]> git.saurik.com Git - apple/xnu.git/blame - config/MASTER
xnu-7195.101.1.tar.gz
[apple/xnu.git] / config / MASTER
CommitLineData
1c79356b
A
1#
2# Mach Operating System
3# Copyright (c) 1986 Carnegie-Mellon University
d9a64523 4# Copyright 2001-2018 Apple Inc.
fe8ab488 5#
1c79356b
A
6# All rights reserved. The CMU software License Agreement
7# specifies the terms and conditions for use and redistribution.
cb323159 8#
1c79356b
A
9#######################################################################
10#
11# Master machine independent configuration file.
12#
13# Specific configuration files are created based on this and
14# the machine specific master file using the doconf script.
15#
16# Any changes to the master configuration files will affect all
17# other configuration files based upon it.
18#
19#######################################################################
20#
21# To build a configuration, execute "doconf <configuration>."
22# Configurations are specified in the "Configurations:" section
23# of the MASTER and MASTER.* files as follows:
24#
25# <configuration> = [ <attribute0> <attribute1> ... <attributeN> ]
26#
27# Lines in the MASTER and MASTER.* files are selected based on
28# the attribute selector list, found in a comment at the end of
29# the line. This is a list of attributes separated by commas.
30# The "!" operator selects the line if none of the attributes are
31# specified.
32#
33# For example:
34#
35# <foo,bar> selects a line if "foo" or "bar" are specified.
36# <!foo,bar> selects a line if neither "foo" nor "bar" is
37# specified.
38#
39# Lines with no attributes specified are selected for all
40# configurations.
41#
42#######################################################################
43#
1c79356b
A
44# SYSTEM SIZE CONFIGURATION (select exactly one)
45#
46# xlarge = extra large scale system configuration
47# large = large scale system configuration
48# medium = medium scale system configuration
49# small = small scale system configuration
50# xsmall = extra small scale system configuration
cb323159 51# bsmall = special extra small scale system configuration
1c79356b
A
52#
53#######################################################################
1c79356b 54#
1c79356b 55
3e170ce0 56options INET # # <inet>
1c79356b
A
57options HW_AST # Hardware ast support # <hw_ast>
58options HW_FOOTPRINT # Cache footprint support # <hw_foot>
2d21ac55 59
1c79356b 60options MACH # Standard Mach features # <mach>
1c79356b 61options MACH_COMPAT # Vendor syscall compatibility # <mach>
1c79356b 62options MACH_FASTLINK # Fast symbolic links
1c79356b
A
63options MACH_HOST # Mach host (resource alloc.) # <host>
64options MACH_IPC_COMPAT # Enable old IPC interface # <ipc_compat>
1c79356b 65options MACH_IPC_TEST # Testing code/printfs # <ipc_test>
39037602 66options MACH_FLIPC # Fast-Local IPC # <mach_flipc>
1c79356b
A
67options MACH_NP # Mach IPC support # <np>
68options MACH_NBC # No buffer cache # <nbc>
1c79356b
A
69options MACH_NET # Fast network access # <mach_net>
70options MACH_XP # external pager support # <xp>
cb323159 71options NO_DIRECT_RPC # for untyped mig servers #
1c79356b 72options LOOP # loopback support # <loop>
1c79356b 73options VLAN # # <vlan>
cb323159 74options SIXLOWPAN # 6LoWPAN support # <sixlowpan>
91447636 75options BOND # # <bond>
5ba3f43e 76options IF_FAKE # # <if_fake>
cb323159 77options IF_HEADLESS # # <if_headless>
fe8ab488 78options AH_ALL_CRYPTO # AH all crypto algs # <ah_all_crypto>
b0d623f7 79options PF # Packet Filter # <pf>
3e170ce0 80options PF_ECN # PF use ECN marking # <pf_ecn>
b0d623f7 81options PFLOG # PF log interface # <pflog>
39236c6e 82options MEASURE_BW # interface bandwidth measurement # <measure_bw>
91447636 83options DUMMYNET # dummynet support # <dummynet>
2d21ac55 84options TRAFFIC_MGT # traffic management support # <traffic_mgt>
1c79356b 85options MULTICAST # Internet Protocol Class-D $
9bccf70c 86options TCPDEBUG # TCP debug # <tcpdebug>
9bccf70c 87options ICMP_BANDLIM # ICMP bandwidth limiting sysctl
2d21ac55 88options IFNET_INPUT_SANITY_CHK # allow dlil/ifnet input sanity check # <ifnet_input_chk>
39236c6e
A
89options MULTIPATH # Multipath domain # <multipath>
90options MPTCP # Multipath TCP # <mptcp>
3e170ce0
A
91options SYSV_SEM # SVID semaphores # <sysv_sem>
92options SYSV_MSG # SVID messages # <sysv_msg>
93options SYSV_SHM # SVID shared mem # <sysv_shm>
94options PSYNCH # pthread synch # <psynch>
39236c6e 95options FLOW_DIVERT # <flow_divert>
fe8ab488
A
96options NECP # <necp>
97options CONTENT_FILTER # # <content_filter>
98options PACKET_MANGLER # # <packet_mangler>
cb323159 99options SIXLOWPAN # # <sixlowpan>
2d21ac55 100# secure_kernel - secure kernel from user programs
cb323159 101options SECURE_KERNEL # <secure_kernel>
1c79356b 102
b0d623f7
A
103options OLD_SEMWAIT_SIGNAL # old semwait_signal handler
104
1c79356b 105#
cb323159 106# 4.4 general kernel
1c79356b 107#
f427ee49 108options SOCKETS # socket support # <inet>
3e170ce0 109options DIAGNOSTIC # diagnostics # <diagnostic>
fe8ab488 110options PROFILE # kernel profiling # <profile>
2d21ac55 111options SENDFILE # sendfile # <sendfile>
f427ee49 112options NETWORKING # networking layer # <inet>
2d21ac55
A
113options CONFIG_FSE # file system events # <config_fse>
114options CONFIG_IMAGEBOOT # local image boot # <config_imageboot>
cb323159 115options CONFIG_LOCKERBOOT # locker boot # <config_lockerboot>
2d21ac55 116options CONFIG_MBUF_JUMBO # jumbo cluster pool # <config_mbuf_jumbo>
cb323159
A
117options CONFIG_IMAGEBOOT_IMG4 # authenticate image with AppleImage4 # <config_imageboot_img4>
118options CONFIG_IMAGEBOOT_CHUNKLIST # authenticate image with a chunk list # <config_imageboot_chunklist>
593a1d5f
A
119
120options CONFIG_WORKQUEUE # <config_workqueue>
d9a64523 121options CONFIG_WORKLOOP_DEBUG # <config_workloop_debug>
1c79356b
A
122
123#
cb323159 124# 4.4 filesystems
1c79356b 125#
3e170ce0 126options MOCKFS # Boot from an executable # <mockfs>
1c79356b 127options FIFO # fifo support # <fifo>
1c79356b 128options FDESC # fdesc_fs support # <fdesc>
1c79356b 129options DEVFS # devfs support # <devfs>
490019cf 130options ROUTEFS # routefs support # <routefs>
39037602 131options NULLFS # nullfs support # <nullfs>
f427ee49 132options BINDFS # bindfs support # <bindfs>
39037602 133options FS_COMPRESSION # fs compression # <fs_compression>
3e170ce0 134options CONFIG_DEV_KMEM # /dev/kmem device for reading KVA # <config_dev_kmem>
2d21ac55
A
135
136#
137# file system features
138#
139options QUOTA # file system quotas # <quota>
2d21ac55 140options NAMEDSTREAMS # named stream vnop support # <namedstreams>
39236c6e 141options CONFIG_APPLEDOUBLE # apple double support # <config_appledouble>
2d21ac55 142options CONFIG_VOLFS # volfs path support (legacy) # <config_volfs>
b7266188 143options CONFIG_IMGSRC_ACCESS # source of imageboot dmg # <config_imgsrc_access>
6d2010ae 144options CONFIG_TRIGGERS # trigger vnodes # <config_triggers>
316670eb
A
145options CONFIG_EXT_RESOLVER # e.g. memberd # <config_ext_resolver>
146options CONFIG_SEARCHFS # searchfs syscall support # <config_searchfs>
813fb2f6 147options CONFIG_MNT_SUID # allow suid binaries # <config_mnt_suid>
d9a64523 148options CONFIG_MNT_ROOTSNAP # allow rooting from snapshot # <config_mnt_rootsnap>
cb323159
A
149options CONFIG_ROSV_STARTUP # allow read-only system volume startup # <config_rosv_startup>
150options CONFIG_FIRMLINKS # support "firmlinks" # <config_firmlinks>
151options CONFIG_MOUNT_VM # mount VM volume on startup # <config_mount_vm>
f427ee49 152options CONFIG_MOUNT_PREBOOTRECOVERY # mount Preboot and/or Recovery volume on startup # <config_mount_prebootrecovery>
cb323159 153options CONFIG_DATALESS_FILES # support dataless file materialization # <config_dataless_files>
f427ee49 154options CONFIG_BASESYSTEMROOT # mount BaseSystem as initial root filesystem on some kinds of startup # <config_basesystemroot>
1c79356b
A
155
156#
157# NFS support
158#
2d21ac55
A
159options NFSCLIENT # Be an NFS client # <nfsclient>
160options NFSSERVER # Be an NFS server # <nfsserver>
cb323159
A
161options CONFIG_NFS_GSS # Support NFS GSSAPI # <config_nfs_gss>
162options CONFIG_NFS4 # Use NFSv4 # <config_nfs4>
163options CONFIG_NETBOOT # network booting (requires NFSCLIENT) # <config_netboot>
1c79356b 164
1c79356b
A
165#
166# Machine Independent Apple Features
167#
3e170ce0 168profile # build a profiling kernel # <profile>
1c79356b 169
cb323159 170#
9bccf70c 171# IPv6 Support
cb323159 172#
3e170ce0
A
173options IPSEC # IP security # <ipsec>
174options IPSEC_ESP # IP security # <ipsec>
9bccf70c 175
3e170ce0
A
176pseudo-device gif 1 # <gif>
177pseudo-device dummy 2 # <dummy>
178pseudo-device stf 1 # <stf>
9bccf70c 179
3e170ce0
A
180options CRYPTO # <ipsec,crypto>
181options CRYPTO_SHA2 # <crypto_sha2>
182options ENCRYPTED_SWAP # <encrypted_swap>
2d21ac55 183
d9a64523
A
184options CONFIG_IMG4 # <config_img4>
185
3e170ce0 186options ZLIB # inflate/deflate support # <zlib>
cb323159 187options ZLIBC # inflate/deflate support # <zlibc>
1c79356b 188
3e170ce0 189options IF_BRIDGE # <if_bridge>
b7266188 190
2d21ac55 191#
cb323159 192# configurable kernel event related resources
2d21ac55
A
193#
194options CONFIG_KN_HASHSIZE=64 # <medium,large,xlarge>
195options CONFIG_KN_HASHSIZE=48 # <small,xsmall>
196options CONFIG_KN_HASHSIZE=20 # <bsmall>
197
198#
cb323159
A
199# configurable vfs related resources
200# CONFIG_VNODES - used to pre allocate vnode related resources
2d21ac55
A
201# CONFIG_NC_HASH - name cache hash table allocation
202# CONFIG_VFS_NAMES - name strings
203#
cb323159
A
204# 263168 magic number for medium CONFIG_VNODES is based on memory
205# Number vnodes is (memsize/64k) + 1024
2d21ac55 206# This is the calculation that is used by launchd in tiger
cb323159 207# we are clipping the max based on 16G
2d21ac55
A
208# ie ((16*1024*1024*1024)/(64 *1024)) + 1024 = 263168;
209
210options CONFIG_VNODES=263168 # <large,xlarge>
211options CONFIG_VNODES=263168 # <medium>
212options CONFIG_VNODES=10240 # <small>
3e170ce0 213options CONFIG_VNODES=750 # <bsmall>
2d21ac55 214
2d21ac55
A
215options CONFIG_NC_HASH=5120 # <large,xlarge>
216options CONFIG_NC_HASH=4096 # <medium>
217options CONFIG_NC_HASH=2048 # <small,xsmall>
218options CONFIG_NC_HASH=1024 # <bsmall>
219
220options CONFIG_VFS_NAMES=5120 # <large,xlarge>
221options CONFIG_VFS_NAMES=4096 # <medium>
222options CONFIG_VFS_NAMES=3072 # <small,xsmall>
223options CONFIG_VFS_NAMES=2048 # <bsmall>
224
b7266188
A
225options CONFIG_MAX_CLUSTERS=8 # <xlarge,large,medium>
226options CONFIG_MAX_CLUSTERS=4 # <small,xsmall,bsmall>
227
2d21ac55 228#
cb323159 229# configurable options for minumum number of buffers for kernel memory
2d21ac55
A
230#
231options CONFIG_MIN_NBUF=256 # <medium,large,xlarge>
232options CONFIG_MIN_NBUF=128 # <small>
233options CONFIG_MIN_NBUF=80 # <xsmall>
234options CONFIG_MIN_NBUF=64 # <bsmall>
235
236options CONFIG_MIN_NIOBUF=128 # <medium,large,xlarge>
237options CONFIG_MIN_NIOBUF=64 # <xsmall,small>
238options CONFIG_MIN_NIOBUF=32 # <bsmall>
239
240#
241# set maximum space used for packet buffers
242#
3e170ce0
A
243options CONFIG_NMBCLUSTERS="((1024 * 1024) / MCLBYTES)" # <large,xlarge>
244options CONFIG_NMBCLUSTERS="((1024 * 512) / MCLBYTES)" # <medium>
245options CONFIG_NMBCLUSTERS="((1024 * 256) / MCLBYTES)" # <bsmall,xsmall,small>
2d21ac55
A
246
247#
248# Configure size of TCP hash table
249#
250options CONFIG_TCBHASHSIZE=4096 # <medium,large,xlarge>
251options CONFIG_TCBHASHSIZE=128 # <xsmall,small,bsmall>
252
316670eb
A
253#
254# Configure bandwidth limiting sysctl
255#
256options CONFIG_ICMP_BANDLIM=250 # <medium,large,xlarge>
257options CONFIG_ICMP_BANDLIM=50 # <xsmall,small,bsmall>
258
2d21ac55 259#
cb323159 260# configurable async IO options
2d21ac55
A
261# CONFIG_AIO_MAX - system wide limit of async IO requests.
262# CONFIG_AIO_PROCESS_MAX - process limit of async IO requests.
263# CONFIG_AIO_THREAD_COUNT - number of async IO worker threads created.
264#
3e170ce0
A
265options CONFIG_AIO_MAX=360 # <xlarge>
266options CONFIG_AIO_MAX=180 # <large>
2d21ac55
A
267options CONFIG_AIO_MAX=90 # <medium>
268options CONFIG_AIO_MAX=45 # <small>
269options CONFIG_AIO_MAX=20 # <xsmall>
270options CONFIG_AIO_MAX=10 # <bsmall>
271
272options CONFIG_AIO_PROCESS_MAX=64 # <xlarge>
273options CONFIG_AIO_PROCESS_MAX=32 # <large>
274options CONFIG_AIO_PROCESS_MAX=16 # <medium>
275options CONFIG_AIO_PROCESS_MAX=12 # <small>
276options CONFIG_AIO_PROCESS_MAX=8 # <xsmall>
277options CONFIG_AIO_PROCESS_MAX=4 # <bsmall>
278
3e170ce0 279options CONFIG_AIO_THREAD_COUNT=16 # <xlarge>
2d21ac55
A
280options CONFIG_AIO_THREAD_COUNT=8 # <large>
281options CONFIG_AIO_THREAD_COUNT=4 # <medium>
282options CONFIG_AIO_THREAD_COUNT=3 # <small>
283options CONFIG_AIO_THREAD_COUNT=2 # <xsmall,bsmall>
284
3e170ce0
A
285options CONFIG_MAXVIFS=32 # <medium,large,xlarge>
286options CONFIG_MAXVIFS=16 # <small,xsmall>
287options CONFIG_MAXVIFS=2 # <bsmall>
2d21ac55
A
288
289options CONFIG_MFCTBLSIZ=256 # <medium,large,xlarge>
290options CONFIG_MFCTBLSIZ=128 # <small,xsmall>
291options CONFIG_MFCTBLSIZ=16 # <bsmall>
292
6d2010ae
A
293#
294# configurable kernel message buffer size
295#
c3c9b80d
A
296options CONFIG_MSG_BSIZE_REL=16384 # <msgb_small>
297options CONFIG_MSG_BSIZE_DEV=131072 # <msgb_small>
298options CONFIG_MSG_BSIZE_REL=131072 # <msgb_large>
f427ee49 299options CONFIG_MSG_BSIZE_DEV=131072 # <msgb_large>
5ba3f43e
A
300options CONFIG_MSG_BSIZE=CONFIG_MSG_BSIZE_REL # <!development,debug>
301options CONFIG_MSG_BSIZE=CONFIG_MSG_BSIZE_DEV # <development,debug>
6d2010ae 302
3e170ce0
A
303#
304# maximum size of the per-process Mach IPC table
305#
306options CONFIG_IPC_TABLE_ENTRIES_STEPS=64 # 137898 entries # <bsmall,small,xsmall>
307options CONFIG_IPC_TABLE_ENTRIES_STEPS=256 # 300714 entries # <medium,large,xlarge>
308
c3c9b80d
A
309#
310# maximum copyout size for IPC debugging tools
311#
312options CONFIG_IPC_KERNEL_MAP_SIZE=16 # 16M # <bsmall,small,xsmall>
313options CONFIG_IPC_KERNEL_MAP_SIZE=64 # 64M # <medium,large,xlarge>
314
2d21ac55
A
315#
316# configurable kernel - use these options to strip strings from panic
317# and printf calls.
2d21ac55
A
318# no_printf_str - saves around 45K of kernel footprint.
319#
2d21ac55
A
320options CONFIG_NO_PRINTF_STRINGS # <no_printf_str>
321options CONFIG_NO_KPRINTF_STRINGS # <no_kprintf_str>
322
f427ee49
A
323# support vsprintf (deprecated in favor of vsnprintf)
324options CONFIG_VSPRINTF # <vsprintf>
325
d9a64523
A
326#
327# configurable kernel - general switch to say we are building for an
328# embedded device
329#
330options CONFIG_EMBEDDED # <config_embedded>
331
f427ee49
A
332options CONFIG_ARROW # <config_arrow>
333
fe8ab488 334
2a1bd2d3
A
335options NOS_ARM_ASM # <nos_arm_asm>
336options NOS_ARM_PMAP # <nos_arm_pmap>
337
b7266188
A
338# support dynamic signing of code
339#
340options CONFIG_DYNAMIC_CODE_SIGNING # <dynamic_codesigning>
341
cb323159 342# enforce library validation on all processes.
fe8ab488
A
343#
344options CONFIG_ENFORCE_LIBRARY_VALIDATION # <config_library_validation>
345
f427ee49
A
346# support loading a second static trust cache
347#
348options CONFIG_SECOND_STATIC_TRUST_CACHE # <second_static_trust_cache>
349
350# support supplemental signatures
351#
352options CONFIG_SUPPLEMENTAL_SIGNATURES # <config_supplemental_signatures>
353
fe8ab488
A
354#
355# code decryption... used on embedded for app protection, DSMOS on desktop
356#
3e170ce0 357options CONFIG_CODE_DECRYPTION # <config_code_decryption>
fe8ab488 358
d1ecb069
A
359#
360# User Content Protection, used on embedded
361#
3e170ce0 362options CONFIG_PROTECT # <config_protect>
d1ecb069 363
d9a64523
A
364#allow write-protection of key page
365options CONFIG_KEYPAGE_WP # <config_keypage_wp>
366
cb323159
A
367#
368# allow vm_pageout_scan to dynamically adjust its priority based on priorities of waiters
369#
370options CONFIG_VPS_DYNAMIC_PRIO # <vps_dynamic_prio>
371
6d2010ae 372#
316670eb
A
373# enable per-process memory priority tracking
374#
3e170ce0 375options CONFIG_MEMORYSTATUS # <memorystatus>
316670eb 376
f427ee49
A
377#
378# enable per-process dirty-status tracking
379#
380options CONFIG_DIRTYSTATUS_TRACKING # <dirtystatus_tracking>
316670eb
A
381#
382# enable jetsam - used on embedded
383#
3e170ce0
A
384options CONFIG_JETSAM # <jetsam>
385
39037602
A
386#
387# enable new link table implementation stats/debugging
388# (adds mesaureable overhead)
389#
390options CONFIG_LTABLE_STATS # <config_ltable_stats>
391options CONFIG_LTABLE_DEBUG # <config_ltable_debug>
392
3e170ce0
A
393#
394# enable new wait queue implementation stats / debugging
395#
396options CONFIG_WAITQ_STATS # <config_waitq_stats>
397options CONFIG_WAITQ_DEBUG # <config_waitq_debug>
316670eb
A
398
399#
400# enable freezing of suspended processes - used on embedded
6d2010ae 401#
3e170ce0 402options CONFIG_FREEZE # <freeze>
6d2010ae 403
3e170ce0 404options CHECK_CS_VALIDATION_BITMAP # <config_cs_validation_bitmap>
593a1d5f 405
f427ee49
A
406#
407# enable physical writes accounting
408#
409options CONFIG_PHYS_WRITE_ACCT # <phys_write_acct>
410
fe8ab488
A
411#
412# enable detectiion of file cache thrashing - used on platforms with
413# dynamic VM compression enabled
414#
3e170ce0 415options CONFIG_PHANTOM_CACHE # <phantom_cache>
fe8ab488 416
316670eb
A
417#
418# memory pressure event support
316670eb
A
419#
420options VM_PRESSURE_EVENTS # <vm_pressure_events>
421
39037602
A
422options CONFIG_SECLUDED_MEMORY # <config_secluded_memory>
423
424options CONFIG_BACKGROUND_QUEUE # <config_background_queue>
425
d9a64523
A
426#
427# Ledger features
428#
429options CONFIG_LEDGER_INTERVAL_MAX # <config_ledger_interval_max>
430
fe8ab488
A
431#
432# I/O Scheduling
433#
434options CONFIG_IOSCHED # <config_iosched>
435
39037602
A
436#
437# Accounting for I/O usage
438#
439options CONFIG_IO_ACCOUNTING # <config_io_accounting>
440
39236c6e
A
441#
442# Enable inheritance of importance through specially marked mach ports and for file locks
443# For now debug is enabled wherever inheritance is
444#
445options IMPORTANCE_INHERITANCE # <importance_inheritance>
5ba3f43e
A
446options IMPORTANCE_TRACE # <importance_trace>
447options IMPORTANCE_DEBUG # <importance_debug>
39236c6e 448
3e170ce0 449options CONFIG_TELEMETRY # <config_telemetry>
39236c6e
A
450
451options CONFIG_PROC_UUID_POLICY # <config_proc_uuid_policy>
452
fe8ab488
A
453#
454# ECC data logging
cb323159 455#
3e170ce0 456options CONFIG_ECC_LOGGING # <config_ecc_logging>
fe8ab488 457
39037602
A
458#
459# Application core dumps
460#
461options CONFIG_COREDUMP # <config_coredump>
462
5ba3f43e
A
463#
464# Vnode guards
465#
466options CONFIG_VNGUARD # <config_vnguard>
467
1c79356b
A
468#
469# Ethernet (ARP)
470#
f427ee49 471pseudo-device ether # <networking,inet>
1c79356b
A
472#
473# Network loopback device
474#
f427ee49 475pseudo-device loop # <networking,inet>
1c79356b
A
476#
477# UCB pseudo terminal service
478#
2d21ac55
A
479pseudo-device pty 512 init pty_init # <xlarge>
480pseudo-device pty 256 init pty_init # <large>
481pseudo-device pty 128 init pty_init # <medium>
482pseudo-device pty 48 init pty_init # <small>
483pseudo-device pty 16 init pty_init # <xsmall>
484pseudo-device pty 8 init pty_init # <bsmall>
485#
486# Cloning pseudo terminal service
487#
488pseudo-device ptmx 1 init ptmx_init
9bccf70c
A
489
490#
491# vnode device
2d21ac55 492#
fe8ab488 493pseudo-device vndevice 4 init vndevice_init # <development,debug>
9bccf70c 494
55e303ae
A
495#
496# memory device
497pseudo-device mdevdevice 1 init mdevinit
498
9bccf70c 499#
1c79356b
A
500#
501# packet filter device
502#
f427ee49 503pseudo-device bpfilter 4 init bpf_init # <networking,inet>
1c79356b 504
91447636
A
505#
506# fsevents device
2d21ac55 507pseudo-device fsevents 1 init fsevents_init # <config_fse>
91447636 508
0b4e3aa0 509pseudo-device random 1 init random_init
2d21ac55
A
510pseudo-device dtrace 1 init dtrace_init # <config_dtrace>
511pseudo-device helper 1 init helper_init # <config_dtrace>
512pseudo-device lockstat 1 init lockstat_init # <config_dtrace>
0a7de745 513pseudo-device lockprof 1 init lockprof_init # <config_dtrace>
2d21ac55
A
514pseudo-device sdt 1 init sdt_init # <config_dtrace>
515pseudo-device systrace 1 init systrace_init # <config_dtrace>
516pseudo-device fbt 1 init fbt_init # <config_dtrace>
517pseudo-device profile_prvd 1 init profile_init # <config_dtrace>
fe8ab488 518
5ba3f43e 519
fe8ab488
A
520#
521# IOKit configuration options
522#
523
524options HIBERNATION # system hibernation # <hibernation>
3e170ce0
A
525options IOKITCPP # C++ implementation # <iokitcpp>
526options IOKITSTATS # IOKit statistics # <iokitstats>
527options IOTRACKING # IOKit tracking # <iotracking>
528options CONFIG_SLEEP # # <config_sleep>
f427ee49 529options CONFIG_MAX_THREADS=500 # IOConfigThread threads
3e170ce0
A
530options NO_KEXTD # <no_kextd>
531options NO_KERNEL_HID # <no_kernel_hid>
fe8ab488
A
532
533#
534# Libkern configuration options
535#
536
537options LIBKERNCPP # C++ implementation # <libkerncpp>
d9a64523 538options CONFIG_BLOCKS # Blocks runtime # <config_blocks>
fe8ab488
A
539options CONFIG_KXLD # kxld/runtime linking of kexts # <config_kxld>
540options CONFIG_KEC_FIPS # Kernel External Components for FIPS compliance (KEC_FIPS) # <config_kec_fips>
541
542# Note that when adding this config option to an architecture, one MUST
543# add the architecture to the preprocessor test at the beginning of
544# libkern/kmod/cplus_{start.c,stop.c}.
545options CONFIG_STATIC_CPPINIT # Static library initializes kext cpp runtime # <config_static_cppinit>
546
547#
548# libsa configuration options
549#
550
551# CONFIG_KEXT_BASEMENT - alloc post boot loaded kexts after prelinked kexts
552#
3e170ce0 553options CONFIG_KEXT_BASEMENT # # <config_kext_basement>
fe8ab488 554
490019cf
A
555#
556# Persona Management
557#
558options CONFIG_PERSONAS # Persona management # <config_personas>
559options PERSONA_DEBUG # Persona debugging # <persona_debug>
560
fe8ab488
A
561#
562# security configuration options
563#
564
3e170ce0 565options CONFIG_MACF # Mandatory Access Control Framework # <config_macf>
fe8ab488 566options CONFIG_MACF_SOCKET_SUBSET # MAC socket subest (no labels) # <config_macf>
3e170ce0 567#options CONFIG_MACF_DEBUG # debug # <config_macf>
fe8ab488 568
3e170ce0 569options CONFIG_AUDIT # Kernel auditing # <config_audit>
fe8ab488 570
cb323159 571options CONFIG_ARCADE # Arcade validation support # <config_arcade>
fe8ab488 572
f427ee49
A
573options CONFIG_SETUID # setuid/setgid support # <config_setuid>
574
575options CONFIG_SECURE_BSD_ROOT # secure BSD root # <config_secure_bsd_root>
576
577options CONFIG_KAS_INFO # kas_info support # <config_kas_info>
578
fe8ab488
A
579#
580# MACH configuration options.
581#
fe8ab488
A
582
583#
584# This defines configuration options that are normally used only during
585# kernel code development and debugging. They add run-time error checks or
586# statistics gathering, which will slow down the system
587#
588##########################################################
589#
590# MACH_ASSERT controls the assert() and ASSERT() macros, used to verify the
591# consistency of various algorithms in the kernel. The performance impact
592# of this option is significant.
593#
594options MACH_ASSERT # # <mach_assert>
595#
596# MACH_DEBUG enables the mach_debug_server, a message interface used to
597# retrieve or control various statistics. This interface may expose data
598# structures that would not normally be allowed outside the kernel, and
599# MUST NOT be enabled on a released configuration.
600# Other options here enable information retrieval for specific subsystems
601#
602options MACH_DEBUG # IPC debugging interface # <mdebug>
603options MACH_IPC_DEBUG # Enable IPC debugging calls # <ipc_debug>
3e170ce0 604options MACH_VM_DEBUG # # <debug>
fe8ab488
A
605#
606# MACH_MP_DEBUG control the possible dead locks that may occur by controlling
607# that IPL level has been raised down to SPL0 after some calls to
608# hardclock device driver.
609#
3e170ce0 610options MACH_MP_DEBUG # # <debug>
fe8ab488
A
611options CONFIG_ZLEAKS # Live zone leak debugging # <zleaks>
612
fe8ab488
A
613#
614# CONFIG_TASK_ZONE_INFO allows per-task zone information to be extracted
615# Primarily useful for xnu debug and development.
616#
617options CONFIG_TASK_ZONE_INFO # <task_zone_info>
618#
619# CONFIG_DEBUGGER_FOR_ZONE_INFO restricts zone info so that it is only
620# available when the kernel is being debugged.
621#
622options CONFIG_DEBUGGER_FOR_ZONE_INFO # <debugger_for_zone_info>
cb323159 623#
fe8ab488
A
624# MACH_LDEBUG controls the internal consistency checks and
625# data gathering in the locking package. This also enables a debug-only
626# version of simple-locks on uniprocessor machines. The code size and
627# performance impact of this option is significant.
cb323159 628#
fe8ab488
A
629options MACH_LDEBUG # # <debug>
630
631#
632# configuration option for full, partial, or no kernel debug event tracing
633#
634options KDEBUG # kernel tracing # <kdebug>
635options IST_KDEBUG # limited tracing # <ist_kdebug>
3e170ce0 636options NO_KDEBUG # no kernel tracing # <no_kdebug>
fe8ab488
A
637
638#
639# CONFIG_DTRACE enables code needed to support DTrace. Currently this is
640# only used for delivery of traps/interrupts to DTrace.
641#
3e170ce0 642options CONFIG_DTRACE # # <config_dtrace>
fe8ab488 643
0a7de745
A
644options LOCK_STATS # # <lock_stats>
645
fe8ab488
A
646# kernel performance tracing
647options KPERF # <kperf>
648options KPC # <kpc>
649
5ba3f43e 650
813fb2f6
A
651options PGO # <pgo>
652
fe8ab488 653# DEVELOPMENT define for development builds
3e170ce0 654options DEVELOPMENT # dev kernel # <development>
fe8ab488
A
655
656# DEBUG kernel
3e170ce0 657options DEBUG # general debugging code # <debug>
cb323159 658options CONFIG_NONFATAL_ASSERTS # non fatal asserts # <softasserts>
fe8ab488
A
659
660##########################################################
661#
662# This defines configuration options that are normally used only during
663# kernel code development and performance characterization. They add run-time
664# statistics gathering, which will slow down the system,
665#
666##########################################################
667#
668# MACH_IPC_STATS controls the collection of statistics in the MACH IPC
669# subsystem.
670#
671#options MACH_IPC_STATS
672#
673# MACH_CLUSTER_STATS controls the collection of various statistics concerning
674# the effectiveness and behavior of the clustered pageout and pagein
675# code.
676#
677#options MACH_CLUSTER_STATS
678
679options MACH_BSD # BSD subsystem on top of Mach # <mach_bsd>
680options IOKIT # # <iokit>
681
682#
cb323159 683# configurable kernel related resources (CONFIG_THREAD_MAX needs to stay in
fe8ab488
A
684# sync with bsd/conf/MASTER until we fix the config system... todo XXX
685#
686options CONFIG_THREAD_MAX=2560 # <medium,large,xlarge>
687options CONFIG_THREAD_MAX=1536 # <small,xsmall>
688options CONFIG_THREAD_MAX=1024 # <bsmall>
689
690options CONFIG_TASK_MAX=1024 # <medium,large,xlarge>
691options CONFIG_TASK_MAX=768 # <small,>
692options CONFIG_TASK_MAX=512 # <xsmall,bsmall>
693
0a7de745
A
694#
695# Minimum zone map size: 115 MB
696#
697options CONFIG_ZONE_MAP_MIN=120586240 # <xsmall,bsmall,small,medium,large,xlarge>
fe8ab488 698
cb323159
A
699# Sizes must be a power of two for the zhash to
700# be able to just mask off bits instead of mod
fe8ab488
A
701options CONFIG_ZLEAK_ALLOCATION_MAP_NUM=16384 #<medium,large,xlarge>
702options CONFIG_ZLEAK_ALLOCATION_MAP_NUM=8192 #<small,xsmall,bsmall>
703options CONFIG_ZLEAK_TRACE_MAP_NUM=8192 #<medium,large,xlarge>
704options CONFIG_ZLEAK_TRACE_MAP_NUM=4096 #<small,xsmall,bsmall>
705
706# vc_progress_white - make the progress gear white instead of black
707options CONFIG_VC_PROGRESS_WHITE # <vc_progress_white>
708
fe8ab488
A
709#
710# Timeshare scheduler implementations
711#
712options CONFIG_SCHED_TRADITIONAL # <config_sched_traditional>
713options CONFIG_SCHED_PROTO # <config_sched_proto>
714options CONFIG_SCHED_GRRR # <config_sched_grrr>
715options CONFIG_SCHED_GRRR_CORE # <config_sched_grrr>
716options CONFIG_SCHED_MULTIQ # <config_sched_multiq>
717options CONFIG_SCHED_TIMESHARE_CORE # <config_sched_traditional,config_sched_multiq>
cb323159 718options CONFIG_CLUTCH # <config_clutch>
f427ee49 719options CONFIG_SCHED_AUTO_JOIN # <config_sched_auto_join>
fe8ab488 720
3e170ce0
A
721options CONFIG_SCHED_IDLE_IN_PLACE # <config_sched_idle_in_place>
722options CONFIG_SCHED_SFI # <config_sched_sfi>
fe8ab488 723options CONFIG_GZALLOC # <config_gzalloc>
3e170ce0 724options CONFIG_SCHED_DEFERRED_AST # <config_sched_deferred_ast>
fe8ab488
A
725
726# Enable allocation of contiguous physical memory through vm_map_enter_cpm()
3e170ce0 727options VM_CPM # <vm_cpm>
fe8ab488 728
3e170ce0 729options CONFIG_SKIP_PRECISE_USER_KERNEL_TIME # <config_skip_precise_user_kernel_time>
fe8ab488
A
730
731#
732# Switch to disable cpu, wakeup and high memory watermark monitors
733#
3e170ce0 734options CONFIG_NOMONITORS # <config_nomonitors>
fe8ab488 735
3e170ce0
A
736options MACH_KDP # KDP # <mach_kdp>
737options CONFIG_SERIAL_KDP # KDP over serial # <config_serial_kdp>
fe8ab488
A
738options CONFIG_KDP_INTERACTIVE_DEBUGGING # <kdp_interactive_debugging>
739
f427ee49 740options CONFIG_TASKWATCH
c3c9b80d 741options CONFIG_USER_NOTIFICATION # <config_user_notification>
3e170ce0
A
742#
743# Kernel Power On Self Tests
744#
745options CONFIG_XNUPOST # <config_xnupost>
746
747#
748# Kernel proc reference instrumentation
749#
750options PROC_REF_DEBUG # <proc_ref_debug>
751
fe8ab488
A
752#
753# Kernel Voucher Attr Manager for Activity Trace
754#
3e170ce0 755options CONFIG_ATM # <config_atm>
fe8ab488 756
fe8ab488
A
757# Group related tasks together into coalitions
758options CONFIG_COALITIONS # <config_coalitions>
759
3e170ce0
A
760# Enable support for sysdiagnose notifications
761options CONFIG_SYSDIAGNOSE # <config_sysdiagnose>
762
fe8ab488 763# Configurable Security Restrictions
3e170ce0 764options CONFIG_CSR # <config_csr>
f427ee49 765options CONFIG_CSR_FROM_DT # <config_csr_from_dt>
fe8ab488 766
c3c9b80d
A
767# Enable collection of IO Compression statistics
768options CONFIG_IO_COMPRESSION_STATS # <config_io_compression_stats>
769
fe8ab488
A
770#
771# Console options
772#
773options SERIAL_CONSOLE # bi-directional serial over UART
774options VIDEO_CONSOLE # uni-directional output over framebuffer
775
776#
777# Syscall options
778#
779options CONFIG_REQUIRES_U32_MUNGING # incoming U32 argument structures must be munged to match U64 # <config_requires_u32_munging>
5ba3f43e
A
780
781#
782# copyout() instrumentation
783#
784options COPYOUT_SHIM # Shim for copyout memory analysis via kext #<copyout_shim>
785
0a7de745 786#
cb323159 787# Enable hardware correlation of mach absolute time
0a7de745
A
788# across intel/arm boundary
789options CONFIG_MACH_BRIDGE_SEND_TIME # # <config_mach_bridge_send_time>
790options CONFIG_MACH_BRIDGE_RECV_TIME # # <config_mach_bridge_recv_time>
527f9951
A
791
792#
793# Telemetry for 32-bit process launch
794#
795options CONFIG_32BIT_TELEMETRY # # <config_32bit_telemetry>
d9a64523
A
796
797options CONFIG_QUIESCE_COUNTER # Support for _COMM_PAGE_CPU_QUIESCENT_COUNTER # <config_quiesce_counter>
f427ee49 798options CONFIG_ARM_PFZ # Support for PFZ on ARM # <config_arm_pfz>
d9a64523 799
cb323159
A
800#
801# Sanitizers
802#
803options CONFIG_KASAN # <config_kasan>
804options CONFIG_UBSAN # <config_ubsan>
805options CONFIG_KSANCOV # <config_ksancov>
806
f427ee49
A
807# dark boot support
808options CONFIG_DARKBOOT # <config_darkboot>
809
810# support for processes delaying idle sleep for pending IO
811options CONFIG_DELAY_IDLE_SLEEP # <config_delay_idle_sleep>
812
813# support for storing a 64-bit user supplied value in the proc structure
814options CONFIG_PROC_UDATA_STORAGE # <config_proc_udata_storage>
815
cb323159 816pseudo-device ksancov 1 init ksancov_init_dev # <config_ksancov>
f427ee49
A
817
818# debug instrumentation to catch code that leaves interrupts masked
819# for an excessive period of time
820options INTERRUPT_MASKED_DEBUG # <interrupt_masked_debug>