ARM64_4K_PAGES && ARM64_VA_BITS_39
212 default 3 if ARM64_16K_PAGES && ARM64_VA_BITS_47
213 default 4 if !ARM64_64K_PAGES && ARM64_VA_BITS_48
215 source "init/Kconfig"
217 source "kernel/Kconfig.freezer"
219 source "arch/arm64/Kconfig.platforms"
226 This feature enables support for PCI bus system. If you say Y
227 here, the kernel will include drivers and infrastructure code
228 to support PCI bus devices.
233 config PCI_DOMAINS_GENERIC
239 source "drivers/pci/Kconfig"
240 source "drivers/pci/pcie/Kconfig"
241 source "drivers/pci/hotplug/Kconfig"
245 menu "Kernel Features"
247 menu "ARM errata workarounds via the alternatives framework"
249 config ARM64_ERRATUM_826319
250 bool "Cortex-A53: 826319: System might deadlock if a write cannot complete until read data is accepted"
253 This option adds an alternative code sequence to work around ARM
254 erratum 826319 on Cortex-A53 parts up to r0p2 with an AMBA 4 ACE or
255 AXI master interface and an L2 cache.
257 If a Cortex-A53 uses an AMBA AXI4 ACE interface to other processors
258 and is unable to accept a certain write via this interface, it will
259 not progress on read data presented on the read data channel and the
262 The workaround promotes data cache clean instructions to
263 data cache clean-and-invalidate.
264 Please note that this does not necessarily enable the workaround,
265 as it depends on the alternative framework, which will only patch
266 the kernel if an affected CPU is detected.
270 config ARM64_ERRATUM_827319
271 bool "Cortex-A53: 827319: Data cache clean instructions might cause overlapping transactions to the interconnect"
274 This option adds an alternative code sequence to work around ARM
275 erratum 827319 on Cortex-A53 parts up to r0p2 with an AMBA 5 CHI
276 master interface and an L2 cache.
278 Under certain conditions this erratum can cause a clean line eviction
279 to occur at the same time as another transaction to the same address
280 on the AMBA 5 CHI interface, which can cause data corruption if the
281 interconnect reorders the two transactions.
283 The workaround promotes data cache clean instructions to
284 data cache clean-and-invalidate.
285 Please note that this does not necessarily enable the workaround,
286 as it depends on the alternative framework, which will only patch
287 the kernel if an affected CPU is detected.
291 config ARM64_ERRATUM_824069
292 bool "Cortex-A53: 824069: Cache line might not be marked as clean after a CleanShared snoop"
295 This option adds an alternative code sequence to work around ARM
296 erratum 824069 on Cortex-A53 parts up to r0p2 when it is connected
297 to a coherent interconnect.
299 If a Cortex-A53 processor is executing a store or prefetch for
300 write instruction at the same time as a processor in another
301 cluster is executing a cache maintenance operation to the same
302 address, then this erratum might cause a clean cache line to be
303 incorrectly marked as dirty.
305 The workaround promotes data cache clean instructions to
306 data cache clean-and-invalidate.
307 Please note that this option does not necessarily enable the
308 workaround, as it depends on the alternative framework, which will
309 only patch the kernel if an affected CPU is detected.
313 config ARM64_ERRATUM_819472
314 bool "Cortex-A53: 819472: Store exclusive instructions might cause data corruption"
317 This option adds an alternative code sequence to work around ARM
318 erratum 819472 on Cortex-A53 parts up to r0p1 with an L2 cache
319 present when it is connected to a coherent interconnect.
321 If the processor is executing a load and store exclusive sequence at
322 the same time as a processor in another cluster is executing a cache
323 maintenance operation to the same address, then this erratum might
324 cause data corruption.
326 The workaround promotes data cache clean instructions to
327 data cache clean-and-invalidate.
328 Please note that this does not necessarily enable the workaround,
329 as it depends on the alternative framework, which will only patch
330 the kernel if an affected CPU is detected.
334 config ARM64_ERRATUM_832075
335 bool "Cortex-A57: 832075: possible deadlock on mixing exclusive memory accesses with device loads"
338 This option adds an alternative code sequence to work around ARM
339 erratum 832075 on Cortex-A57 parts up to r1p2.
341 Affected Cortex-A57 parts might deadlock when exclusive load/store
342 instructions to Write-Back memory are mixed with Device loads.
344 The workaround is to promote device loads to use Load-Acquire
346 Please note that this does not necessarily enable the workaround,
347 as it depends on the alternative framework, which will only patch
348 the kernel if an affected CPU is detected.
352 config ARM64_ERRATUM_834220
353 bool "Cortex-A57: 834220: Stage 2 translation fault might be incorrectly reported in presence of a Stage 1 fault"
357 This option adds an alternative code sequence to work around ARM
358 erratum 834220 on Cortex-A57 parts up to r1p2.
360 Affected Cortex-A57 parts might report a Stage 2 translation
361 fault as the result of a Stage 1 fault for load crossing a
362 page boundary when there is a permission or device memory
363 alignment fault at Stage 1 and a translation fault at Stage 2.
365 The workaround is to verify that the Stage 1 translation
366 doesn't generate a fault before handling the Stage 2 fault.
367 Please note that this does not necessarily enable the workaround,
368 as it depends on the alternative framework, which will only patch
369 the kernel if an affected CPU is detected.
373 config ARM64_ERRATUM_845719
374 bool "Cortex-A53: 845719: a load might read incorrect data"
378 This option adds an alternative code sequence to work around ARM
379 erratum 845719 on Cortex-A53 parts up to r0p4.
381 When running a compat (AArch32) userspace on an affected Cortex-A53
382 part, a load at EL0 from a virtual address that matches the bottom 32
383 bits of the virtual address used by a recent load at (AArch64) EL1
384 might return incorrect data.
386 The workaround is to write the contextidr_el1 register on exception
387 return to a 32-bit task.
388 Please note that this does not necessarily enable the workaround,
389 as it depends on the alternative framework, which will only patch
390 the kernel if an affected CPU is detected.
394 config ARM64_ERRATUM_843419
395 bool "Cortex-A53: 843419: A load or store might access an incorrect address"
398 select ARM64_MODULE_CMODEL_LARGE
400 This option builds kernel modules using the large memory model in
401 order to avoid the use of the ADRP instruction, which can cause
402 a subsequent memory access to use an incorrect address on Cortex-A53
405 Note that the kernel itself must be linked with a version of ld
406 which fixes potentially affected ADRP instructions through the
411 config CAVIUM_ERRATUM_22375
412 bool "Cavium erratum 22375, 24313"
415 Enable workaround for erratum 22375, 24313.
417 This implements two gicv3-its errata workarounds for ThunderX. Both
418 with small impact affecting only ITS table allocation.
420 erratum 22375: only alloc 8MB table size
421 erratum 24313: ignore memory access type
423 The fixes are in ITS initialization and basically ignore memory access
424 type and table size provided by the TYPER and BASER registers.
428 config CAVIUM_ERRATUM_23154
429 bool "Cavium erratum 23154: Access to ICC_IAR1_EL1 is not sync'ed"
432 The gicv3 of ThunderX requires a modified version for
433 reading the IAR status to ensure data synchronization
434 (access to icc_iar1_el1 is not sync'ed before and after).
438 config CAVIUM_ERRATUM_27456
439 bool "Cavium erratum 27456: Broadcast TLBI instructions may cause icache corruption"
442 On ThunderX T88 pass 1.x through 2.1 parts, broadcast TLBI
443 instructions may cause the icache to become corrupted if it
444 contains data for a non-current ASID. The fix is to
445 invalidate the icache when changing the mm context.
454 default ARM64_4K_PAGES
456 Page size (translation granule) configuration.
458 config ARM64_4K_PAGES
461 This feature enables 4KB pages support.
463 config ARM64_16K_PAGES
466 The system will use 16KB pages support. AArch32 emulation
467 requires applications compiled with 16K (or a multiple of 16K)
470 config ARM64_64K_PAGES
473 This feature enables 64KB pages support (4KB by default)
474 allowing only two levels of page tables and faster TLB
475 look-up. AArch32 emulation requires applications compiled
476 with 64K aligned segments.
481 prompt "Virtual address space size"
482 default ARM64_VA_BITS_39 if ARM64_4K_PAGES
483 default ARM64_VA_BITS_47 if ARM64_16K_PAGES
484 default ARM64_VA_BITS_42 if ARM64_64K_PAGES
486 Allows choosing one of multiple possible virtual address
487 space sizes. The level of translation table is determined by
488 a combination of page size and virtual address space size.
490 config ARM64_VA_BITS_36
491 bool "36-bit" if EXPERT
492 depends on ARM64_16K_PAGES
494 config ARM64_VA_BITS_39
496 depends on ARM64_4K_PAGES
498 config ARM64_VA_BITS_42
500 depends on ARM64_64K_PAGES
502 config ARM64_VA_BITS_47
504 depends on ARM64_16K_PAGES
506 config ARM64_VA_BITS_48
513 default 36 if ARM64_VA_BITS_36
514 default 39 if ARM64_VA_BITS_39
515 default 42 if ARM64_VA_BITS_42
516 default 47 if ARM64_VA_BITS_47
517 default 48 if ARM64_VA_BITS_48
519 config CPU_BIG_ENDIAN
520 bool "Build big-endian kernel"
522 Say Y if you plan on running a kernel in big-endian mode.
525 bool "Multi-core scheduler support"
527 Multi-core scheduler support improves the CPU scheduler's decision
528 making when dealing with multi-core CPU chips at a cost of slightly
529 increased overhead in some places. If unsure say N here.
532 bool "SMT scheduler support"
534 Improves the CPU scheduler's decision making when dealing with
535 MultiThreading at a cost of slightly increased overhead in some
536 places. If unsure say N here.
539 int "Maximum number of CPUs (2-4096)"
541 # These have to remain sorted largest to smallest
545 bool "Support for hot-pluggable CPUs"
546 select GENERIC_IRQ_MIGRATION
548 Say Y here to experiment with turning CPUs off and on. CPUs
549 can be controlled through /sys/devices/system/cpu.
551 source kernel/Kconfig.preempt
552 source kernel/Kconfig.hz
554 config ARCH_SUPPORTS_DEBUG_PAGEALLOC
557 config ARCH_HAS_HOLES_MEMORYMODEL
558 def_bool y if SPARSEMEM
560 config ARCH_SPARSEMEM_ENABLE
562 select SPARSEMEM_VMEMMAP_ENABLE
564 config ARCH_SPARSEMEM_DEFAULT
565 def_bool ARCH_SPARSEMEM_ENABLE
567 config ARCH_SELECT_MEMORY_MODEL
568 def_bool ARCH_SPARSEMEM_ENABLE
570 config HAVE_ARCH_PFN_VALID
571 def_bool ARCH_HAS_HOLES_MEMORYMODEL || !SPARSEMEM
573 config HW_PERF_EVENTS
577 config SYS_SUPPORTS_HUGETLBFS
580 config ARCH_WANT_HUGE_PMD_SHARE
581 def_bool y if ARM64_4K_PAGES || (ARM64_16K_PAGES && !ARM64_VA_BITS_36)
583 config HAVE_ARCH_TRANSPARENT_HUGEPAGE
586 config ARCH_HAS_CACHE_LINE_SIZE
592 bool "Enable seccomp to safely compute untrusted bytecode"
594 This kernel feature is useful for number crunching applications
595 that may need to compute untrusted bytecode during their
596 execution. By using pipes or other transports made available to
597 the process as file descriptors supporting the read/write
598 syscalls, it's possible to isolate those applications in
599 their own address space using seccomp. Once seccomp is
600 enabled via prctl(PR_SET_SECCOMP), it cannot be disabled
601 and the task is only allowed to execute a few safe syscalls
602 defined by each seccomp mode.
605 bool "Enable paravirtualization code"
607 This changes the kernel so it can modify itself when it is run
608 under a hypervisor, potentially improving performance significantly
609 over full virtualization.
611 config PARAVIRT_TIME_ACCOUNTING
612 bool "Paravirtual steal time accounting"
616 Select this option to enable fine granularity task steal time
617 accounting. Time spent executing other tasks in parallel with
618 the current vCPU is discounted from the vCPU power. To account for
619 that, there can be a small performance impact.
621 If in doubt, say N here.
628 bool "Xen guest support on ARM64"
629 depends on ARM64 && OF
633 Say Y if you want to run Linux in a Virtual Machine on Xen on ARM64.
635 config FORCE_MAX_ZONEORDER
637 default "14" if (ARM64_64K_PAGES && TRANSPARENT_HUGEPAGE)
638 default "12" if (ARM64_16K_PAGES && TRANSPARENT_HUGEPAGE)
641 The kernel memory allocator divides physically contiguous memory
642 blocks into "zones", where each zone is a power of two number of
643 pages. This option selects the largest power of two that the kernel
644 keeps in the memory allocator. If you need to allocate very large
645 blocks of physically contiguous memory, then you may need to
648 This config option is actually maximum order plus one. For example,
649 a value of 11 means that the largest free memory block is 2^10 pages.
651 We make sure that we can allocate upto a HugePage size for each configuration.
653 MAX_ORDER = (PMD_SHIFT - PAGE_SHIFT) + 1 => PAGE_SHIFT - 2
655 However for 4K, we choose a higher default value, 11 as opposed to 10, giving us
656 4M allocations matching the default size used by generic code.
658 menuconfig ARMV8_DEPRECATED
659 bool "Emulate deprecated/obsolete ARMv8 instructions"
662 Legacy software support may require certain instructions
663 that have been deprecated or obsoleted in the architecture.
665 Enable this config to enable selective emulation of these
673 bool "Emulate SWP/SWPB instructions"
675 ARMv8 obsoletes the use of A32 SWP/SWPB instructions such that
676 they are always undefined. Say Y here to enable software
677 emulation of these instructions for userspace using LDXR/STXR.
679 In some older versions of glibc [<=2.8] SWP is used during futex
680 trylock() operations with the assumption that the code will not
681 be preempted. This invalid assumption may be more likely to fail
682 with SWP emulation enabled, leading to deadlock of the user
685 NOTE: when accessing uncached shared regions, LDXR/STXR rely
686 on an external transaction monitoring block called a global
687 monitor to maintain update atomicity. If your system does not
688 implement a global monitor, this option can cause programs that
689 perform SWP operations to uncached memory to deadlock.
693 config CP15_BARRIER_EMULATION
694 bool "Emulate CP15 Barrier instructions"
696 The CP15 barrier instructions - CP15ISB, CP15DSB, and
697 CP15DMB - are deprecated in ARMv8 (and ARMv7). It is
698 strongly recommended to use the ISB, DSB, and DMB
699 instructions instead.
701 Say Y here to enable software emulation of these
702 instructions for AArch32 userspace code. When this option is
703 enabled, CP15 barrier usage is traced which can help
704 identify software that needs updating.
708 config SETEND_EMULATION
709 bool "Emulate SETEND instruction"
711 The SETEND instruction alters the data-endianness of the
712 AArch32 EL0, and is deprecated in ARMv8.
714 Say Y here to enable software emulation of the instruction
715 for AArch32 userspace code.
717 Note: All the cpus on the system must have mixed endian support at EL0
718 for this feature to be enabled. If a new CPU - which doesn't support mixed
719 endian - is hotplugged in after this feature has been enabled, there could
720 be unexpected results in the applications.
725 menu "ARMv8.1 architectural features"
727 config ARM64_HW_AFDBM
728 bool "Support for hardware updates of the Access and Dirty page flags"
731 The ARMv8.1 architecture extensions introduce support for
732 hardware updates of the access and dirty information in page
733 table entries. When enabled in TCR_EL1 (HA and HD bits) on
734 capable processors, accesses to pages with PTE_AF cleared will
735 set this bit instead of raising an access flag fault.
736 Similarly, writes to read-only pages with the DBM bit set will
737 clear the read-only bit (AP[2]) instead of raising a
740 Kernels built with this configuration option enabled continue
741 to work on pre-ARMv8.1 hardware and the performance impact is
742 minimal. If unsure, say Y.
745 bool "Enable support for Privileged Access Never (PAN)"
748 Privileged Access Never (PAN; part of the ARMv8.1 Extensions)
749 prevents the kernel or hypervisor from accessing user-space (EL0)
752 Choosing this option will cause any unprotected (not using
753 copy_to_user et al) memory access to fail with a permission fault.
755 The feature is detected at runtime, and will remain as a 'nop'
756 instruction if the cpu does not implement the feature.
758 config ARM64_LSE_ATOMICS
759 bool "Atomic instructions"
761 As part of the Large System Extensions, ARMv8.1 introduces new
762 atomic instructions that are designed specifically to scale in
765 Say Y here to make use of these instructions for the in-kernel
766 atomic routines. This incurs a small overhead on CPUs that do
767 not support these instructions and requires the kernel to be
768 built with binutils >= 2.25.
773 bool "Enable support for User Access Override (UAO)"
776 User Access Override (UAO; part of the ARMv8.2 Extensions)
777 causes the 'unprivileged' variant of the load/store instructions to
778 be overriden to be privileged.
780 This option changes get_user() and friends to use the 'unprivileged'
781 variant of the load/store instructions. This ensures that user-space
782 really did have access to the supplied memory. When addr_limit is
783 set to kernel memory the UAO bit will be set, allowing privileged
784 access to kernel memory.
786 Choosing this option will cause copy_to_user() et al to use user-space
789 The feature is detected at runtime, the kernel will use the
790 regular load/store instructions if the cpu does not implement the
793 config ARM64_MODULE_CMODEL_LARGE
796 config ARM64_MODULE_PLTS
798 select ARM64_MODULE_CMODEL_LARGE
799 select HAVE_MOD_ARCH_SPECIFIC
804 This builds the kernel as a Position Independent Executable (PIE),
805 which retains all relocation metadata required to relocate the
806 kernel binary at runtime to a different virtual address than the
807 address it was linked at.
808 Since AArch64 uses the RELA relocation format, this requires a
809 relocation pass at runtime even if the kernel is loaded at the
810 same address it was linked at.
812 config RANDOMIZE_BASE
813 bool "Randomize the address of the kernel image"
814 select ARM64_MODULE_PLTS
817 Randomizes the virtual address at which the kernel image is
818 loaded, as a security feature that deters exploit attempts
819 relying on knowledge of the location of kernel internals.
821 It is the bootloader's job to provide entropy, by passing a
822 random u64 value in /chosen/kaslr-seed at kernel entry.
824 When booting via the UEFI stub, it will invoke the firmware's
825 EFI_RNG_PROTOCOL implementation (if available) to supply entropy
826 to the kernel proper. In addition, it will randomise the physical
827 location of the kernel Image as well.
831 config RANDOMIZE_MODULE_REGION_FULL
832 bool "Randomize the module region independently from the core kernel"
833 depends on RANDOMIZE_BASE
836 Randomizes the location of the module region without considering the
837 location of the core kernel. This way, it is impossible for modules
838 to leak information about the location of core kernel data structures
839 but it does imply that function calls between modules and the core
840 kernel will need to be resolved via veneers in the module PLT.
842 When this option is not set, the module region will be randomized over
843 a limited range that contains the [_stext, _etext] interval of the
844 core kernel, so branch relocations are always in range.
850 config ARM64_ACPI_PARKING_PROTOCOL
851 bool "Enable support for the ARM64 ACPI parking protocol"
854 Enable support for the ARM64 ACPI parking protocol. If disabled
855 the kernel will not allow booting through the ARM64 ACPI parking
856 protocol even if the corresponding data is present in the ACPI
860 string "Default kernel command string"
863 Provide a set of default command-line options at build time by
864 entering them here. As a minimum, you should specify the the
865 root device (e.g. root=/dev/nfs).
868 bool "Always use the default kernel command string"
870 Always use the default kernel command string, even if the boot
871 loader passes other arguments to the kernel.
872 This is useful if you cannot or don't want to change the
873 command-line options your boot loader passes to the kernel.
879 bool "UEFI runtime support"
880 depends on OF && !CPU_BIG_ENDIAN
883 select EFI_PARAMS_FROM_FDT
884 select EFI_RUNTIME_WRAPPERS
889 This option provides support for runtime services provided
890 by UEFI firmware (such as non-volatile variables, realtime
891 clock, and platform reset). A UEFI stub is also provided to
892 allow the kernel to be booted as an EFI application. This
893 is only useful on systems that have UEFI firmware.
896 bool "Enable support for SMBIOS (DMI) tables"
900 This enables SMBIOS/DMI feature for systems.
902 This option is only useful on systems that have UEFI firmware.
903 However, even with this option, the resultant kernel should
904 continue to boot on existing non-UEFI platforms.
908 menu "Userspace binary formats"
910 source "fs/Kconfig.binfmt"
913 bool "Kernel support for 32-bit EL0"
914 depends on ARM64_4K_PAGES || EXPERT
915 select COMPAT_BINFMT_ELF
917 select OLD_SIGSUSPEND3
918 select COMPAT_OLD_SIGACTION
920 This option enables support for a 32-bit EL0 running under a 64-bit
921 kernel at EL1. AArch32-specific components such as system calls,
922 the user helper functions, VFP support and the ptrace interface are
923 handled appropriately by the kernel.
925 If you use a page size other than 4KB (i.e, 16KB or 64KB), please be aware
926 that you will only be able to execute AArch32 binaries that were compiled
927 with page size aligned segments.
929 If you want to execute 32-bit userspace applications, say Y.
931 config SYSVIPC_COMPAT
933 depends on COMPAT && SYSVIPC
937 menu "Power management options"
939 source "kernel/power/Kconfig"
941 config ARCH_SUSPEND_POSSIBLE
946 menu "CPU Power Management"
948 source "drivers/cpuidle/Kconfig"
950 source "drivers/cpufreq/Kconfig"
956 source "drivers/Kconfig"
958 source "drivers/firmware/Kconfig"
960 source "drivers/acpi/Kconfig"
964 source "arch/arm64/kvm/Kconfig"
966 source "arch/arm64/Kconfig.debug"
968 source "security/Kconfig"
970 source "crypto/Kconfig"
972 source "arch/arm64/crypto/Kconfig"