1menu "printk and dmesg options" 2 3config PRINTK_TIME 4 bool "Show timing information on printks" 5 depends on PRINTK 6 help 7 Selecting this option causes time stamps of the printk() 8 messages to be added to the output of the syslog() system 9 call and at the console. 10 11 The timestamp is always recorded internally, and exported 12 to /dev/kmsg. This flag just specifies if the timestamp should 13 be included, not that the timestamp is recorded. 14 15 The behavior is also controlled by the kernel command line 16 parameter printk.time=1. See Documentation/admin-guide/kernel-parameters.rst 17 18config CONSOLE_LOGLEVEL_DEFAULT 19 int "Default console loglevel (1-15)" 20 range 1 15 21 default "7" 22 help 23 Default loglevel to determine what will be printed on the console. 24 25 Setting a default here is equivalent to passing in loglevel=<x> in 26 the kernel bootargs. loglevel=<x> continues to override whatever 27 value is specified here as well. 28 29 Note: This does not affect the log level of un-prefixed printk() 30 usage in the kernel. That is controlled by the MESSAGE_LOGLEVEL_DEFAULT 31 option. 32 33config MESSAGE_LOGLEVEL_DEFAULT 34 int "Default message log level (1-7)" 35 range 1 7 36 default "4" 37 help 38 Default log level for printk statements with no specified priority. 39 40 This was hard-coded to KERN_WARNING since at least 2.6.10 but folks 41 that are auditing their logs closely may want to set it to a lower 42 priority. 43 44 Note: This does not affect what message level gets printed on the console 45 by default. To change that, use loglevel=<x> in the kernel bootargs, 46 or pick a different CONSOLE_LOGLEVEL_DEFAULT configuration value. 47 48config BOOT_PRINTK_DELAY 49 bool "Delay each boot printk message by N milliseconds" 50 depends on DEBUG_KERNEL && PRINTK && GENERIC_CALIBRATE_DELAY 51 help 52 This build option allows you to read kernel boot messages 53 by inserting a short delay after each one. The delay is 54 specified in milliseconds on the kernel command line, 55 using "boot_delay=N". 56 57 It is likely that you would also need to use "lpj=M" to preset 58 the "loops per jiffie" value. 59 See a previous boot log for the "lpj" value to use for your 60 system, and then set "lpj=M" before setting "boot_delay=N". 61 NOTE: Using this option may adversely affect SMP systems. 62 I.e., processors other than the first one may not boot up. 63 BOOT_PRINTK_DELAY also may cause LOCKUP_DETECTOR to detect 64 what it believes to be lockup conditions. 65 66config DYNAMIC_DEBUG 67 bool "Enable dynamic printk() support" 68 default n 69 depends on PRINTK 70 depends on DEBUG_FS 71 help 72 73 Compiles debug level messages into the kernel, which would not 74 otherwise be available at runtime. These messages can then be 75 enabled/disabled based on various levels of scope - per source file, 76 function, module, format string, and line number. This mechanism 77 implicitly compiles in all pr_debug() and dev_dbg() calls, which 78 enlarges the kernel text size by about 2%. 79 80 If a source file is compiled with DEBUG flag set, any 81 pr_debug() calls in it are enabled by default, but can be 82 disabled at runtime as below. Note that DEBUG flag is 83 turned on by many CONFIG_*DEBUG* options. 84 85 Usage: 86 87 Dynamic debugging is controlled via the 'dynamic_debug/control' file, 88 which is contained in the 'debugfs' filesystem. Thus, the debugfs 89 filesystem must first be mounted before making use of this feature. 90 We refer the control file as: <debugfs>/dynamic_debug/control. This 91 file contains a list of the debug statements that can be enabled. The 92 format for each line of the file is: 93 94 filename:lineno [module]function flags format 95 96 filename : source file of the debug statement 97 lineno : line number of the debug statement 98 module : module that contains the debug statement 99 function : function that contains the debug statement 100 flags : '=p' means the line is turned 'on' for printing 101 format : the format used for the debug statement 102 103 From a live system: 104 105 nullarbor:~ # cat <debugfs>/dynamic_debug/control 106 # filename:lineno [module]function flags format 107 fs/aio.c:222 [aio]__put_ioctx =_ "__put_ioctx:\040freeing\040%p\012" 108 fs/aio.c:248 [aio]ioctx_alloc =_ "ENOMEM:\040nr_events\040too\040high\012" 109 fs/aio.c:1770 [aio]sys_io_cancel =_ "calling\040cancel\012" 110 111 Example usage: 112 113 // enable the message at line 1603 of file svcsock.c 114 nullarbor:~ # echo -n 'file svcsock.c line 1603 +p' > 115 <debugfs>/dynamic_debug/control 116 117 // enable all the messages in file svcsock.c 118 nullarbor:~ # echo -n 'file svcsock.c +p' > 119 <debugfs>/dynamic_debug/control 120 121 // enable all the messages in the NFS server module 122 nullarbor:~ # echo -n 'module nfsd +p' > 123 <debugfs>/dynamic_debug/control 124 125 // enable all 12 messages in the function svc_process() 126 nullarbor:~ # echo -n 'func svc_process +p' > 127 <debugfs>/dynamic_debug/control 128 129 // disable all 12 messages in the function svc_process() 130 nullarbor:~ # echo -n 'func svc_process -p' > 131 <debugfs>/dynamic_debug/control 132 133 See Documentation/admin-guide/dynamic-debug-howto.rst for additional 134 information. 135 136endmenu # "printk and dmesg options" 137 138menu "Compile-time checks and compiler options" 139 140config DEBUG_INFO 141 bool "Compile the kernel with debug info" 142 depends on DEBUG_KERNEL && !COMPILE_TEST 143 help 144 If you say Y here the resulting kernel image will include 145 debugging info resulting in a larger kernel image. 146 This adds debug symbols to the kernel and modules (gcc -g), and 147 is needed if you intend to use kernel crashdump or binary object 148 tools like crash, kgdb, LKCD, gdb, etc on the kernel. 149 Say Y here only if you plan to debug the kernel. 150 151 If unsure, say N. 152 153config DEBUG_INFO_REDUCED 154 bool "Reduce debugging information" 155 depends on DEBUG_INFO 156 help 157 If you say Y here gcc is instructed to generate less debugging 158 information for structure types. This means that tools that 159 need full debugging information (like kgdb or systemtap) won't 160 be happy. But if you merely need debugging information to 161 resolve line numbers there is no loss. Advantage is that 162 build directory object sizes shrink dramatically over a full 163 DEBUG_INFO build and compile times are reduced too. 164 Only works with newer gcc versions. 165 166config DEBUG_INFO_SPLIT 167 bool "Produce split debuginfo in .dwo files" 168 depends on DEBUG_INFO && !FRV 169 help 170 Generate debug info into separate .dwo files. This significantly 171 reduces the build directory size for builds with DEBUG_INFO, 172 because it stores the information only once on disk in .dwo 173 files instead of multiple times in object files and executables. 174 In addition the debug information is also compressed. 175 176 Requires recent gcc (4.7+) and recent gdb/binutils. 177 Any tool that packages or reads debug information would need 178 to know about the .dwo files and include them. 179 Incompatible with older versions of ccache. 180 181config DEBUG_INFO_DWARF4 182 bool "Generate dwarf4 debuginfo" 183 depends on DEBUG_INFO 184 help 185 Generate dwarf4 debug info. This requires recent versions 186 of gcc and gdb. It makes the debug information larger. 187 But it significantly improves the success of resolving 188 variables in gdb on optimized code. 189 190config GDB_SCRIPTS 191 bool "Provide GDB scripts for kernel debugging" 192 depends on DEBUG_INFO 193 help 194 This creates the required links to GDB helper scripts in the 195 build directory. If you load vmlinux into gdb, the helper 196 scripts will be automatically imported by gdb as well, and 197 additional functions are available to analyze a Linux kernel 198 instance. See Documentation/dev-tools/gdb-kernel-debugging.rst 199 for further details. 200 201config ENABLE_WARN_DEPRECATED 202 bool "Enable __deprecated logic" 203 default y 204 help 205 Enable the __deprecated logic in the kernel build. 206 Disable this to suppress the "warning: 'foo' is deprecated 207 (declared at kernel/power/somefile.c:1234)" messages. 208 209config ENABLE_MUST_CHECK 210 bool "Enable __must_check logic" 211 default y 212 help 213 Enable the __must_check logic in the kernel build. Disable this to 214 suppress the "warning: ignoring return value of 'foo', declared with 215 attribute warn_unused_result" messages. 216 217config FRAME_WARN 218 int "Warn for stack frames larger than (needs gcc 4.4)" 219 range 0 8192 220 default 0 if KASAN 221 default 2048 if GCC_PLUGIN_LATENT_ENTROPY 222 default 1280 if (!64BIT && PARISC) 223 default 1024 if (!64BIT && !PARISC) 224 default 2048 if 64BIT 225 help 226 Tell gcc to warn at build time for stack frames larger than this. 227 Setting this too low will cause a lot of warnings. 228 Setting it to 0 disables the warning. 229 Requires gcc 4.4 230 231config STRIP_ASM_SYMS 232 bool "Strip assembler-generated symbols during link" 233 default n 234 help 235 Strip internal assembler-generated symbols during a link (symbols 236 that look like '.Lxxx') so they don't pollute the output of 237 get_wchan() and suchlike. 238 239config READABLE_ASM 240 bool "Generate readable assembler code" 241 depends on DEBUG_KERNEL 242 help 243 Disable some compiler optimizations that tend to generate human unreadable 244 assembler output. This may make the kernel slightly slower, but it helps 245 to keep kernel developers who have to stare a lot at assembler listings 246 sane. 247 248config UNUSED_SYMBOLS 249 bool "Enable unused/obsolete exported symbols" 250 default y if X86 251 help 252 Unused but exported symbols make the kernel needlessly bigger. For 253 that reason most of these unused exports will soon be removed. This 254 option is provided temporarily to provide a transition period in case 255 some external kernel module needs one of these symbols anyway. If you 256 encounter such a case in your module, consider if you are actually 257 using the right API. (rationale: since nobody in the kernel is using 258 this in a module, there is a pretty good chance it's actually the 259 wrong interface to use). If you really need the symbol, please send a 260 mail to the linux kernel mailing list mentioning the symbol and why 261 you really need it, and what the merge plan to the mainline kernel for 262 your module is. 263 264config PAGE_OWNER 265 bool "Track page owner" 266 depends on DEBUG_KERNEL && STACKTRACE_SUPPORT 267 select DEBUG_FS 268 select STACKTRACE 269 select STACKDEPOT 270 select PAGE_EXTENSION 271 help 272 This keeps track of what call chain is the owner of a page, may 273 help to find bare alloc_page(s) leaks. Even if you include this 274 feature on your build, it is disabled in default. You should pass 275 "page_owner=on" to boot parameter in order to enable it. Eats 276 a fair amount of memory if enabled. See tools/vm/page_owner_sort.c 277 for user-space helper. 278 279 If unsure, say N. 280 281config DEBUG_FS 282 bool "Debug Filesystem" 283 help 284 debugfs is a virtual file system that kernel developers use to put 285 debugging files into. Enable this option to be able to read and 286 write to these files. 287 288 For detailed documentation on the debugfs API, see 289 Documentation/filesystems/. 290 291 If unsure, say N. 292 293config HEADERS_CHECK 294 bool "Run 'make headers_check' when building vmlinux" 295 depends on !UML 296 help 297 This option will extract the user-visible kernel headers whenever 298 building the kernel, and will run basic sanity checks on them to 299 ensure that exported files do not attempt to include files which 300 were not exported, etc. 301 302 If you're making modifications to header files which are 303 relevant for userspace, say 'Y', and check the headers 304 exported to $(INSTALL_HDR_PATH) (usually 'usr/include' in 305 your build tree), to make sure they're suitable. 306 307config DEBUG_SECTION_MISMATCH 308 bool "Enable full Section mismatch analysis" 309 help 310 The section mismatch analysis checks if there are illegal 311 references from one section to another section. 312 During linktime or runtime, some sections are dropped; 313 any use of code/data previously in these sections would 314 most likely result in an oops. 315 In the code, functions and variables are annotated with 316 __init,, etc. (see the full list in include/linux/init.h), 317 which results in the code/data being placed in specific sections. 318 The section mismatch analysis is always performed after a full 319 kernel build, and enabling this option causes the following 320 additional steps to occur: 321 - Add the option -fno-inline-functions-called-once to gcc commands. 322 When inlining a function annotated with __init in a non-init 323 function, we would lose the section information and thus 324 the analysis would not catch the illegal reference. 325 This option tells gcc to inline less (but it does result in 326 a larger kernel). 327 - Run the section mismatch analysis for each module/built-in.o file. 328 When we run the section mismatch analysis on vmlinux.o, we 329 lose valuable information about where the mismatch was 330 introduced. 331 Running the analysis for each module/built-in.o file 332 tells where the mismatch happens much closer to the 333 source. The drawback is that the same mismatch is 334 reported at least twice. 335 - Enable verbose reporting from modpost in order to help resolve 336 the section mismatches that are reported. 337 338config SECTION_MISMATCH_WARN_ONLY 339 bool "Make section mismatch errors non-fatal" 340 default y 341 help 342 If you say N here, the build process will fail if there are any 343 section mismatch, instead of just throwing warnings. 344 345 If unsure, say Y. 346 347# 348# Select this config option from the architecture Kconfig, if it 349# is preferred to always offer frame pointers as a config 350# option on the architecture (regardless of KERNEL_DEBUG): 351# 352config ARCH_WANT_FRAME_POINTERS 353 bool 354 help 355 356config FRAME_POINTER 357 bool "Compile the kernel with frame pointers" 358 depends on DEBUG_KERNEL && \ 359 (CRIS || M68K || FRV || UML || \ 360 SUPERH || BLACKFIN || MN10300 || METAG) || \ 361 ARCH_WANT_FRAME_POINTERS 362 default y if (DEBUG_INFO && UML) || ARCH_WANT_FRAME_POINTERS 363 help 364 If you say Y here the resulting kernel image will be slightly 365 larger and slower, but it gives very useful debugging information 366 in case of kernel bugs. (precise oopses/stacktraces/warnings) 367 368config STACK_VALIDATION 369 bool "Compile-time stack metadata validation" 370 depends on HAVE_STACK_VALIDATION 371 default n 372 help 373 Add compile-time checks to validate stack metadata, including frame 374 pointers (if CONFIG_FRAME_POINTER is enabled). This helps ensure 375 that runtime stack traces are more reliable. 376 377 This is also a prerequisite for generation of ORC unwind data, which 378 is needed for CONFIG_UNWINDER_ORC. 379 380 For more information, see 381 tools/objtool/Documentation/stack-validation.txt. 382 383config DEBUG_FORCE_WEAK_PER_CPU 384 bool "Force weak per-cpu definitions" 385 depends on DEBUG_KERNEL 386 help 387 s390 and alpha require percpu variables in modules to be 388 defined weak to work around addressing range issue which 389 puts the following two restrictions on percpu variable 390 definitions. 391 392 1. percpu symbols must be unique whether static or not 393 2. percpu variables can't be defined inside a function 394 395 To ensure that generic code follows the above rules, this 396 option forces all percpu variables to be defined as weak. 397 398endmenu # "Compiler options" 399 400config MAGIC_SYSRQ 401 bool "Magic SysRq key" 402 depends on !UML 403 help 404 If you say Y here, you will have some control over the system even 405 if the system crashes for example during kernel debugging (e.g., you 406 will be able to flush the buffer cache to disk, reboot the system 407 immediately or dump some status information). This is accomplished 408 by pressing various keys while holding SysRq (Alt+PrintScreen). It 409 also works on a serial console (on PC hardware at least), if you 410 send a BREAK and then within 5 seconds a command keypress. The 411 keys are documented in <file:Documentation/admin-guide/sysrq.rst>. 412 Don't say Y unless you really know what this hack does. 413 414config MAGIC_SYSRQ_DEFAULT_ENABLE 415 hex "Enable magic SysRq key functions by default" 416 depends on MAGIC_SYSRQ 417 default 0x1 418 help 419 Specifies which SysRq key functions are enabled by default. 420 This may be set to 1 or 0 to enable or disable them all, or 421 to a bitmask as described in Documentation/admin-guide/sysrq.rst. 422 423config MAGIC_SYSRQ_SERIAL 424 bool "Enable magic SysRq key over serial" 425 depends on MAGIC_SYSRQ 426 default y 427 help 428 Many embedded boards have a disconnected TTL level serial which can 429 generate some garbage that can lead to spurious false sysrq detects. 430 This option allows you to decide whether you want to enable the 431 magic SysRq key. 432 433config DEBUG_KERNEL 434 bool "Kernel debugging" 435 help 436 Say Y here if you are developing drivers or trying to debug and 437 identify kernel problems. 438 439menu "Memory Debugging" 440 441source mm/Kconfig.debug 442 443config DEBUG_OBJECTS 444 bool "Debug object operations" 445 depends on DEBUG_KERNEL 446 help 447 If you say Y here, additional code will be inserted into the 448 kernel to track the life time of various objects and validate 449 the operations on those objects. 450 451config DEBUG_OBJECTS_SELFTEST 452 bool "Debug objects selftest" 453 depends on DEBUG_OBJECTS 454 help 455 This enables the selftest of the object debug code. 456 457config DEBUG_OBJECTS_FREE 458 bool "Debug objects in freed memory" 459 depends on DEBUG_OBJECTS 460 help 461 This enables checks whether a k/v free operation frees an area 462 which contains an object which has not been deactivated 463 properly. This can make kmalloc/kfree-intensive workloads 464 much slower. 465 466config DEBUG_OBJECTS_TIMERS 467 bool "Debug timer objects" 468 depends on DEBUG_OBJECTS 469 help 470 If you say Y here, additional code will be inserted into the 471 timer routines to track the life time of timer objects and 472 validate the timer operations. 473 474config DEBUG_OBJECTS_WORK 475 bool "Debug work objects" 476 depends on DEBUG_OBJECTS 477 help 478 If you say Y here, additional code will be inserted into the 479 work queue routines to track the life time of work objects and 480 validate the work operations. 481 482config DEBUG_OBJECTS_RCU_HEAD 483 bool "Debug RCU callbacks objects" 484 depends on DEBUG_OBJECTS 485 help 486 Enable this to turn on debugging of RCU list heads (call_rcu() usage). 487 488config DEBUG_OBJECTS_PERCPU_COUNTER 489 bool "Debug percpu counter objects" 490 depends on DEBUG_OBJECTS 491 help 492 If you say Y here, additional code will be inserted into the 493 percpu counter routines to track the life time of percpu counter 494 objects and validate the percpu counter operations. 495 496config DEBUG_OBJECTS_ENABLE_DEFAULT 497 int "debug_objects bootup default value (0-1)" 498 range 0 1 499 default "1" 500 depends on DEBUG_OBJECTS 501 help 502 Debug objects boot parameter default value 503 504config DEBUG_SLAB 505 bool "Debug slab memory allocations" 506 depends on DEBUG_KERNEL && SLAB 507 help 508 Say Y here to have the kernel do limited verification on memory 509 allocation as well as poisoning memory on free to catch use of freed 510 memory. This can make kmalloc/kfree-intensive workloads much slower. 511 512config DEBUG_SLAB_LEAK 513 bool "Memory leak debugging" 514 depends on DEBUG_SLAB 515 516config SLUB_DEBUG_ON 517 bool "SLUB debugging on by default" 518 depends on SLUB && SLUB_DEBUG 519 default n 520 help 521 Boot with debugging on by default. SLUB boots by default with 522 the runtime debug capabilities switched off. Enabling this is 523 equivalent to specifying the "slub_debug" parameter on boot. 524 There is no support for more fine grained debug control like 525 possible with slub_debug=xxx. SLUB debugging may be switched 526 off in a kernel built with CONFIG_SLUB_DEBUG_ON by specifying 527 "slub_debug=-". 528 529config SLUB_STATS 530 default n 531 bool "Enable SLUB performance statistics" 532 depends on SLUB && SYSFS 533 help 534 SLUB statistics are useful to debug SLUBs allocation behavior in 535 order find ways to optimize the allocator. This should never be 536 enabled for production use since keeping statistics slows down 537 the allocator by a few percentage points. The slabinfo command 538 supports the determination of the most active slabs to figure 539 out which slabs are relevant to a particular load. 540 Try running: slabinfo -DA 541 542config HAVE_DEBUG_KMEMLEAK 543 bool 544 545config DEBUG_KMEMLEAK 546 bool "Kernel memory leak detector" 547 depends on DEBUG_KERNEL && HAVE_DEBUG_KMEMLEAK 548 select DEBUG_FS 549 select STACKTRACE if STACKTRACE_SUPPORT 550 select KALLSYMS 551 select CRC32 552 help 553 Say Y here if you want to enable the memory leak 554 detector. The memory allocation/freeing is traced in a way 555 similar to the Boehm's conservative garbage collector, the 556 difference being that the orphan objects are not freed but 557 only shown in /sys/kernel/debug/kmemleak. Enabling this 558 feature will introduce an overhead to memory 559 allocations. See Documentation/dev-tools/kmemleak.rst for more 560 details. 561 562 Enabling DEBUG_SLAB or SLUB_DEBUG may increase the chances 563 of finding leaks due to the slab objects poisoning. 564 565 In order to access the kmemleak file, debugfs needs to be 566 mounted (usually at /sys/kernel/debug). 567 568config DEBUG_KMEMLEAK_EARLY_LOG_SIZE 569 int "Maximum kmemleak early log entries" 570 depends on DEBUG_KMEMLEAK 571 range 200 40000 572 default 400 573 help 574 Kmemleak must track all the memory allocations to avoid 575 reporting false positives. Since memory may be allocated or 576 freed before kmemleak is initialised, an early log buffer is 577 used to store these actions. If kmemleak reports "early log 578 buffer exceeded", please increase this value. 579 580config DEBUG_KMEMLEAK_TEST 581 tristate "Simple test for the kernel memory leak detector" 582 depends on DEBUG_KMEMLEAK && m 583 help 584 This option enables a module that explicitly leaks memory. 585 586 If unsure, say N. 587 588config DEBUG_KMEMLEAK_DEFAULT_OFF 589 bool "Default kmemleak to off" 590 depends on DEBUG_KMEMLEAK 591 help 592 Say Y here to disable kmemleak by default. It can then be enabled 593 on the command line via kmemleak=on. 594 595config DEBUG_STACK_USAGE 596 bool "Stack utilization instrumentation" 597 depends on DEBUG_KERNEL && !IA64 598 help 599 Enables the display of the minimum amount of free stack which each 600 task has ever had available in the sysrq-T and sysrq-P debug output. 601 602 This option will slow down process creation somewhat. 603 604config DEBUG_VM 605 bool "Debug VM" 606 depends on DEBUG_KERNEL 607 help 608 Enable this to turn on extended checks in the virtual-memory system 609 that may impact performance. 610 611 If unsure, say N. 612 613config DEBUG_VM_VMACACHE 614 bool "Debug VMA caching" 615 depends on DEBUG_VM 616 help 617 Enable this to turn on VMA caching debug information. Doing so 618 can cause significant overhead, so only enable it in non-production 619 environments. 620 621 If unsure, say N. 622 623config DEBUG_VM_RB 624 bool "Debug VM red-black trees" 625 depends on DEBUG_VM 626 help 627 Enable VM red-black tree debugging information and extra validations. 628 629 If unsure, say N. 630 631config DEBUG_VM_PGFLAGS 632 bool "Debug page-flags operations" 633 depends on DEBUG_VM 634 help 635 Enables extra validation on page flags operations. 636 637 If unsure, say N. 638 639config ARCH_HAS_DEBUG_VIRTUAL 640 bool 641 642config DEBUG_VIRTUAL 643 bool "Debug VM translations" 644 depends on DEBUG_KERNEL && ARCH_HAS_DEBUG_VIRTUAL 645 help 646 Enable some costly sanity checks in virtual to page code. This can 647 catch mistakes with virt_to_page() and friends. 648 649 If unsure, say N. 650 651config DEBUG_NOMMU_REGIONS 652 bool "Debug the global anon/private NOMMU mapping region tree" 653 depends on DEBUG_KERNEL && !MMU 654 help 655 This option causes the global tree of anonymous and private mapping 656 regions to be regularly checked for invalid topology. 657 658config DEBUG_MEMORY_INIT 659 bool "Debug memory initialisation" if EXPERT 660 default !EXPERT 661 help 662 Enable this for additional checks during memory initialisation. 663 The sanity checks verify aspects of the VM such as the memory model 664 and other information provided by the architecture. Verbose 665 information will be printed at KERN_DEBUG loglevel depending 666 on the mminit_loglevel= command-line option. 667 668 If unsure, say Y 669 670config MEMORY_NOTIFIER_ERROR_INJECT 671 tristate "Memory hotplug notifier error injection module" 672 depends on MEMORY_HOTPLUG_SPARSE && NOTIFIER_ERROR_INJECTION 673 help 674 This option provides the ability to inject artificial errors to 675 memory hotplug notifier chain callbacks. It is controlled through 676 debugfs interface under /sys/kernel/debug/notifier-error-inject/memory 677 678 If the notifier call chain should be failed with some events 679 notified, write the error code to "actions/<notifier event>/error". 680 681 Example: Inject memory hotplug offline error (-12 == -ENOMEM) 682 683 # cd /sys/kernel/debug/notifier-error-inject/memory 684 # echo -12 > actions/MEM_GOING_OFFLINE/error 685 # echo offline > /sys/devices/system/memory/memoryXXX/state 686 bash: echo: write error: Cannot allocate memory 687 688 To compile this code as a module, choose M here: the module will 689 be called memory-notifier-error-inject. 690 691 If unsure, say N. 692 693config DEBUG_PER_CPU_MAPS 694 bool "Debug access to per_cpu maps" 695 depends on DEBUG_KERNEL 696 depends on SMP 697 help 698 Say Y to verify that the per_cpu map being accessed has 699 been set up. This adds a fair amount of code to kernel memory 700 and decreases performance. 701 702 Say N if unsure. 703 704config DEBUG_HIGHMEM 705 bool "Highmem debugging" 706 depends on DEBUG_KERNEL && HIGHMEM 707 help 708 This option enables additional error checking for high memory 709 systems. Disable for production systems. 710 711config HAVE_DEBUG_STACKOVERFLOW 712 bool 713 714config DEBUG_STACKOVERFLOW 715 bool "Check for stack overflows" 716 depends on DEBUG_KERNEL && HAVE_DEBUG_STACKOVERFLOW 717 ---help--- 718 Say Y here if you want to check for overflows of kernel, IRQ 719 and exception stacks (if your architecture uses them). This 720 option will show detailed messages if free stack space drops 721 below a certain limit. 722 723 These kinds of bugs usually occur when call-chains in the 724 kernel get too deep, especially when interrupts are 725 involved. 726 727 Use this in cases where you see apparently random memory 728 corruption, especially if it appears in 'struct thread_info' 729 730 If in doubt, say "N". 731 732source "lib/Kconfig.kasan" 733 734endmenu # "Memory Debugging" 735 736config ARCH_HAS_KCOV 737 bool 738 help 739 KCOV does not have any arch-specific code, but currently it is enabled 740 only for x86_64. KCOV requires testing on other archs, and most likely 741 disabling of instrumentation for some early boot code. 742 743config KCOV 744 bool "Code coverage for fuzzing" 745 depends on ARCH_HAS_KCOV 746 select DEBUG_FS 747 select GCC_PLUGINS if !COMPILE_TEST 748 select GCC_PLUGIN_SANCOV if !COMPILE_TEST 749 help 750 KCOV exposes kernel code coverage information in a form suitable 751 for coverage-guided fuzzing (randomized testing). 752 753 If RANDOMIZE_BASE is enabled, PC values will not be stable across 754 different machines and across reboots. If you need stable PC values, 755 disable RANDOMIZE_BASE. 756 757 For more details, see Documentation/dev-tools/kcov.rst. 758 759config KCOV_ENABLE_COMPARISONS 760 bool "Enable comparison operands collection by KCOV" 761 depends on KCOV 762 default n 763 help 764 KCOV also exposes operands of every comparison in the instrumented 765 code along with operand sizes and PCs of the comparison instructions. 766 These operands can be used by fuzzing engines to improve the quality 767 of fuzzing coverage. 768 769config KCOV_INSTRUMENT_ALL 770 bool "Instrument all code by default" 771 depends on KCOV 772 default y if KCOV 773 help 774 If you are doing generic system call fuzzing (like e.g. syzkaller), 775 then you will want to instrument the whole kernel and you should 776 say y here. If you are doing more targeted fuzzing (like e.g. 777 filesystem fuzzing with AFL) then you will want to enable coverage 778 for more specific subsets of files, and should say n here. 779 780config DEBUG_SHIRQ 781 bool "Debug shared IRQ handlers" 782 depends on DEBUG_KERNEL 783 help 784 Enable this to generate a spurious interrupt as soon as a shared 785 interrupt handler is registered, and just before one is deregistered. 786 Drivers ought to be able to handle interrupts coming in at those 787 points; some don't and need to be caught. 788 789menu "Debug Lockups and Hangs" 790 791config LOCKUP_DETECTOR 792 bool 793 794config SOFTLOCKUP_DETECTOR 795 bool "Detect Soft Lockups" 796 depends on DEBUG_KERNEL && !S390 797 select LOCKUP_DETECTOR 798 help 799 Say Y here to enable the kernel to act as a watchdog to detect 800 soft lockups. 801 802 Softlockups are bugs that cause the kernel to loop in kernel 803 mode for more than 20 seconds, without giving other tasks a 804 chance to run. The current stack trace is displayed upon 805 detection and the system will stay locked up. 806 807config HARDLOCKUP_DETECTOR_PERF 808 bool 809 select SOFTLOCKUP_DETECTOR 810 811# 812# Enables a timestamp based low pass filter to compensate for perf based 813# hard lockup detection which runs too fast due to turbo modes. 814# 815config HARDLOCKUP_CHECK_TIMESTAMP 816 bool 817 818# 819# arch/ can define HAVE_HARDLOCKUP_DETECTOR_ARCH to provide their own hard 820# lockup detector rather than the perf based detector. 821# 822config HARDLOCKUP_DETECTOR 823 bool "Detect Hard Lockups" 824 depends on DEBUG_KERNEL && !S390 825 depends on HAVE_HARDLOCKUP_DETECTOR_PERF || HAVE_HARDLOCKUP_DETECTOR_ARCH 826 select LOCKUP_DETECTOR 827 select HARDLOCKUP_DETECTOR_PERF if HAVE_HARDLOCKUP_DETECTOR_PERF 828 select HARDLOCKUP_DETECTOR_ARCH if HAVE_HARDLOCKUP_DETECTOR_ARCH 829 help 830 Say Y here to enable the kernel to act as a watchdog to detect 831 hard lockups. 832 833 Hardlockups are bugs that cause the CPU to loop in kernel mode 834 for more than 10 seconds, without letting other interrupts have a 835 chance to run. The current stack trace is displayed upon detection 836 and the system will stay locked up. 837 838config BOOTPARAM_HARDLOCKUP_PANIC 839 bool "Panic (Reboot) On Hard Lockups" 840 depends on HARDLOCKUP_DETECTOR 841 help 842 Say Y here to enable the kernel to panic on "hard lockups", 843 which are bugs that cause the kernel to loop in kernel 844 mode with interrupts disabled for more than 10 seconds (configurable 845 using the watchdog_thresh sysctl). 846 847 Say N if unsure. 848 849config BOOTPARAM_HARDLOCKUP_PANIC_VALUE 850 int 851 depends on HARDLOCKUP_DETECTOR 852 range 0 1 853 default 0 if !BOOTPARAM_HARDLOCKUP_PANIC 854 default 1 if BOOTPARAM_HARDLOCKUP_PANIC 855 856config BOOTPARAM_SOFTLOCKUP_PANIC 857 bool "Panic (Reboot) On Soft Lockups" 858 depends on SOFTLOCKUP_DETECTOR 859 help 860 Say Y here to enable the kernel to panic on "soft lockups", 861 which are bugs that cause the kernel to loop in kernel 862 mode for more than 20 seconds (configurable using the watchdog_thresh 863 sysctl), without giving other tasks a chance to run. 864 865 The panic can be used in combination with panic_timeout, 866 to cause the system to reboot automatically after a 867 lockup has been detected. This feature is useful for 868 high-availability systems that have uptime guarantees and 869 where a lockup must be resolved ASAP. 870 871 Say N if unsure. 872 873config BOOTPARAM_SOFTLOCKUP_PANIC_VALUE 874 int 875 depends on SOFTLOCKUP_DETECTOR 876 range 0 1 877 default 0 if !BOOTPARAM_SOFTLOCKUP_PANIC 878 default 1 if BOOTPARAM_SOFTLOCKUP_PANIC 879 880config DETECT_HUNG_TASK 881 bool "Detect Hung Tasks" 882 depends on DEBUG_KERNEL 883 default SOFTLOCKUP_DETECTOR 884 help 885 Say Y here to enable the kernel to detect "hung tasks", 886 which are bugs that cause the task to be stuck in 887 uninterruptible "D" state indefinitely. 888 889 When a hung task is detected, the kernel will print the 890 current stack trace (which you should report), but the 891 task will stay in uninterruptible state. If lockdep is 892 enabled then all held locks will also be reported. This 893 feature has negligible overhead. 894 895config DEFAULT_HUNG_TASK_TIMEOUT 896 int "Default timeout for hung task detection (in seconds)" 897 depends on DETECT_HUNG_TASK 898 default 120 899 help 900 This option controls the default timeout (in seconds) used 901 to determine when a task has become non-responsive and should 902 be considered hung. 903 904 It can be adjusted at runtime via the kernel.hung_task_timeout_secs 905 sysctl or by writing a value to 906 /proc/sys/kernel/hung_task_timeout_secs. 907 908 A timeout of 0 disables the check. The default is two minutes. 909 Keeping the default should be fine in most cases. 910 911config BOOTPARAM_HUNG_TASK_PANIC 912 bool "Panic (Reboot) On Hung Tasks" 913 depends on DETECT_HUNG_TASK 914 help 915 Say Y here to enable the kernel to panic on "hung tasks", 916 which are bugs that cause the kernel to leave a task stuck 917 in uninterruptible "D" state. 918 919 The panic can be used in combination with panic_timeout, 920 to cause the system to reboot automatically after a 921 hung task has been detected. This feature is useful for 922 high-availability systems that have uptime guarantees and 923 where a hung tasks must be resolved ASAP. 924 925 Say N if unsure. 926 927config BOOTPARAM_HUNG_TASK_PANIC_VALUE 928 int 929 depends on DETECT_HUNG_TASK 930 range 0 1 931 default 0 if !BOOTPARAM_HUNG_TASK_PANIC 932 default 1 if BOOTPARAM_HUNG_TASK_PANIC 933 934config WQ_WATCHDOG 935 bool "Detect Workqueue Stalls" 936 depends on DEBUG_KERNEL 937 help 938 Say Y here to enable stall detection on workqueues. If a 939 worker pool doesn't make forward progress on a pending work 940 item for over a given amount of time, 30s by default, a 941 warning message is printed along with dump of workqueue 942 state. This can be configured through kernel parameter 943 "workqueue.watchdog_thresh" and its sysfs counterpart. 944 945endmenu # "Debug lockups and hangs" 946 947config PANIC_ON_OOPS 948 bool "Panic on Oops" 949 help 950 Say Y here to enable the kernel to panic when it oopses. This 951 has the same effect as setting oops=panic on the kernel command 952 line. 953 954 This feature is useful to ensure that the kernel does not do 955 anything erroneous after an oops which could result in data 956 corruption or other issues. 957 958 Say N if unsure. 959 960config PANIC_ON_OOPS_VALUE 961 int 962 range 0 1 963 default 0 if !PANIC_ON_OOPS 964 default 1 if PANIC_ON_OOPS 965 966config PANIC_TIMEOUT 967 int "panic timeout" 968 default 0 969 help 970 Set the timeout value (in seconds) until a reboot occurs when the 971 the kernel panics. If n = 0, then we wait forever. A timeout 972 value n > 0 will wait n seconds before rebooting, while a timeout 973 value n < 0 will reboot immediately. 974 975config SCHED_DEBUG 976 bool "Collect scheduler debugging info" 977 depends on DEBUG_KERNEL && PROC_FS 978 default y 979 help 980 If you say Y here, the /proc/sched_debug file will be provided 981 that can help debug the scheduler. The runtime overhead of this 982 option is minimal. 983 984config SCHED_INFO 985 bool 986 default n 987 988config SCHEDSTATS 989 bool "Collect scheduler statistics" 990 depends on DEBUG_KERNEL && PROC_FS 991 select SCHED_INFO 992 help 993 If you say Y here, additional code will be inserted into the 994 scheduler and related routines to collect statistics about 995 scheduler behavior and provide them in /proc/schedstat. These 996 stats may be useful for both tuning and debugging the scheduler 997 If you aren't debugging the scheduler or trying to tune a specific 998 application, you can say N to avoid the very slight overhead 999 this adds. 1000 1001config SCHED_STACK_END_CHECK 1002 bool "Detect stack corruption on calls to schedule()" 1003 depends on DEBUG_KERNEL 1004 default n 1005 help 1006 This option checks for a stack overrun on calls to schedule(). 1007 If the stack end location is found to be over written always panic as 1008 the content of the corrupted region can no longer be trusted. 1009 This is to ensure no erroneous behaviour occurs which could result in 1010 data corruption or a sporadic crash at a later stage once the region 1011 is examined. The runtime overhead introduced is minimal. 1012 1013config DEBUG_TIMEKEEPING 1014 bool "Enable extra timekeeping sanity checking" 1015 help 1016 This option will enable additional timekeeping sanity checks 1017 which may be helpful when diagnosing issues where timekeeping 1018 problems are suspected. 1019 1020 This may include checks in the timekeeping hotpaths, so this 1021 option may have a (very small) performance impact to some 1022 workloads. 1023 1024 If unsure, say N. 1025 1026config DEBUG_PREEMPT 1027 bool "Debug preemptible kernel" 1028 depends on DEBUG_KERNEL && PREEMPT && TRACE_IRQFLAGS_SUPPORT 1029 default y 1030 help 1031 If you say Y here then the kernel will use a debug variant of the 1032 commonly used smp_processor_id() function and will print warnings 1033 if kernel code uses it in a preemption-unsafe way. Also, the kernel 1034 will detect preemption count underflows. 1035 1036menu "Lock Debugging (spinlocks, mutexes, etc...)" 1037 1038config DEBUG_RT_MUTEXES 1039 bool "RT Mutex debugging, deadlock detection" 1040 depends on DEBUG_KERNEL && RT_MUTEXES 1041 help 1042 This allows rt mutex semantics violations and rt mutex related 1043 deadlocks (lockups) to be detected and reported automatically. 1044 1045config DEBUG_SPINLOCK 1046 bool "Spinlock and rw-lock debugging: basic checks" 1047 depends on DEBUG_KERNEL 1048 select UNINLINE_SPIN_UNLOCK 1049 help 1050 Say Y here and build SMP to catch missing spinlock initialization 1051 and certain other kinds of spinlock errors commonly made. This is 1052 best used in conjunction with the NMI watchdog so that spinlock 1053 deadlocks are also debuggable. 1054 1055config DEBUG_MUTEXES 1056 bool "Mutex debugging: basic checks" 1057 depends on DEBUG_KERNEL 1058 help 1059 This feature allows mutex semantics violations to be detected and 1060 reported. 1061 1062config DEBUG_WW_MUTEX_SLOWPATH 1063 bool "Wait/wound mutex debugging: Slowpath testing" 1064 depends on DEBUG_KERNEL && TRACE_IRQFLAGS_SUPPORT && STACKTRACE_SUPPORT && LOCKDEP_SUPPORT 1065 select DEBUG_LOCK_ALLOC 1066 select DEBUG_SPINLOCK 1067 select DEBUG_MUTEXES 1068 help 1069 This feature enables slowpath testing for w/w mutex users by 1070 injecting additional -EDEADLK wound/backoff cases. Together with 1071 the full mutex checks enabled with (CONFIG_PROVE_LOCKING) this 1072 will test all possible w/w mutex interface abuse with the 1073 exception of simply not acquiring all the required locks. 1074 Note that this feature can introduce significant overhead, so 1075 it really should not be enabled in a production or distro kernel, 1076 even a debug kernel. If you are a driver writer, enable it. If 1077 you are a distro, do not. 1078 1079config DEBUG_LOCK_ALLOC 1080 bool "Lock debugging: detect incorrect freeing of live locks" 1081 depends on DEBUG_KERNEL && TRACE_IRQFLAGS_SUPPORT && STACKTRACE_SUPPORT && LOCKDEP_SUPPORT 1082 select DEBUG_SPINLOCK 1083 select DEBUG_MUTEXES 1084 select DEBUG_RT_MUTEXES if RT_MUTEXES 1085 select LOCKDEP 1086 help 1087 This feature will check whether any held lock (spinlock, rwlock, 1088 mutex or rwsem) is incorrectly freed by the kernel, via any of the 1089 memory-freeing routines (kfree(), kmem_cache_free(), free_pages(), 1090 vfree(), etc.), whether a live lock is incorrectly reinitialized via 1091 spin_lock_init()/mutex_init()/etc., or whether there is any lock 1092 held during task exit. 1093 1094config PROVE_LOCKING 1095 bool "Lock debugging: prove locking correctness" 1096 depends on DEBUG_KERNEL && TRACE_IRQFLAGS_SUPPORT && STACKTRACE_SUPPORT && LOCKDEP_SUPPORT 1097 select LOCKDEP 1098 select DEBUG_SPINLOCK 1099 select DEBUG_MUTEXES 1100 select DEBUG_RT_MUTEXES if RT_MUTEXES 1101 select DEBUG_LOCK_ALLOC 1102 select LOCKDEP_CROSSRELEASE 1103 select LOCKDEP_COMPLETIONS 1104 select TRACE_IRQFLAGS 1105 default n 1106 help 1107 This feature enables the kernel to prove that all locking 1108 that occurs in the kernel runtime is mathematically 1109 correct: that under no circumstance could an arbitrary (and 1110 not yet triggered) combination of observed locking 1111 sequences (on an arbitrary number of CPUs, running an 1112 arbitrary number of tasks and interrupt contexts) cause a 1113 deadlock. 1114 1115 In short, this feature enables the kernel to report locking 1116 related deadlocks before they actually occur. 1117 1118 The proof does not depend on how hard and complex a 1119 deadlock scenario would be to trigger: how many 1120 participant CPUs, tasks and irq-contexts would be needed 1121 for it to trigger. The proof also does not depend on 1122 timing: if a race and a resulting deadlock is possible 1123 theoretically (no matter how unlikely the race scenario 1124 is), it will be proven so and will immediately be 1125 reported by the kernel (once the event is observed that 1126 makes the deadlock theoretically possible). 1127 1128 If a deadlock is impossible (i.e. the locking rules, as 1129 observed by the kernel, are mathematically correct), the 1130 kernel reports nothing. 1131 1132 NOTE: this feature can also be enabled for rwlocks, mutexes 1133 and rwsems - in which case all dependencies between these 1134 different locking variants are observed and mapped too, and 1135 the proof of observed correctness is also maintained for an 1136 arbitrary combination of these separate locking variants. 1137 1138 For more details, see Documentation/locking/lockdep-design.txt. 1139 1140config LOCKDEP 1141 bool 1142 depends on DEBUG_KERNEL && TRACE_IRQFLAGS_SUPPORT && STACKTRACE_SUPPORT && LOCKDEP_SUPPORT 1143 select STACKTRACE 1144 select FRAME_POINTER if !MIPS && !PPC && !ARM_UNWIND && !S390 && !MICROBLAZE && !ARC && !SCORE && !X86 1145 select KALLSYMS 1146 select KALLSYMS_ALL 1147 1148config LOCKDEP_SMALL 1149 bool 1150 1151config LOCK_STAT 1152 bool "Lock usage statistics" 1153 depends on DEBUG_KERNEL && TRACE_IRQFLAGS_SUPPORT && STACKTRACE_SUPPORT && LOCKDEP_SUPPORT 1154 select LOCKDEP 1155 select DEBUG_SPINLOCK 1156 select DEBUG_MUTEXES 1157 select DEBUG_RT_MUTEXES if RT_MUTEXES 1158 select DEBUG_LOCK_ALLOC 1159 default n 1160 help 1161 This feature enables tracking lock contention points 1162 1163 For more details, see Documentation/locking/lockstat.txt 1164 1165 This also enables lock events required by "perf lock", 1166 subcommand of perf. 1167 If you want to use "perf lock", you also need to turn on 1168 CONFIG_EVENT_TRACING. 1169 1170 CONFIG_LOCK_STAT defines "contended" and "acquired" lock events. 1171 (CONFIG_LOCKDEP defines "acquire" and "release" events.) 1172 1173config LOCKDEP_CROSSRELEASE 1174 bool 1175 help 1176 This makes lockdep work for crosslock which is a lock allowed to 1177 be released in a different context from the acquisition context. 1178 Normally a lock must be released in the context acquiring the lock. 1179 However, relexing this constraint helps synchronization primitives 1180 such as page locks or completions can use the lock correctness 1181 detector, lockdep. 1182 1183config LOCKDEP_COMPLETIONS 1184 bool 1185 help 1186 A deadlock caused by wait_for_completion() and complete() can be 1187 detected by lockdep using crossrelease feature. 1188 1189config BOOTPARAM_LOCKDEP_CROSSRELEASE_FULLSTACK 1190 bool "Enable the boot parameter, crossrelease_fullstack" 1191 depends on LOCKDEP_CROSSRELEASE 1192 default n 1193 help 1194 The lockdep "cross-release" feature needs to record stack traces 1195 (of calling functions) for all acquisitions, for eventual later 1196 use during analysis. By default only a single caller is recorded, 1197 because the unwind operation can be very expensive with deeper 1198 stack chains. 1199 1200 However a boot parameter, crossrelease_fullstack, was 1201 introduced since sometimes deeper traces are required for full 1202 analysis. This option turns on the boot parameter. 1203 1204config DEBUG_LOCKDEP 1205 bool "Lock dependency engine debugging" 1206 depends on DEBUG_KERNEL && LOCKDEP 1207 help 1208 If you say Y here, the lock dependency engine will do 1209 additional runtime checks to debug itself, at the price 1210 of more runtime overhead. 1211 1212config DEBUG_ATOMIC_SLEEP 1213 bool "Sleep inside atomic section checking" 1214 select PREEMPT_COUNT 1215 depends on DEBUG_KERNEL 1216 help 1217 If you say Y here, various routines which may sleep will become very 1218 noisy if they are called inside atomic sections: when a spinlock is 1219 held, inside an rcu read side critical section, inside preempt disabled 1220 sections, inside an interrupt, etc... 1221 1222config DEBUG_LOCKING_API_SELFTESTS 1223 bool "Locking API boot-time self-tests" 1224 depends on DEBUG_KERNEL 1225 help 1226 Say Y here if you want the kernel to run a short self-test during 1227 bootup. The self-test checks whether common types of locking bugs 1228 are detected by debugging mechanisms or not. (if you disable 1229 lock debugging then those bugs wont be detected of course.) 1230 The following locking APIs are covered: spinlocks, rwlocks, 1231 mutexes and rwsems. 1232 1233config LOCK_TORTURE_TEST 1234 tristate "torture tests for locking" 1235 depends on DEBUG_KERNEL 1236 select TORTURE_TEST 1237 default n 1238 help 1239 This option provides a kernel module that runs torture tests 1240 on kernel locking primitives. The kernel module may be built 1241 after the fact on the running kernel to be tested, if desired. 1242 1243 Say Y here if you want kernel locking-primitive torture tests 1244 to be built into the kernel. 1245 Say M if you want these torture tests to build as a module. 1246 Say N if you are unsure. 1247 1248config WW_MUTEX_SELFTEST 1249 tristate "Wait/wound mutex selftests" 1250 help 1251 This option provides a kernel module that runs tests on the 1252 on the struct ww_mutex locking API. 1253 1254 It is recommended to enable DEBUG_WW_MUTEX_SLOWPATH in conjunction 1255 with this test harness. 1256 1257 Say M if you want these self tests to build as a module. 1258 Say N if you are unsure. 1259 1260endmenu # lock debugging 1261 1262config TRACE_IRQFLAGS 1263 bool 1264 help 1265 Enables hooks to interrupt enabling and disabling for 1266 either tracing or lock debugging. 1267 1268config STACKTRACE 1269 bool "Stack backtrace support" 1270 depends on STACKTRACE_SUPPORT 1271 help 1272 This option causes the kernel to create a /proc/pid/stack for 1273 every process, showing its current stack trace. 1274 It is also used by various kernel debugging features that require 1275 stack trace generation. 1276 1277config WARN_ALL_UNSEEDED_RANDOM 1278 bool "Warn for all uses of unseeded randomness" 1279 default n 1280 help 1281 Some parts of the kernel contain bugs relating to their use of 1282 cryptographically secure random numbers before it's actually possible 1283 to generate those numbers securely. This setting ensures that these 1284 flaws don't go unnoticed, by enabling a message, should this ever 1285 occur. This will allow people with obscure setups to know when things 1286 are going wrong, so that they might contact developers about fixing 1287 it. 1288 1289 Unfortunately, on some models of some architectures getting 1290 a fully seeded CRNG is extremely difficult, and so this can 1291 result in dmesg getting spammed for a surprisingly long 1292 time. This is really bad from a security perspective, and 1293 so architecture maintainers really need to do what they can 1294 to get the CRNG seeded sooner after the system is booted. 1295 However, since users can not do anything actionble to 1296 address this, by default the kernel will issue only a single 1297 warning for the first use of unseeded randomness. 1298 1299 Say Y here if you want to receive warnings for all uses of 1300 unseeded randomness. This will be of use primarily for 1301 those developers interersted in improving the security of 1302 Linux kernels running on their architecture (or 1303 subarchitecture). 1304 1305config DEBUG_KOBJECT 1306 bool "kobject debugging" 1307 depends on DEBUG_KERNEL 1308 help 1309 If you say Y here, some extra kobject debugging messages will be sent 1310 to the syslog. 1311 1312config DEBUG_KOBJECT_RELEASE 1313 bool "kobject release debugging" 1314 depends on DEBUG_OBJECTS_TIMERS 1315 help 1316 kobjects are reference counted objects. This means that their 1317 last reference count put is not predictable, and the kobject can 1318 live on past the point at which a driver decides to drop it's 1319 initial reference to the kobject gained on allocation. An 1320 example of this would be a struct device which has just been 1321 unregistered. 1322 1323 However, some buggy drivers assume that after such an operation, 1324 the memory backing the kobject can be immediately freed. This 1325 goes completely against the principles of a refcounted object. 1326 1327 If you say Y here, the kernel will delay the release of kobjects 1328 on the last reference count to improve the visibility of this 1329 kind of kobject release bug. 1330 1331config HAVE_DEBUG_BUGVERBOSE 1332 bool 1333 1334config DEBUG_BUGVERBOSE 1335 bool "Verbose BUG() reporting (adds 70K)" if DEBUG_KERNEL && EXPERT 1336 depends on BUG && (GENERIC_BUG || HAVE_DEBUG_BUGVERBOSE) 1337 default y 1338 help 1339 Say Y here to make BUG() panics output the file name and line number 1340 of the BUG call as well as the EIP and oops trace. This aids 1341 debugging but costs about 70-100K of memory. 1342 1343config DEBUG_LIST 1344 bool "Debug linked list manipulation" 1345 depends on DEBUG_KERNEL || BUG_ON_DATA_CORRUPTION 1346 help 1347 Enable this to turn on extended checks in the linked-list 1348 walking routines. 1349 1350 If unsure, say N. 1351 1352config DEBUG_PI_LIST 1353 bool "Debug priority linked list manipulation" 1354 depends on DEBUG_KERNEL 1355 help 1356 Enable this to turn on extended checks in the priority-ordered 1357 linked-list (plist) walking routines. This checks the entire 1358 list multiple times during each manipulation. 1359 1360 If unsure, say N. 1361 1362config DEBUG_SG 1363 bool "Debug SG table operations" 1364 depends on DEBUG_KERNEL 1365 help 1366 Enable this to turn on checks on scatter-gather tables. This can 1367 help find problems with drivers that do not properly initialize 1368 their sg tables. 1369 1370 If unsure, say N. 1371 1372config DEBUG_NOTIFIERS 1373 bool "Debug notifier call chains" 1374 depends on DEBUG_KERNEL 1375 help 1376 Enable this to turn on sanity checking for notifier call chains. 1377 This is most useful for kernel developers to make sure that 1378 modules properly unregister themselves from notifier chains. 1379 This is a relatively cheap check but if you care about maximum 1380 performance, say N. 1381 1382config DEBUG_CREDENTIALS 1383 bool "Debug credential management" 1384 depends on DEBUG_KERNEL 1385 help 1386 Enable this to turn on some debug checking for credential 1387 management. The additional code keeps track of the number of 1388 pointers from task_structs to any given cred struct, and checks to 1389 see that this number never exceeds the usage count of the cred 1390 struct. 1391 1392 Furthermore, if SELinux is enabled, this also checks that the 1393 security pointer in the cred struct is never seen to be invalid. 1394 1395 If unsure, say N. 1396 1397source "kernel/rcu/Kconfig.debug" 1398 1399config DEBUG_WQ_FORCE_RR_CPU 1400 bool "Force round-robin CPU selection for unbound work items" 1401 depends on DEBUG_KERNEL 1402 default n 1403 help 1404 Workqueue used to implicitly guarantee that work items queued 1405 without explicit CPU specified are put on the local CPU. This 1406 guarantee is no longer true and while local CPU is still 1407 preferred work items may be put on foreign CPUs. Kernel 1408 parameter "workqueue.debug_force_rr_cpu" is added to force 1409 round-robin CPU selection to flush out usages which depend on the 1410 now broken guarantee. This config option enables the debug 1411 feature by default. When enabled, memory and cache locality will 1412 be impacted. 1413 1414config DEBUG_BLOCK_EXT_DEVT 1415 bool "Force extended block device numbers and spread them" 1416 depends on DEBUG_KERNEL 1417 depends on BLOCK 1418 default n 1419 help 1420 BIG FAT WARNING: ENABLING THIS OPTION MIGHT BREAK BOOTING ON 1421 SOME DISTRIBUTIONS. DO NOT ENABLE THIS UNLESS YOU KNOW WHAT 1422 YOU ARE DOING. Distros, please enable this and fix whatever 1423 is broken. 1424 1425 Conventionally, block device numbers are allocated from 1426 predetermined contiguous area. However, extended block area 1427 may introduce non-contiguous block device numbers. This 1428 option forces most block device numbers to be allocated from 1429 the extended space and spreads them to discover kernel or 1430 userland code paths which assume predetermined contiguous 1431 device number allocation. 1432 1433 Note that turning on this debug option shuffles all the 1434 device numbers for all IDE and SCSI devices including libata 1435 ones, so root partition specified using device number 1436 directly (via rdev or root=MAJ:MIN) won't work anymore. 1437 Textual device names (root=/dev/sdXn) will continue to work. 1438 1439 Say N if you are unsure. 1440 1441config CPU_HOTPLUG_STATE_CONTROL 1442 bool "Enable CPU hotplug state control" 1443 depends on DEBUG_KERNEL 1444 depends on HOTPLUG_CPU 1445 default n 1446 help 1447 Allows to write steps between "offline" and "online" to the CPUs 1448 sysfs target file so states can be stepped granular. This is a debug 1449 option for now as the hotplug machinery cannot be stopped and 1450 restarted at arbitrary points yet. 1451 1452 Say N if your are unsure. 1453 1454config NOTIFIER_ERROR_INJECTION 1455 tristate "Notifier error injection" 1456 depends on DEBUG_KERNEL 1457 select DEBUG_FS 1458 help 1459 This option provides the ability to inject artificial errors to 1460 specified notifier chain callbacks. It is useful to test the error 1461 handling of notifier call chain failures. 1462 1463 Say N if unsure. 1464 1465config PM_NOTIFIER_ERROR_INJECT 1466 tristate "PM notifier error injection module" 1467 depends on PM && NOTIFIER_ERROR_INJECTION 1468 default m if PM_DEBUG 1469 help 1470 This option provides the ability to inject artificial errors to 1471 PM notifier chain callbacks. It is controlled through debugfs 1472 interface /sys/kernel/debug/notifier-error-inject/pm 1473 1474 If the notifier call chain should be failed with some events 1475 notified, write the error code to "actions/<notifier event>/error". 1476 1477 Example: Inject PM suspend error (-12 = -ENOMEM) 1478 1479 # cd /sys/kernel/debug/notifier-error-inject/pm/ 1480 # echo -12 > actions/PM_SUSPEND_PREPARE/error 1481 # echo mem > /sys/power/state 1482 bash: echo: write error: Cannot allocate memory 1483 1484 To compile this code as a module, choose M here: the module will 1485 be called pm-notifier-error-inject. 1486 1487 If unsure, say N. 1488 1489config OF_RECONFIG_NOTIFIER_ERROR_INJECT 1490 tristate "OF reconfig notifier error injection module" 1491 depends on OF_DYNAMIC && NOTIFIER_ERROR_INJECTION 1492 help 1493 This option provides the ability to inject artificial errors to 1494 OF reconfig notifier chain callbacks. It is controlled 1495 through debugfs interface under 1496 /sys/kernel/debug/notifier-error-inject/OF-reconfig/ 1497 1498 If the notifier call chain should be failed with some events 1499 notified, write the error code to "actions/<notifier event>/error". 1500 1501 To compile this code as a module, choose M here: the module will 1502 be called of-reconfig-notifier-error-inject. 1503 1504 If unsure, say N. 1505 1506config NETDEV_NOTIFIER_ERROR_INJECT 1507 tristate "Netdev notifier error injection module" 1508 depends on NET && NOTIFIER_ERROR_INJECTION 1509 help 1510 This option provides the ability to inject artificial errors to 1511 netdevice notifier chain callbacks. It is controlled through debugfs 1512 interface /sys/kernel/debug/notifier-error-inject/netdev 1513 1514 If the notifier call chain should be failed with some events 1515 notified, write the error code to "actions/<notifier event>/error". 1516 1517 Example: Inject netdevice mtu change error (-22 = -EINVAL) 1518 1519 # cd /sys/kernel/debug/notifier-error-inject/netdev 1520 # echo -22 > actions/NETDEV_CHANGEMTU/error 1521 # ip link set eth0 mtu 1024 1522 RTNETLINK answers: Invalid argument 1523 1524 To compile this code as a module, choose M here: the module will 1525 be called netdev-notifier-error-inject. 1526 1527 If unsure, say N. 1528 1529config FAULT_INJECTION 1530 bool "Fault-injection framework" 1531 depends on DEBUG_KERNEL 1532 help 1533 Provide fault-injection framework. 1534 For more details, see Documentation/fault-injection/. 1535 1536config FAILSLAB 1537 bool "Fault-injection capability for kmalloc" 1538 depends on FAULT_INJECTION 1539 depends on SLAB || SLUB 1540 help 1541 Provide fault-injection capability for kmalloc. 1542 1543config FAIL_PAGE_ALLOC 1544 bool "Fault-injection capabilitiy for alloc_pages()" 1545 depends on FAULT_INJECTION 1546 help 1547 Provide fault-injection capability for alloc_pages(). 1548 1549config FAIL_MAKE_REQUEST 1550 bool "Fault-injection capability for disk IO" 1551 depends on FAULT_INJECTION && BLOCK 1552 help 1553 Provide fault-injection capability for disk IO. 1554 1555config FAIL_IO_TIMEOUT 1556 bool "Fault-injection capability for faking disk interrupts" 1557 depends on FAULT_INJECTION && BLOCK 1558 help 1559 Provide fault-injection capability on end IO handling. This 1560 will make the block layer "forget" an interrupt as configured, 1561 thus exercising the error handling. 1562 1563 Only works with drivers that use the generic timeout handling, 1564 for others it wont do anything. 1565 1566config FAIL_MMC_REQUEST 1567 bool "Fault-injection capability for MMC IO" 1568 depends on FAULT_INJECTION_DEBUG_FS && MMC 1569 help 1570 Provide fault-injection capability for MMC IO. 1571 This will make the mmc core return data errors. This is 1572 useful to test the error handling in the mmc block device 1573 and to test how the mmc host driver handles retries from 1574 the block device. 1575 1576config FAIL_FUTEX 1577 bool "Fault-injection capability for futexes" 1578 select DEBUG_FS 1579 depends on FAULT_INJECTION && FUTEX 1580 help 1581 Provide fault-injection capability for futexes. 1582 1583config FAULT_INJECTION_DEBUG_FS 1584 bool "Debugfs entries for fault-injection capabilities" 1585 depends on FAULT_INJECTION && SYSFS && DEBUG_FS 1586 help 1587 Enable configuration of fault-injection capabilities via debugfs. 1588 1589config FAULT_INJECTION_STACKTRACE_FILTER 1590 bool "stacktrace filter for fault-injection capabilities" 1591 depends on FAULT_INJECTION_DEBUG_FS && STACKTRACE_SUPPORT 1592 depends on !X86_64 1593 select STACKTRACE 1594 select FRAME_POINTER if !MIPS && !PPC && !S390 && !MICROBLAZE && !ARM_UNWIND && !ARC && !SCORE && !X86 1595 help 1596 Provide stacktrace filter for fault-injection capabilities 1597 1598config LATENCYTOP 1599 bool "Latency measuring infrastructure" 1600 depends on DEBUG_KERNEL 1601 depends on STACKTRACE_SUPPORT 1602 depends on PROC_FS 1603 select FRAME_POINTER if !MIPS && !PPC && !S390 && !MICROBLAZE && !ARM_UNWIND && !ARC && !X86 1604 select KALLSYMS 1605 select KALLSYMS_ALL 1606 select STACKTRACE 1607 select SCHEDSTATS 1608 select SCHED_DEBUG 1609 help 1610 Enable this option if you want to use the LatencyTOP tool 1611 to find out which userspace is blocking on what kernel operations. 1612 1613source kernel/trace/Kconfig 1614 1615config PROVIDE_OHCI1394_DMA_INIT 1616 bool "Remote debugging over FireWire early on boot" 1617 depends on PCI && X86 1618 help 1619 If you want to debug problems which hang or crash the kernel early 1620 on boot and the crashing machine has a FireWire port, you can use 1621 this feature to remotely access the memory of the crashed machine 1622 over FireWire. This employs remote DMA as part of the OHCI1394 1623 specification which is now the standard for FireWire controllers. 1624 1625 With remote DMA, you can monitor the printk buffer remotely using 1626 firescope and access all memory below 4GB using fireproxy from gdb. 1627 Even controlling a kernel debugger is possible using remote DMA. 1628 1629 Usage: 1630 1631 If ohci1394_dma=early is used as boot parameter, it will initialize 1632 all OHCI1394 controllers which are found in the PCI config space. 1633 1634 As all changes to the FireWire bus such as enabling and disabling 1635 devices cause a bus reset and thereby disable remote DMA for all 1636 devices, be sure to have the cable plugged and FireWire enabled on 1637 the debugging host before booting the debug target for debugging. 1638 1639 This code (~1k) is freed after boot. By then, the firewire stack 1640 in charge of the OHCI-1394 controllers should be used instead. 1641 1642 See Documentation/debugging-via-ohci1394.txt for more information. 1643 1644config DMA_API_DEBUG 1645 bool "Enable debugging of DMA-API usage" 1646 depends on HAVE_DMA_API_DEBUG 1647 help 1648 Enable this option to debug the use of the DMA API by device drivers. 1649 With this option you will be able to detect common bugs in device 1650 drivers like double-freeing of DMA mappings or freeing mappings that 1651 were never allocated. 1652 1653 This also attempts to catch cases where a page owned by DMA is 1654 accessed by the cpu in a way that could cause data corruption. For 1655 example, this enables cow_user_page() to check that the source page is 1656 not undergoing DMA. 1657 1658 This option causes a performance degradation. Use only if you want to 1659 debug device drivers and dma interactions. 1660 1661 If unsure, say N. 1662 1663menu "Runtime Testing" 1664 1665config LKDTM 1666 tristate "Linux Kernel Dump Test Tool Module" 1667 depends on DEBUG_FS 1668 depends on BLOCK 1669 default n 1670 help 1671 This module enables testing of the different dumping mechanisms by 1672 inducing system failures at predefined crash points. 1673 If you don't need it: say N 1674 Choose M here to compile this code as a module. The module will be 1675 called lkdtm. 1676 1677 Documentation on how to use the module can be found in 1678 Documentation/fault-injection/provoke-crashes.txt 1679 1680config TEST_LIST_SORT 1681 tristate "Linked list sorting test" 1682 depends on DEBUG_KERNEL || m 1683 help 1684 Enable this to turn on 'list_sort()' function test. This test is 1685 executed only once during system boot (so affects only boot time), 1686 or at module load time. 1687 1688 If unsure, say N. 1689 1690config TEST_SORT 1691 tristate "Array-based sort test" 1692 depends on DEBUG_KERNEL || m 1693 help 1694 This option enables the self-test function of 'sort()' at boot, 1695 or at module load time. 1696 1697 If unsure, say N. 1698 1699config KPROBES_SANITY_TEST 1700 bool "Kprobes sanity tests" 1701 depends on DEBUG_KERNEL 1702 depends on KPROBES 1703 default n 1704 help 1705 This option provides for testing basic kprobes functionality on 1706 boot. A sample kprobe, jprobe and kretprobe are inserted and 1707 verified for functionality. 1708 1709 Say N if you are unsure. 1710 1711config BACKTRACE_SELF_TEST 1712 tristate "Self test for the backtrace code" 1713 depends on DEBUG_KERNEL 1714 default n 1715 help 1716 This option provides a kernel module that can be used to test 1717 the kernel stack backtrace code. This option is not useful 1718 for distributions or general kernels, but only for kernel 1719 developers working on architecture code. 1720 1721 Note that if you want to also test saved backtraces, you will 1722 have to enable STACKTRACE as well. 1723 1724 Say N if you are unsure. 1725 1726config RBTREE_TEST 1727 tristate "Red-Black tree test" 1728 depends on DEBUG_KERNEL 1729 help 1730 A benchmark measuring the performance of the rbtree library. 1731 Also includes rbtree invariant checks. 1732 1733config INTERVAL_TREE_TEST 1734 tristate "Interval tree test" 1735 depends on DEBUG_KERNEL 1736 select INTERVAL_TREE 1737 help 1738 A benchmark measuring the performance of the interval tree library 1739 1740config PERCPU_TEST 1741 tristate "Per cpu operations test" 1742 depends on m && DEBUG_KERNEL 1743 help 1744 Enable this option to build test module which validates per-cpu 1745 operations. 1746 1747 If unsure, say N. 1748 1749config ATOMIC64_SELFTEST 1750 tristate "Perform an atomic64_t self-test" 1751 help 1752 Enable this option to test the atomic64_t functions at boot or 1753 at module load time. 1754 1755 If unsure, say N. 1756 1757config ASYNC_RAID6_TEST 1758 tristate "Self test for hardware accelerated raid6 recovery" 1759 depends on ASYNC_RAID6_RECOV 1760 select ASYNC_MEMCPY 1761 ---help--- 1762 This is a one-shot self test that permutes through the 1763 recovery of all the possible two disk failure scenarios for a 1764 N-disk array. Recovery is performed with the asynchronous 1765 raid6 recovery routines, and will optionally use an offload 1766 engine if one is available. 1767 1768 If unsure, say N. 1769 1770config TEST_HEXDUMP 1771 tristate "Test functions located in the hexdump module at runtime" 1772 1773config TEST_STRING_HELPERS 1774 tristate "Test functions located in the string_helpers module at runtime" 1775 1776config TEST_KSTRTOX 1777 tristate "Test kstrto*() family of functions at runtime" 1778 1779config TEST_PRINTF 1780 tristate "Test printf() family of functions at runtime" 1781 1782config TEST_BITMAP 1783 tristate "Test bitmap_*() family of functions at runtime" 1784 default n 1785 help 1786 Enable this option to test the bitmap functions at boot. 1787 1788 If unsure, say N. 1789 1790config TEST_UUID 1791 tristate "Test functions located in the uuid module at runtime" 1792 1793config TEST_RHASHTABLE 1794 tristate "Perform selftest on resizable hash table" 1795 default n 1796 help 1797 Enable this option to test the rhashtable functions at boot. 1798 1799 If unsure, say N. 1800 1801config TEST_HASH 1802 tristate "Perform selftest on hash functions" 1803 default n 1804 help 1805 Enable this option to test the kernel's integer (<linux/hash.h>), 1806 string (<linux/stringhash.h>), and siphash (<linux/siphash.h>) 1807 hash functions on boot (or module load). 1808 1809 This is intended to help people writing architecture-specific 1810 optimized versions. If unsure, say N. 1811 1812config TEST_PARMAN 1813 tristate "Perform selftest on priority array manager" 1814 default n 1815 depends on PARMAN 1816 help 1817 Enable this option to test priority array manager on boot 1818 (or module load). 1819 1820 If unsure, say N. 1821 1822config TEST_LKM 1823 tristate "Test module loading with 'hello world' module" 1824 default n 1825 depends on m 1826 help 1827 This builds the "test_module" module that emits "Hello, world" 1828 on printk when loaded. It is designed to be used for basic 1829 evaluation of the module loading subsystem (for example when 1830 validating module verification). It lacks any extra dependencies, 1831 and will not normally be loaded by the system unless explicitly 1832 requested by name. 1833 1834 If unsure, say N. 1835 1836config TEST_USER_COPY 1837 tristate "Test user/kernel boundary protections" 1838 default n 1839 depends on m 1840 help 1841 This builds the "test_user_copy" module that runs sanity checks 1842 on the copy_to/from_user infrastructure, making sure basic 1843 user/kernel boundary testing is working. If it fails to load, 1844 a regression has been detected in the user/kernel memory boundary 1845 protections. 1846 1847 If unsure, say N. 1848 1849config TEST_BPF 1850 tristate "Test BPF filter functionality" 1851 default n 1852 depends on m && NET 1853 help 1854 This builds the "test_bpf" module that runs various test vectors 1855 against the BPF interpreter or BPF JIT compiler depending on the 1856 current setting. This is in particular useful for BPF JIT compiler 1857 development, but also to run regression tests against changes in 1858 the interpreter code. It also enables test stubs for eBPF maps and 1859 verifier used by user space verifier testsuite. 1860 1861 If unsure, say N. 1862 1863config TEST_FIND_BIT 1864 tristate "Test find_bit functions" 1865 default n 1866 help 1867 This builds the "test_find_bit" module that measure find_*_bit() 1868 functions performance. 1869 1870 If unsure, say N. 1871 1872config TEST_FIRMWARE 1873 tristate "Test firmware loading via userspace interface" 1874 default n 1875 depends on FW_LOADER 1876 help 1877 This builds the "test_firmware" module that creates a userspace 1878 interface for testing firmware loading. This can be used to 1879 control the triggering of firmware loading without needing an 1880 actual firmware-using device. The contents can be rechecked by 1881 userspace. 1882 1883 If unsure, say N. 1884 1885config TEST_SYSCTL 1886 tristate "sysctl test driver" 1887 default n 1888 depends on PROC_SYSCTL 1889 help 1890 This builds the "test_sysctl" module. This driver enables to test the 1891 proc sysctl interfaces available to drivers safely without affecting 1892 production knobs which might alter system functionality. 1893 1894 If unsure, say N. 1895 1896config TEST_UDELAY 1897 tristate "udelay test driver" 1898 default n 1899 help 1900 This builds the "udelay_test" module that helps to make sure 1901 that udelay() is working properly. 1902 1903 If unsure, say N. 1904 1905config TEST_STATIC_KEYS 1906 tristate "Test static keys" 1907 default n 1908 depends on m 1909 help 1910 Test the static key interfaces. 1911 1912 If unsure, say N. 1913 1914config TEST_KMOD 1915 tristate "kmod stress tester" 1916 default n 1917 depends on m 1918 depends on BLOCK && (64BIT || LBDAF) # for XFS, BTRFS 1919 depends on NETDEVICES && NET_CORE && INET # for TUN 1920 select TEST_LKM 1921 select XFS_FS 1922 select TUN 1923 select BTRFS_FS 1924 help 1925 Test the kernel's module loading mechanism: kmod. kmod implements 1926 support to load modules using the Linux kernel's usermode helper. 1927 This test provides a series of tests against kmod. 1928 1929 Although technically you can either build test_kmod as a module or 1930 into the kernel we disallow building it into the kernel since 1931 it stress tests request_module() and this will very likely cause 1932 some issues by taking over precious threads available from other 1933 module load requests, ultimately this could be fatal. 1934 1935 To run tests run: 1936 1937 tools/testing/selftests/kmod/kmod.sh --help 1938 1939 If unsure, say N. 1940 1941config TEST_DEBUG_VIRTUAL 1942 tristate "Test CONFIG_DEBUG_VIRTUAL feature" 1943 depends on DEBUG_VIRTUAL 1944 help 1945 Test the kernel's ability to detect incorrect calls to 1946 virt_to_phys() done against the non-linear part of the 1947 kernel's virtual address map. 1948 1949 If unsure, say N. 1950 1951endmenu # runtime tests 1952 1953config MEMTEST 1954 bool "Memtest" 1955 depends on HAVE_MEMBLOCK 1956 ---help--- 1957 This option adds a kernel parameter 'memtest', which allows memtest 1958 to be set. 1959 memtest=0, mean disabled; -- default 1960 memtest=1, mean do 1 test pattern; 1961 ... 1962 memtest=17, mean do 17 test patterns. 1963 If you are unsure how to answer this question, answer N. 1964 1965config BUG_ON_DATA_CORRUPTION 1966 bool "Trigger a BUG when data corruption is detected" 1967 select DEBUG_LIST 1968 help 1969 Select this option if the kernel should BUG when it encounters 1970 data corruption in kernel memory structures when they get checked 1971 for validity. 1972 1973 If unsure, say N. 1974 1975source "samples/Kconfig" 1976 1977source "lib/Kconfig.kgdb" 1978 1979source "lib/Kconfig.ubsan" 1980 1981config ARCH_HAS_DEVMEM_IS_ALLOWED 1982 bool 1983 1984config STRICT_DEVMEM 1985 bool "Filter access to /dev/mem" 1986 depends on MMU && DEVMEM 1987 depends on ARCH_HAS_DEVMEM_IS_ALLOWED 1988 default y if TILE || PPC 1989 ---help--- 1990 If this option is disabled, you allow userspace (root) access to all 1991 of memory, including kernel and userspace memory. Accidental 1992 access to this is obviously disastrous, but specific access can 1993 be used by people debugging the kernel. Note that with PAT support 1994 enabled, even in this case there are restrictions on /dev/mem 1995 use due to the cache aliasing requirements. 1996 1997 If this option is switched on, and IO_STRICT_DEVMEM=n, the /dev/mem 1998 file only allows userspace access to PCI space and the BIOS code and 1999 data regions. This is sufficient for dosemu and X and all common 2000 users of /dev/mem. 2001 2002 If in doubt, say Y. 2003 2004config IO_STRICT_DEVMEM 2005 bool "Filter I/O access to /dev/mem" 2006 depends on STRICT_DEVMEM 2007 ---help--- 2008 If this option is disabled, you allow userspace (root) access to all 2009 io-memory regardless of whether a driver is actively using that 2010 range. Accidental access to this is obviously disastrous, but 2011 specific access can be used by people debugging kernel drivers. 2012 2013 If this option is switched on, the /dev/mem file only allows 2014 userspace access to *idle* io-memory ranges (see /proc/iomem) This 2015 may break traditional users of /dev/mem (dosemu, legacy X, etc...) 2016 if the driver using a given range cannot be disabled. 2017 2018 If in doubt, say Y. 2019