Lines Matching +full:enforce +full:- +full:video +full:- +full:mode
1 # SPDX-License-Identifier: GPL-2.0
4 bool "64-bit kernel" if "$(ARCH)" = "x86"
7 Say yes to build a 64-bit kernel - formerly known as x86_64
8 Say no to build a 32-bit kernel - formerly known as i386
13 # Options that are inherently 32-bit kernel only:
27 # Options that are inherently 64-bit kernel only:
53 # ported to 32-bit as well. )
134 # Word-size accesses may read uninitialized data past the trailing \0
302 default "elf32-i386" if X86_32
303 default "elf64-x86-64" if X86_64
406 …default $(success,$(srctree)/scripts/gcc-x86_64-has-stack-protector.sh $(CC) $(CLANG_FLAGS)) if 64…
407 default $(success,$(srctree)/scripts/gcc-x86_32-has-stack-protector.sh $(CC) $(CLANG_FLAGS))
411 the segment on 32-bit kernels.
416 bool "Symmetric multi-processing support"
422 If you say N here, the kernel will run on uni- and multiprocessor
437 See also <file:Documentation/x86/i386/IO-APIC.rst>,
438 <file:Documentation/admin-guide/lockup-watchdogs.rst> and the SMP-HOWTO available at
444 bool "Processor feature human-readable names" if EMBEDDED
460 This allows 32-bit apic IDs (so it can support very large systems),
463 Some Intel systems circa 2022 and later are locked into x2APIC mode
511 bool "Support for extended (non-PC) x86 platforms"
519 for the following (non-PC) 32 bit x86 platforms:
522 RDC R-321x SoC
524 STA2X11-based (e.g. Northville)
528 generic distribution kernel, say Y here - otherwise say N.
533 bool "Support for extended (non-PC) x86 platforms"
541 for the following (non-PC) 64 bit x86 platforms:
547 generic distribution kernel, say Y here - otherwise say N.
560 Adds support for Numascale NumaChip large-SMP systems. Needed to
573 supposed to run on these EM64T-based machines. Only choose this option
684 - BayTrail
685 - Braswell
686 - Quark
704 bool "RDC R-321x SoC"
710 This option is needed for RDC R-321x system-on-chip, also known
711 as R-8610-(G).
715 bool "Support non-standard 32-bit SMP architectures"
730 # On 32-bit this adds too big of NODES_SHIFT and we run out of page flags:
731 # On 32-bit SPARSEMEM adds too big of SECTIONS_WIDTH:
742 This adds support for boards based on the STA2X11 IO-Hub,
763 prompt "Single-depth WCHAN output"
776 Say Y here to enable options for running Linux under various hyper-
798 bool "paravirt-ops debugging"
809 spinlock implementation with something virtualization-friendly
863 bool "Jailhouse non-root cell support"
867 This option allows to run Linux as guest in a Jailhouse non-root
877 a flexible, lightweight reference open-source hypervisor, built with
878 real-time and safety-criticality in mind. It is built for embedded
879 IOT with small footprint and real-time features. More details can be
883 bool "Intel TDX (Trust Domain Extensions) - Guest Support"
905 Use the IA-PC HPET (High Precision Event Timer) to manage
911 as it is off-chip. The interface used is documented
946 The GART supports full DMA access for devices with 32-bit access
955 32-bit limited device.
963 of VESA video modes set at an early boot stage via the vga= parameter.
980 # The ranges are different on 32-bit and 64-bit kernels, depending on
1042 by sharing mid-level caches, last-level cache tags or internal
1050 prompt "Multi-core scheduler support"
1053 Multi-core scheduler support improves the CPU scheduler's decision
1054 making when dealing with multi-core CPU chips at a cost of slightly
1088 integrated interrupt controller in the CPU. If you have a single-CPU
1092 all. The local APIC supports CPU-generated self-interrupts (timer,
1097 bool "IO-APIC support on uniprocessors"
1100 An IO-APIC (I/O Advanced Programmable Interrupt Controller) is an
1101 SMP-capable replacement for PC-style interrupt controllers. Most
1104 If you have a single-CPU system with an IO-APIC, you can say Y here
1106 an IO-APIC, then the kernel will still run with no slowdown at all.
1128 entry in the chipset's IO-APIC is masked (as, e.g. the RT
1202 mode, which is an 80286-era approximation of 16-bit real mode.
1205 for user mode setting. Similarly, DOSEMU will use it if
1206 available to accelerate real mode DOS programs. However, any
1210 a 16-bit DOS program where 16-bit performance matters, vm86
1211 mode might be faster than emulation and you might want to
1214 Note that any app that works on a 64-bit kernel is unlikely to
1215 need this option, as 64-bit kernels don't, and can't, support
1216 V8086 mode. This option is also unrelated to 16-bit protected
1217 mode and is not needed to run most 16-bit programs under Wine.
1229 bool "Enable support for 16-bit segments" if EXPERT
1233 This option is required by programs like Wine to run 16-bit
1234 protected mode legacy code on x86 processors. Disabling
1236 plus 16K runtime memory on x86-64,
1286 This adds a driver to safely access the System Management Mode of
1288 not work on models with a Phoenix BIOS. The System Management Mode
1309 CS5530A and CS5536 chipsets and the RDC R-321x SoC.
1333 need to add the vendor-supplied microcode to the CONFIG_EXTRA_FIRMWARE
1367 tristate "/dev/cpu/*/msr - Model-specific register support"
1370 Model-Specific Registers (MSRs). It is a character device with
1372 MSR accesses are directed to a specific CPU on multi-processor
1376 tristate "/dev/cpu/*/cpuid - CPU information support"
1392 However, the address space of 32-bit x86 processors is only 4
1410 selection turns Intel PAE (Physical Address Extension) mode on.
1411 PAE implements 3-level paging on IA32 processors. PAE is fully
1412 supported by Linux, PAE mode is implemented on all recent Intel
1427 Select this if you have a 32-bit processor and between 1 and 4
1435 Select this if you have a 32-bit processor and more than 4
1454 will also likely make your kernel incompatible with binary-only
1494 larger swapspace support for non-overcommit purposes. It
1499 bool "Enable 5-level page tables support"
1505 5-level paging enables access to larger address space:
1512 support 4- or 5-level paging.
1514 See Documentation/x86/x86_64/5level-paging.rst for more
1575 Enable NUMA (Non-Uniform Memory Access) support.
1581 For 64-bit this is recommended if the system is Intel Core i7
1584 For 32-bit this is only needed if you boot a 32-bit
1585 kernel on a 64-bit NUMA platform.
1649 See Documentation/admin-guide/mm/memory-hotplug.rst for more information.
1665 tristate "Support non-standard NVDIMMs and ADR protected memory"
1672 Treat memory marked using the non-standard e820 type of 12 as used
1673 by the Intel Sandy Bridge-EP reference BIOS as protected memory.
1680 bool "Allocate 3rd-level pagetables from highmem"
1685 low memory. Setting this option will put user-space page table
1698 Documentation/admin-guide/kernel-parameters.rst to adjust this.
1706 BIOS-originated corruption always affects the same memory,
1740 emulation can be found in <file:arch/x86/math-emu/README>.
1752 a video (VGA) card on a PCI or AGP bus. Enabling write-combining
1766 The AMD K6-2 (stepping 8 and above) and K6-3 processors have two
1768 write-combining. All of these processors are supported by this code
1795 int "MTRR cleanup enable value (0-1)"
1803 int "MTRR cleanup spare reg num (0-7)"
1822 spontaneous reboots) or a non-working video driver.
1832 prompt "User Mode Instruction Prevention" if EXPERT
1834 User Mode Instruction Prevention (UMIP) is a security feature in
1837 executed in user mode. These instructions unnecessarily expose
1842 specific cases in protected and virtual-8086 modes. Emulated
1849 # https://github.com/llvm/llvm-project/commit/e0b89df2e0f0130881bf6c39bf31d7f6aac00e0f
1850 # https://github.com/llvm/llvm-project/commit/dfcf69770bc522b9e411c66454934a37c1f35332
1851 def_bool ((CC_IS_GCC && $(cc-option, -fcf-protection=branch -mindirect-branch-register)) || \
1853 $(as-instr,endbr64)
1859 # https://github.com/llvm/llvm-project/commit/9d7001eba9c4cb311e03cd8cdc231f9e579f2d0f
1864 hardware support course-grain forward-edge Control Flow Integrity
1879 # Note: only available in 64-bit mode
1885 page-based protections, but without requiring modification of the
1888 For details, see Documentation/core-api/protection-keys.rst
1893 prompt "TSX enable mode"
1911 This option allows to set the default tsx mode between tsx=on, =off
1912 and =auto. See Documentation/admin-guide/kernel-parameters.txt for more
1922 TSX is disabled if possible - equals to tsx=off command line parameter.
1927 TSX is always enabled on TSX capable HW - equals the tsx=on command
1934 side channel attacks- equals the tsx=auto command line parameter.
1970 resultant kernel should continue to boot on existing non-EFI
1981 See Documentation/admin-guide/efi-stub.rst for more information.
1984 bool "EFI mixed-mode support"
1987 Enabling this feature allows a 64-bit kernel to be booted
1988 on a 32-bit firmware, provided that your CPU supports 64-bit
1989 mode.
1991 Note that it is not possible to boot a mixed-mode enabled
1992 kernel via the EFI boot stub - a bootloader that supports
2067 which are loaded in the main kernel with kexec-tools into
2073 For more details see Documentation/admin-guide/kdump/kdump.rst
2080 code in physical address mode via KEXEC
2109 command line boot parameter passed to the panic-ed
2110 kernel. Please take a look at Documentation/admin-guide/kdump/kdump.rst
2152 On 64-bit, the kernel physical and virtual addresses are
2159 On 32-bit, the kernel physical and virtual addresses are
2190 If bootloader loads the kernel at a non-aligned address and
2194 If bootloader loads the kernel at a non-aligned address and
2202 On 32-bit this value must be a multiple of 0x2000. On 64-bit
2295 prompt "Disable the 32-bit vDSO (needed for glibc 2.3.3)"
2299 presented with a 32-bit vDSO that is not mapped at the address
2309 dl_main: Assertion `(void *) ph->p_vaddr == _rtld_local._dl_sysinfo_dso' failed!
2312 option from 1 to 0, which turns off the 32-bit vDSO entirely.
2329 line parameter vsyscall=[emulate|xonly|none]. Emulate mode
2347 certain uses of the vsyscall area as an ASLR-bypassing
2362 bool "Built-in kernel command line"
2374 Systems with fully functional boot loaders (i.e. non-embedded)
2378 string "Built-in kernel command string"
2390 In most cases, the command line (whether built-in or provided
2395 bool "Built-in command line overrides boot loader arguments"
2399 command line, and use ONLY the built-in command line.
2408 Linux can allow user programs to install a per-process x86
2410 call. This is required to run 16-bit or segmented code such as
2415 context switches and increases the low-level kernel attack
2421 bool "Enforce strict size checking for sigaltstack"
2426 enforce strict checking of the sigaltstack size against the
2434 Say 'N' unless you want to really enforce this check.
2441 def_bool $(cc-option,-mharden-sls=all)
2444 def_bool $(cc-option,-mfunction-return=thunk-extern)
2459 bool "Remove the kernel mapping in user mode"
2475 kernel-to-user data leaks by avoiding speculative indirect
2476 branches. Requires a compiler with -mindirect-branch=thunk-extern
2480 bool "Enable return-thunks"
2485 Compile the kernel with the return-thunks compiler option to guard
2486 against kernel-to-user data leaks by avoiding return speculation.
2487 Requires a compiler with -mfunction-return=thunk-extern
2514 bool "Mitigate Straight-Line-Speculation"
2519 Compile the kernel with straight-line-speculation options to guard
2554 battery status information, and user-space programs will receive
2564 and more information, read <file:Documentation/power/apm-acpi.rst>
2565 and the Battery Powered Linux mini-HOWTO, available from
2570 VESA-compliant "green" monitors.
2597 9) install a fan for the video card or exchange video RAM
2622 feature is turned off -- see "Do CPU IDLE calls", below). This
2651 do with your VESA-compliant power-saving monitor. Further, this
2652 option doesn't work for all laptops -- it might not turn off your
2662 needs to. Unfortunately, some BIOSes do not -- especially those in
2679 prompt "PCI access mode"
2686 PCI-based systems don't have any BIOS at all. Linux can also try to
2707 bool "OLPC XO-1"
2719 # x86-64 doesn't support PCI BIOS access from long mode so always go direct.
2761 architectures -- if your target machine is modern, it probably does
2766 # x86_64 have no ISA slots, but can have ISA-style DMA.
2768 bool "ISA-style DMA support" if (X86_64 && EXPERT)
2771 Enables ISA-style DMA support for devices requiring such controllers.
2790 PCI-IDs of several on-chip devices, so its a good dependency
2796 tristate "NatSemi SCx200 27MHz High-Resolution Timer Support"
2800 This driver provides a clocksource built upon the on-chip
2801 27MHz high-resolution timer. Its also a workaround for
2802 NSC Geode SC-1100's buggy TSC, which loses time when the
2819 bool "OLPC XO-1 Power Management"
2822 Add support for poweroff and suspend of the OLPC XO-1 laptop.
2825 bool "OLPC XO-1 Real Time Clock"
2828 Add support for the XO-1 real time clock, which can be used as a
2832 bool "OLPC XO-1 SCI extras"
2837 Add support for SCI-based features of the OLPC XO-1 laptop:
2838 - EC-driven system wakeups
2839 - Power button
2840 - Ebook switch
2841 - Lid switch
2842 - AC adapter status updates
2843 - Battery status updates
2846 bool "OLPC XO-1.5 SCI extras"
2850 Add support for SCI-based features of the OLPC XO-1.5 laptop:
2851 - EC-driven system wakeups
2852 - AC adapter status updates
2853 - Battery status updates
2883 bool "Technologic Systems TS-5500 platform support"
2889 This option enables system support for the Technologic Systems TS-5500.
2908 Include code to run legacy 32-bit programs under a
2909 64-bit kernel. You should likely turn this on, unless you're
2910 100% sure that you don't have any 32-bit programs left.
2913 bool "x32 ABI for 64-bit mode"
2915 # llvm-objcopy does not convert x86_64 .note.gnu.property or
2919 depends on $(success,$(OBJCOPY) --version | head -n1 | grep -qv llvm)
2921 Include code to run binaries for the x32 native 32-bit ABI
2922 for 64-bit processors. An x32 process gets access to the
2923 full 64-bit register file and wide data path while leaving