diff options
Diffstat (limited to 'Documentation/sysctl/kernel.txt')
-rw-r--r-- | Documentation/sysctl/kernel.txt | 46 |
1 files changed, 33 insertions, 13 deletions
diff --git a/Documentation/sysctl/kernel.txt b/Documentation/sysctl/kernel.txt index 322a00bb99d9..3e5b63ebb821 100644 --- a/Documentation/sysctl/kernel.txt +++ b/Documentation/sysctl/kernel.txt | |||
@@ -19,6 +19,7 @@ Currently, these files might (depending on your configuration) | |||
19 | show up in /proc/sys/kernel: | 19 | show up in /proc/sys/kernel: |
20 | - acpi_video_flags | 20 | - acpi_video_flags |
21 | - acct | 21 | - acct |
22 | - callhome [ S390 only ] | ||
22 | - auto_msgmni | 23 | - auto_msgmni |
23 | - core_pattern | 24 | - core_pattern |
24 | - core_uses_pid | 25 | - core_uses_pid |
@@ -91,6 +92,21 @@ valid for 30 seconds. | |||
91 | 92 | ||
92 | ============================================================== | 93 | ============================================================== |
93 | 94 | ||
95 | callhome: | ||
96 | |||
97 | Controls the kernel's callhome behavior in case of a kernel panic. | ||
98 | |||
99 | The s390 hardware allows an operating system to send a notification | ||
100 | to a service organization (callhome) in case of an operating system panic. | ||
101 | |||
102 | When the value in this file is 0 (which is the default behavior) | ||
103 | nothing happens in case of a kernel panic. If this value is set to "1" | ||
104 | the complete kernel oops message is send to the IBM customer service | ||
105 | organization in case the mainframe the Linux operating system is running | ||
106 | on has a service contract with IBM. | ||
107 | |||
108 | ============================================================== | ||
109 | |||
94 | core_pattern: | 110 | core_pattern: |
95 | 111 | ||
96 | core_pattern is used to specify a core dumpfile pattern name. | 112 | core_pattern is used to specify a core dumpfile pattern name. |
@@ -303,25 +319,29 @@ This option can be used to select the type of process address | |||
303 | space randomization that is used in the system, for architectures | 319 | space randomization that is used in the system, for architectures |
304 | that support this feature. | 320 | that support this feature. |
305 | 321 | ||
306 | 0 - Turn the process address space randomization off by default. | 322 | 0 - Turn the process address space randomization off. This is the |
323 | default for architectures that do not support this feature anyways, | ||
324 | and kernels that are booted with the "norandmaps" parameter. | ||
307 | 325 | ||
308 | 1 - Make the addresses of mmap base, stack and VDSO page randomized. | 326 | 1 - Make the addresses of mmap base, stack and VDSO page randomized. |
309 | This, among other things, implies that shared libraries will be | 327 | This, among other things, implies that shared libraries will be |
310 | loaded to random addresses. Also for PIE-linked binaries, the location | 328 | loaded to random addresses. Also for PIE-linked binaries, the |
311 | of code start is randomized. | 329 | location of code start is randomized. This is the default if the |
330 | CONFIG_COMPAT_BRK option is enabled. | ||
312 | 331 | ||
313 | With heap randomization, the situation is a little bit more | 332 | 2 - Additionally enable heap randomization. This is the default if |
314 | complicated. | 333 | CONFIG_COMPAT_BRK is disabled. |
315 | There a few legacy applications out there (such as some ancient | 334 | |
335 | There are a few legacy applications out there (such as some ancient | ||
316 | versions of libc.so.5 from 1996) that assume that brk area starts | 336 | versions of libc.so.5 from 1996) that assume that brk area starts |
317 | just after the end of the code+bss. These applications break when | 337 | just after the end of the code+bss. These applications break when |
318 | start of the brk area is randomized. There are however no known | 338 | start of the brk area is randomized. There are however no known |
319 | non-legacy applications that would be broken this way, so for most | 339 | non-legacy applications that would be broken this way, so for most |
320 | systems it is safe to choose full randomization. However there is | 340 | systems it is safe to choose full randomization. |
321 | a CONFIG_COMPAT_BRK option for systems with ancient and/or broken | 341 | |
322 | binaries, that makes heap non-randomized, but keeps all other | 342 | Systems with ancient and/or broken binaries should be configured |
323 | parts of process address space randomized if randomize_va_space | 343 | with CONFIG_COMPAT_BRK enabled, which excludes the heap from process |
324 | sysctl is turned on. | 344 | address space randomization. |
325 | 345 | ||
326 | ============================================================== | 346 | ============================================================== |
327 | 347 | ||