Skip to content
Snippets Groups Projects
Config-kernel.in 39.1 KiB
Newer Older
  • Learn to ignore specific revisions
  • 	  queues (functions mq_*) say Y here.
    
    	  POSIX message queues are visible as a filesystem called 'mqueue'
    	  and can be mounted somewhere if you want to do filesystem
    	  operations on message queues.
    
    config KERNEL_SECCOMP_FILTER
    	bool
    
    config KERNEL_SECCOMP
    	bool "Enable seccomp support"
    
    		depends on !(TARGET_uml)
    
    		select KERNEL_SECCOMP_FILTER
    
    		help
    		  Build kernel with support for seccomp.
    
    #
    # IPv4 configuration
    #
    
    config KERNEL_IP_MROUTE
    	bool "Enable IPv4 multicast routing"
    	default y
    	help
    	  Multicast routing requires a multicast routing daemon in
    	  addition to kernel support.
    
    
    if KERNEL_IP_MROUTE
    
    	config KERNEL_IP_MROUTE_MULTIPLE_TABLES
    		def_bool y
    
    	config KERNEL_IP_PIMSM_V1
    		def_bool y
    
    	config KERNEL_IP_PIMSM_V2
    		def_bool y
    
    endif
    
    
    #
    # IPv6 configuration
    #
    
    config KERNEL_IPV6
    	def_bool IPV6
    
    if KERNEL_IPV6
    
    	config KERNEL_IPV6_MULTIPLE_TABLES
    		def_bool y
    
    	config KERNEL_IPV6_SUBTREES
    		def_bool y
    
    	config KERNEL_IPV6_MROUTE
    
    		bool "Enable IPv6 multicast routing"
    		default y
    		help
    		  Multicast routing requires a multicast routing daemon in
    		  addition to kernel support.
    
    	if KERNEL_IPV6_MROUTE
    
    		config KERNEL_IPV6_MROUTE_MULTIPLE_TABLES
    			def_bool y
    
    		config KERNEL_IPV6_PIMSM_V2
    			def_bool y
    
    	endif
    
    	config KERNEL_IPV6_SEG6_LWTUNNEL
    
    		bool "Enable support for lightweight tunnels"
    		default y if !SMALL_FLASH
    
    		  Using lwtunnel (needed for IPv6 segment routing) requires ip-full package.
    
    
    	config KERNEL_LWTUNNEL_BPF
    		def_bool n
    
    
    Marek Behún's avatar
    Marek Behún committed
    #
    # Miscellaneous network configuration
    #
    
    config KERNEL_NET_L3_MASTER_DEV
    	bool "L3 Master device support"
    	help
    	  This module provides glue between core networking code and device
    	  drivers to support L3 master devices like VRF.
    
    
    config KERNEL_XDP_SOCKETS
    	bool "XDP sockets support"
    	help
    	  XDP sockets allows a channel between XDP programs and
    	  userspace applications.
    
    
    config KERNEL_WIRELESS_EXT
    	def_bool n
    
    config KERNEL_WEXT_CORE
    	def_bool KERNEL_WIRELESS_EXT
    
    config KERNEL_WEXT_PRIV
    	def_bool KERNEL_WIRELESS_EXT
    
    config KERNEL_WEXT_PROC
    	def_bool KERNEL_WIRELESS_EXT
    
    config KERNEL_WEXT_SPY
    	def_bool KERNEL_WIRELESS_EXT
    
    
    config KERNEL_PAGE_POOL
    	def_bool n
    
    config KERNEL_PAGE_POOL_STATS
    	bool "Page pool stats support"
    	depends on KERNEL_PAGE_POOL
    
    	depends on !LINUX_5_10
    
    #
    # NFS related symbols
    #
    config KERNEL_IP_PNP
    	bool "Compile the kernel with rootfs on NFS"
    	help
    	   If you want to make your kernel boot off a NFS server as root
    	   filesystem, select Y here.
    
    if KERNEL_IP_PNP
    
    	config KERNEL_IP_PNP_DHCP
    		def_bool y
    
    	config KERNEL_IP_PNP_BOOTP
    		def_bool n
    
    	config KERNEL_IP_PNP_RARP
    		def_bool n
    
    	config KERNEL_NFS_FS
    		def_bool y
    
    	config KERNEL_NFS_V2
    		def_bool y
    
    	config KERNEL_NFS_V3
    		def_bool y
    
    	config KERNEL_ROOT_NFS
    		def_bool y
    
    endif
    
    menu "Filesystem ACL and attr support options"
    	config USE_FS_ACL_ATTR
    		bool "Use filesystem ACL and attr support by default"
    		help
    		  Make using ACLs (e.g. POSIX ACL, NFSv4 ACL) the default
    		  for kernel and packages, except tmpfs, flash filesystems,
    		  and old NFS.  Also enable userspace extended attribute support
    		  by default.  (OpenWrt already has an expection it will be
    		  present in the kernel).
    
    	config KERNEL_FS_POSIX_ACL
    		bool "Enable POSIX ACL support"
    		default y if USE_FS_ACL_ATTR
    
    	config KERNEL_BTRFS_FS_POSIX_ACL
    		bool "Enable POSIX ACL for BtrFS Filesystems"
    		select KERNEL_FS_POSIX_ACL
    		default y if USE_FS_ACL_ATTR
    
    	config KERNEL_EXT4_FS_POSIX_ACL
    		bool "Enable POSIX ACL for Ext4 Filesystems"
    		select KERNEL_FS_POSIX_ACL
    		default y if USE_FS_ACL_ATTR
    
    	config KERNEL_F2FS_FS_POSIX_ACL
    		bool "Enable POSIX ACL for F2FS Filesystems"
    		select KERNEL_FS_POSIX_ACL
    
    	config KERNEL_JFFS2_FS_POSIX_ACL
    		bool "Enable POSIX ACL for JFFS2 Filesystems"
    		select KERNEL_FS_POSIX_ACL
    
    	config KERNEL_TMPFS_POSIX_ACL
    		bool "Enable POSIX ACL for TMPFS Filesystems"
    		select KERNEL_FS_POSIX_ACL
    
    	config KERNEL_CIFS_ACL
    		bool "Enable CIFS ACLs"
    		select KERNEL_FS_POSIX_ACL
    		default y if USE_FS_ACL_ATTR
    
    	config KERNEL_HFS_FS_POSIX_ACL
    		bool "Enable POSIX ACL for HFS Filesystems"
    		select KERNEL_FS_POSIX_ACL
    		default y if USE_FS_ACL_ATTR
    
    	config KERNEL_HFSPLUS_FS_POSIX_ACL
    
    		bool "Enable POSIX ACL for HFS+ Filesystems"
    		select KERNEL_FS_POSIX_ACL
    		default y if USE_FS_ACL_ATTR
    
    	config KERNEL_NFS_ACL_SUPPORT
    		bool "Enable ACLs for NFS"
    		default y if USE_FS_ACL_ATTR
    
    	config KERNEL_NFS_V3_ACL_SUPPORT
    		bool "Enable ACLs for NFSv3"
    
    	config KERNEL_NFSD_V2_ACL_SUPPORT
    		bool "Enable ACLs for NFSDv2"
    
    	config KERNEL_NFSD_V3_ACL_SUPPORT
    		bool "Enable ACLs for NFSDv3"
    
    	config KERNEL_REISER_FS_POSIX_ACL
    		bool "Enable POSIX ACLs for ReiserFS"
    		select KERNEL_FS_POSIX_ACL
    		default y if USE_FS_ACL_ATTR
    
    	config KERNEL_XFS_POSIX_ACL
    		bool "Enable POSIX ACLs for XFS"
    		select KERNEL_FS_POSIX_ACL
    		default y if USE_FS_ACL_ATTR
    
    	config KERNEL_JFS_POSIX_ACL
    		bool "Enable POSIX ACLs for JFS"
    		select KERNEL_FS_POSIX_ACL
    		default y if USE_FS_ACL_ATTR
    
    
    config KERNEL_DEVMEM
    	bool "/dev/mem virtual device support"
    	help
    	  Say Y here if you want to support the /dev/mem device.
    	  The /dev/mem device is used to access areas of physical
    	  memory.
    
    config KERNEL_DEVKMEM
    	bool "/dev/kmem virtual device support"
    	help
    	  Say Y here if you want to support the /dev/kmem device. The
    	  /dev/kmem device is rarely used, but can be used for certain
    	  kind of kernel debugging operations.
    
    config KERNEL_SQUASHFS_FRAGMENT_CACHE_SIZE
    	int "Number of squashfs fragments cached"
    	default 2 if (SMALL_FLASH && !LOW_MEMORY_FOOTPRINT)
    	default 3
    
    
    config KERNEL_SQUASHFS_XATTR
    	bool "Squashfs XATTR support"
    
    
    Josh Soref's avatar
    Josh Soref committed
    # compile optimization setting
    
    #
    choice
    	prompt "Compiler optimization level"
    	default KERNEL_CC_OPTIMIZE_FOR_SIZE if SMALL_FLASH
    
    config KERNEL_CC_OPTIMIZE_FOR_PERFORMANCE
    	bool "Optimize for performance"
    	help
    	  This is the default optimization level for the kernel, building
    	  with the "-O2" compiler flag for best performance and most
    	  helpful compile-time warnings.
    
    config KERNEL_CC_OPTIMIZE_FOR_SIZE
    	bool "Optimize for size"
    	help
    	  Enabling this option will pass "-Os" instead of "-O2" to
    	  your compiler resulting in a smaller kernel.
    
    endchoice
    
    
    config KERNEL_AUDIT
    	bool "Auditing support"
    
    config KERNEL_SECURITY
    	bool "Enable different security models"
    
    config KERNEL_SECURITY_NETWORK
    	bool "Socket and Networking Security Hooks"
    	select KERNEL_SECURITY
    
    config KERNEL_SECURITY_SELINUX
    	bool "NSA SELinux Support"
    	select KERNEL_SECURITY_NETWORK
    	select KERNEL_AUDIT
    
    config KERNEL_SECURITY_SELINUX_BOOTPARAM
    	bool "NSA SELinux boot parameter"
    	depends on KERNEL_SECURITY_SELINUX
    
    	default y
    
    
    config KERNEL_SECURITY_SELINUX_DISABLE
    	bool "NSA SELinux runtime disable"
    	depends on KERNEL_SECURITY_SELINUX
    
    config KERNEL_SECURITY_SELINUX_DEVELOP
    	bool "NSA SELinux Development Support"
    	depends on KERNEL_SECURITY_SELINUX
    
    	default y
    
    config KERNEL_SECURITY_SELINUX_SIDTAB_HASH_BITS
    	int
    	depends on KERNEL_SECURITY_SELINUX
    	default 9
    
    config KERNEL_SECURITY_SELINUX_SID2STR_CACHE_SIZE
    	int
    	depends on KERNEL_SECURITY_SELINUX
    	default 256
    
    
    config KERNEL_LSM
    	string
    	default "lockdown,yama,loadpin,safesetid,integrity,selinux"
    
    	depends on KERNEL_SECURITY_SELINUX
    
    config KERNEL_EXT4_FS_SECURITY
    	bool "Ext4 Security Labels"
    
    config KERNEL_F2FS_FS_SECURITY
    	bool "F2FS Security Labels"
    
    config KERNEL_UBIFS_FS_SECURITY
    	bool "UBIFS Security Labels"
    
    config KERNEL_JFFS2_FS_SECURITY
    	bool "JFFS2 Security Labels"
    
    
    config KERNEL_WERROR
    	bool "Compile the kernel with warnings as errors"
    	help
    	  A kernel build should not cause any compiler warnings, and this
    	  enables the '-Werror' (for C) and '-Dwarnings' (for Rust) flags
    	  to enforce that rule by default. Certain warnings from other tools
    	  such as the linker may be upgraded to errors with this option as
    	  well.
    
    	  However, if you have a new (or very old) compiler or linker with odd
    	  and unusual warnings, or you have some architecture with problems,
    	  you may need to disable this config option in order to
    	  successfully build the kernel.