diff options
Diffstat (limited to 'arch/x86/Kconfig')
-rw-r--r-- | arch/x86/Kconfig | 32 |
1 files changed, 18 insertions, 14 deletions
diff --git a/arch/x86/Kconfig b/arch/x86/Kconfig index 73f7fe8fd4d1..d6218e6c9824 100644 --- a/arch/x86/Kconfig +++ b/arch/x86/Kconfig | |||
@@ -133,7 +133,7 @@ config ARCH_HAS_CACHE_LINE_SIZE | |||
133 | def_bool y | 133 | def_bool y |
134 | 134 | ||
135 | config HAVE_SETUP_PER_CPU_AREA | 135 | config HAVE_SETUP_PER_CPU_AREA |
136 | def_bool X86_64_SMP || (X86_SMP && !X86_VOYAGER) | 136 | def_bool y |
137 | 137 | ||
138 | config HAVE_CPUMASK_OF_CPU_MAP | 138 | config HAVE_CPUMASK_OF_CPU_MAP |
139 | def_bool X86_64_SMP | 139 | def_bool X86_64_SMP |
@@ -391,6 +391,13 @@ config X86_RDC321X | |||
391 | as R-8610-(G). | 391 | as R-8610-(G). |
392 | If you don't have one of these chips, you should say N here. | 392 | If you don't have one of these chips, you should say N here. |
393 | 393 | ||
394 | config X86_UV | ||
395 | bool "SGI Ultraviolet" | ||
396 | depends on X86_64 | ||
397 | help | ||
398 | This option is needed in order to support SGI Ultraviolet systems. | ||
399 | If you don't have one of these, you should say N here. | ||
400 | |||
394 | config SCHED_OMIT_FRAME_POINTER | 401 | config SCHED_OMIT_FRAME_POINTER |
395 | def_bool y | 402 | def_bool y |
396 | prompt "Single-depth WCHAN output" | 403 | prompt "Single-depth WCHAN output" |
@@ -1340,13 +1347,17 @@ config SECCOMP | |||
1340 | 1347 | ||
1341 | If unsure, say Y. Only embedded should say N here. | 1348 | If unsure, say Y. Only embedded should say N here. |
1342 | 1349 | ||
1350 | config CC_STACKPROTECTOR_ALL | ||
1351 | bool | ||
1352 | |||
1343 | config CC_STACKPROTECTOR | 1353 | config CC_STACKPROTECTOR |
1344 | bool "Enable -fstack-protector buffer overflow detection (EXPERIMENTAL)" | 1354 | bool "Enable -fstack-protector buffer overflow detection (EXPERIMENTAL)" |
1345 | depends on X86_64 && EXPERIMENTAL && BROKEN | 1355 | depends on X86_64 |
1356 | select CC_STACKPROTECTOR_ALL | ||
1346 | help | 1357 | help |
1347 | This option turns on the -fstack-protector GCC feature. This | 1358 | This option turns on the -fstack-protector GCC feature. This |
1348 | feature puts, at the beginning of critical functions, a canary | 1359 | feature puts, at the beginning of functions, a canary value on |
1349 | value on the stack just before the return address, and validates | 1360 | the stack just before the return address, and validates |
1350 | the value just before actually returning. Stack based buffer | 1361 | the value just before actually returning. Stack based buffer |
1351 | overflows (that need to overwrite this return address) now also | 1362 | overflows (that need to overwrite this return address) now also |
1352 | overwrite the canary, which gets detected and the attack is then | 1363 | overwrite the canary, which gets detected and the attack is then |
@@ -1354,15 +1365,8 @@ config CC_STACKPROTECTOR | |||
1354 | 1365 | ||
1355 | This feature requires gcc version 4.2 or above, or a distribution | 1366 | This feature requires gcc version 4.2 or above, or a distribution |
1356 | gcc with the feature backported. Older versions are automatically | 1367 | gcc with the feature backported. Older versions are automatically |
1357 | detected and for those versions, this configuration option is ignored. | 1368 | detected and for those versions, this configuration option is |
1358 | 1369 | ignored. (and a warning is printed during bootup) | |
1359 | config CC_STACKPROTECTOR_ALL | ||
1360 | bool "Use stack-protector for all functions" | ||
1361 | depends on CC_STACKPROTECTOR | ||
1362 | help | ||
1363 | Normally, GCC only inserts the canary value protection for | ||
1364 | functions that use large-ish on-stack buffers. By enabling | ||
1365 | this option, GCC will be asked to do this for ALL functions. | ||
1366 | 1370 | ||
1367 | source kernel/Kconfig.hz | 1371 | source kernel/Kconfig.hz |
1368 | 1372 | ||