diff options
Diffstat (limited to 'arch/x86/Kconfig')
| -rw-r--r-- | arch/x86/Kconfig | 32 |
1 files changed, 18 insertions, 14 deletions
diff --git a/arch/x86/Kconfig b/arch/x86/Kconfig index 73f7fe8fd4d1..d6218e6c9824 100644 --- a/arch/x86/Kconfig +++ b/arch/x86/Kconfig | |||
| @@ -133,7 +133,7 @@ config ARCH_HAS_CACHE_LINE_SIZE | |||
| 133 | def_bool y | 133 | def_bool y |
| 134 | 134 | ||
| 135 | config HAVE_SETUP_PER_CPU_AREA | 135 | config HAVE_SETUP_PER_CPU_AREA |
| 136 | def_bool X86_64_SMP || (X86_SMP && !X86_VOYAGER) | 136 | def_bool y |
| 137 | 137 | ||
| 138 | config HAVE_CPUMASK_OF_CPU_MAP | 138 | config HAVE_CPUMASK_OF_CPU_MAP |
| 139 | def_bool X86_64_SMP | 139 | def_bool X86_64_SMP |
| @@ -391,6 +391,13 @@ config X86_RDC321X | |||
| 391 | as R-8610-(G). | 391 | as R-8610-(G). |
| 392 | If you don't have one of these chips, you should say N here. | 392 | If you don't have one of these chips, you should say N here. |
| 393 | 393 | ||
| 394 | config X86_UV | ||
| 395 | bool "SGI Ultraviolet" | ||
| 396 | depends on X86_64 | ||
| 397 | help | ||
| 398 | This option is needed in order to support SGI Ultraviolet systems. | ||
| 399 | If you don't have one of these, you should say N here. | ||
| 400 | |||
| 394 | config SCHED_OMIT_FRAME_POINTER | 401 | config SCHED_OMIT_FRAME_POINTER |
| 395 | def_bool y | 402 | def_bool y |
| 396 | prompt "Single-depth WCHAN output" | 403 | prompt "Single-depth WCHAN output" |
| @@ -1340,13 +1347,17 @@ config SECCOMP | |||
| 1340 | 1347 | ||
| 1341 | If unsure, say Y. Only embedded should say N here. | 1348 | If unsure, say Y. Only embedded should say N here. |
| 1342 | 1349 | ||
| 1350 | config CC_STACKPROTECTOR_ALL | ||
| 1351 | bool | ||
| 1352 | |||
| 1343 | config CC_STACKPROTECTOR | 1353 | config CC_STACKPROTECTOR |
| 1344 | bool "Enable -fstack-protector buffer overflow detection (EXPERIMENTAL)" | 1354 | bool "Enable -fstack-protector buffer overflow detection (EXPERIMENTAL)" |
| 1345 | depends on X86_64 && EXPERIMENTAL && BROKEN | 1355 | depends on X86_64 |
| 1356 | select CC_STACKPROTECTOR_ALL | ||
| 1346 | help | 1357 | help |
| 1347 | This option turns on the -fstack-protector GCC feature. This | 1358 | This option turns on the -fstack-protector GCC feature. This |
| 1348 | feature puts, at the beginning of critical functions, a canary | 1359 | feature puts, at the beginning of functions, a canary value on |
| 1349 | value on the stack just before the return address, and validates | 1360 | the stack just before the return address, and validates |
| 1350 | the value just before actually returning. Stack based buffer | 1361 | the value just before actually returning. Stack based buffer |
| 1351 | overflows (that need to overwrite this return address) now also | 1362 | overflows (that need to overwrite this return address) now also |
| 1352 | overwrite the canary, which gets detected and the attack is then | 1363 | overwrite the canary, which gets detected and the attack is then |
| @@ -1354,15 +1365,8 @@ config CC_STACKPROTECTOR | |||
| 1354 | 1365 | ||
| 1355 | This feature requires gcc version 4.2 or above, or a distribution | 1366 | This feature requires gcc version 4.2 or above, or a distribution |
| 1356 | gcc with the feature backported. Older versions are automatically | 1367 | gcc with the feature backported. Older versions are automatically |
| 1357 | detected and for those versions, this configuration option is ignored. | 1368 | detected and for those versions, this configuration option is |
| 1358 | 1369 | ignored. (and a warning is printed during bootup) | |
| 1359 | config CC_STACKPROTECTOR_ALL | ||
| 1360 | bool "Use stack-protector for all functions" | ||
| 1361 | depends on CC_STACKPROTECTOR | ||
| 1362 | help | ||
| 1363 | Normally, GCC only inserts the canary value protection for | ||
| 1364 | functions that use large-ish on-stack buffers. By enabling | ||
| 1365 | this option, GCC will be asked to do this for ALL functions. | ||
| 1366 | 1370 | ||
| 1367 | source kernel/Kconfig.hz | 1371 | source kernel/Kconfig.hz |
| 1368 | 1372 | ||
