]>
Commit | Line | Data |
---|---|---|
1c79356b A |
1 | # |
2 | # Mach Operating System | |
3 | # Copyright (c) 1986 Carnegie-Mellon University | |
d9a64523 | 4 | # Copyright 2001-2018 Apple Inc. |
fe8ab488 | 5 | # |
1c79356b A |
6 | # All rights reserved. The CMU software License Agreement |
7 | # specifies the terms and conditions for use and redistribution. | |
cb323159 | 8 | # |
1c79356b A |
9 | ####################################################################### |
10 | # | |
11 | # Master machine independent configuration file. | |
12 | # | |
13 | # Specific configuration files are created based on this and | |
14 | # the machine specific master file using the doconf script. | |
15 | # | |
16 | # Any changes to the master configuration files will affect all | |
17 | # other configuration files based upon it. | |
18 | # | |
19 | ####################################################################### | |
20 | # | |
21 | # To build a configuration, execute "doconf <configuration>." | |
22 | # Configurations are specified in the "Configurations:" section | |
23 | # of the MASTER and MASTER.* files as follows: | |
24 | # | |
25 | # <configuration> = [ <attribute0> <attribute1> ... <attributeN> ] | |
26 | # | |
27 | # Lines in the MASTER and MASTER.* files are selected based on | |
28 | # the attribute selector list, found in a comment at the end of | |
29 | # the line. This is a list of attributes separated by commas. | |
30 | # The "!" operator selects the line if none of the attributes are | |
31 | # specified. | |
32 | # | |
33 | # For example: | |
34 | # | |
35 | # <foo,bar> selects a line if "foo" or "bar" are specified. | |
36 | # <!foo,bar> selects a line if neither "foo" nor "bar" is | |
37 | # specified. | |
38 | # | |
39 | # Lines with no attributes specified are selected for all | |
40 | # configurations. | |
41 | # | |
42 | ####################################################################### | |
43 | # | |
1c79356b A |
44 | # SYSTEM SIZE CONFIGURATION (select exactly one) |
45 | # | |
46 | # xlarge = extra large scale system configuration | |
47 | # large = large scale system configuration | |
48 | # medium = medium scale system configuration | |
49 | # small = small scale system configuration | |
50 | # xsmall = extra small scale system configuration | |
cb323159 | 51 | # bsmall = special extra small scale system configuration |
1c79356b A |
52 | # |
53 | ####################################################################### | |
1c79356b | 54 | # |
1c79356b | 55 | |
3e170ce0 | 56 | options INET # # <inet> |
1c79356b A |
57 | options HW_AST # Hardware ast support # <hw_ast> |
58 | options HW_FOOTPRINT # Cache footprint support # <hw_foot> | |
2d21ac55 | 59 | |
1c79356b | 60 | options MACH # Standard Mach features # <mach> |
1c79356b | 61 | options MACH_COMPAT # Vendor syscall compatibility # <mach> |
1c79356b | 62 | options MACH_FASTLINK # Fast symbolic links |
1c79356b A |
63 | options MACH_HOST # Mach host (resource alloc.) # <host> |
64 | options MACH_IPC_COMPAT # Enable old IPC interface # <ipc_compat> | |
1c79356b | 65 | options MACH_IPC_TEST # Testing code/printfs # <ipc_test> |
39037602 | 66 | options MACH_FLIPC # Fast-Local IPC # <mach_flipc> |
1c79356b A |
67 | options MACH_NP # Mach IPC support # <np> |
68 | options MACH_NBC # No buffer cache # <nbc> | |
1c79356b A |
69 | options MACH_NET # Fast network access # <mach_net> |
70 | options MACH_XP # external pager support # <xp> | |
cb323159 | 71 | options NO_DIRECT_RPC # for untyped mig servers # |
1c79356b | 72 | options LOOP # loopback support # <loop> |
1c79356b | 73 | options VLAN # # <vlan> |
cb323159 | 74 | options SIXLOWPAN # 6LoWPAN support # <sixlowpan> |
91447636 | 75 | options BOND # # <bond> |
5ba3f43e | 76 | options IF_FAKE # # <if_fake> |
cb323159 | 77 | options IF_HEADLESS # # <if_headless> |
fe8ab488 | 78 | options AH_ALL_CRYPTO # AH all crypto algs # <ah_all_crypto> |
b0d623f7 | 79 | options PF # Packet Filter # <pf> |
3e170ce0 | 80 | options PF_ECN # PF use ECN marking # <pf_ecn> |
b0d623f7 | 81 | options PFLOG # PF log interface # <pflog> |
39236c6e | 82 | options MEASURE_BW # interface bandwidth measurement # <measure_bw> |
91447636 | 83 | options DUMMYNET # dummynet support # <dummynet> |
2d21ac55 | 84 | options TRAFFIC_MGT # traffic management support # <traffic_mgt> |
1c79356b | 85 | options MULTICAST # Internet Protocol Class-D $ |
9bccf70c | 86 | options TCPDEBUG # TCP debug # <tcpdebug> |
9bccf70c | 87 | options ICMP_BANDLIM # ICMP bandwidth limiting sysctl |
2d21ac55 | 88 | options IFNET_INPUT_SANITY_CHK # allow dlil/ifnet input sanity check # <ifnet_input_chk> |
39236c6e A |
89 | options MULTIPATH # Multipath domain # <multipath> |
90 | options MPTCP # Multipath TCP # <mptcp> | |
3e170ce0 A |
91 | options SYSV_SEM # SVID semaphores # <sysv_sem> |
92 | options SYSV_MSG # SVID messages # <sysv_msg> | |
93 | options SYSV_SHM # SVID shared mem # <sysv_shm> | |
94 | options PSYNCH # pthread synch # <psynch> | |
39236c6e | 95 | options FLOW_DIVERT # <flow_divert> |
fe8ab488 A |
96 | options NECP # <necp> |
97 | options CONTENT_FILTER # # <content_filter> | |
98 | options PACKET_MANGLER # # <packet_mangler> | |
cb323159 | 99 | options SIXLOWPAN # # <sixlowpan> |
2d21ac55 | 100 | # secure_kernel - secure kernel from user programs |
cb323159 | 101 | options SECURE_KERNEL # <secure_kernel> |
1c79356b | 102 | |
b0d623f7 A |
103 | options OLD_SEMWAIT_SIGNAL # old semwait_signal handler |
104 | ||
1c79356b | 105 | # |
cb323159 | 106 | # 4.4 general kernel |
1c79356b | 107 | # |
f427ee49 | 108 | options SOCKETS # socket support # <inet> |
3e170ce0 | 109 | options DIAGNOSTIC # diagnostics # <diagnostic> |
fe8ab488 | 110 | options PROFILE # kernel profiling # <profile> |
2d21ac55 | 111 | options SENDFILE # sendfile # <sendfile> |
f427ee49 | 112 | options NETWORKING # networking layer # <inet> |
2d21ac55 A |
113 | options CONFIG_FSE # file system events # <config_fse> |
114 | options CONFIG_IMAGEBOOT # local image boot # <config_imageboot> | |
cb323159 | 115 | options CONFIG_LOCKERBOOT # locker boot # <config_lockerboot> |
2d21ac55 | 116 | options CONFIG_MBUF_JUMBO # jumbo cluster pool # <config_mbuf_jumbo> |
cb323159 A |
117 | options CONFIG_IMAGEBOOT_IMG4 # authenticate image with AppleImage4 # <config_imageboot_img4> |
118 | options CONFIG_IMAGEBOOT_CHUNKLIST # authenticate image with a chunk list # <config_imageboot_chunklist> | |
593a1d5f A |
119 | |
120 | options CONFIG_WORKQUEUE # <config_workqueue> | |
d9a64523 | 121 | options CONFIG_WORKLOOP_DEBUG # <config_workloop_debug> |
1c79356b A |
122 | |
123 | # | |
cb323159 | 124 | # 4.4 filesystems |
1c79356b | 125 | # |
3e170ce0 | 126 | options MOCKFS # Boot from an executable # <mockfs> |
1c79356b | 127 | options FIFO # fifo support # <fifo> |
1c79356b | 128 | options FDESC # fdesc_fs support # <fdesc> |
1c79356b | 129 | options DEVFS # devfs support # <devfs> |
490019cf | 130 | options ROUTEFS # routefs support # <routefs> |
39037602 | 131 | options NULLFS # nullfs support # <nullfs> |
f427ee49 | 132 | options BINDFS # bindfs support # <bindfs> |
39037602 | 133 | options FS_COMPRESSION # fs compression # <fs_compression> |
3e170ce0 | 134 | options CONFIG_DEV_KMEM # /dev/kmem device for reading KVA # <config_dev_kmem> |
2d21ac55 A |
135 | |
136 | # | |
137 | # file system features | |
138 | # | |
139 | options QUOTA # file system quotas # <quota> | |
2d21ac55 | 140 | options NAMEDSTREAMS # named stream vnop support # <namedstreams> |
39236c6e | 141 | options CONFIG_APPLEDOUBLE # apple double support # <config_appledouble> |
2d21ac55 | 142 | options CONFIG_VOLFS # volfs path support (legacy) # <config_volfs> |
b7266188 | 143 | options CONFIG_IMGSRC_ACCESS # source of imageboot dmg # <config_imgsrc_access> |
6d2010ae | 144 | options CONFIG_TRIGGERS # trigger vnodes # <config_triggers> |
316670eb A |
145 | options CONFIG_EXT_RESOLVER # e.g. memberd # <config_ext_resolver> |
146 | options CONFIG_SEARCHFS # searchfs syscall support # <config_searchfs> | |
813fb2f6 | 147 | options CONFIG_MNT_SUID # allow suid binaries # <config_mnt_suid> |
d9a64523 | 148 | options CONFIG_MNT_ROOTSNAP # allow rooting from snapshot # <config_mnt_rootsnap> |
cb323159 A |
149 | options CONFIG_ROSV_STARTUP # allow read-only system volume startup # <config_rosv_startup> |
150 | options CONFIG_FIRMLINKS # support "firmlinks" # <config_firmlinks> | |
151 | options CONFIG_MOUNT_VM # mount VM volume on startup # <config_mount_vm> | |
f427ee49 | 152 | options CONFIG_MOUNT_PREBOOTRECOVERY # mount Preboot and/or Recovery volume on startup # <config_mount_prebootrecovery> |
cb323159 | 153 | options CONFIG_DATALESS_FILES # support dataless file materialization # <config_dataless_files> |
f427ee49 | 154 | options CONFIG_BASESYSTEMROOT # mount BaseSystem as initial root filesystem on some kinds of startup # <config_basesystemroot> |
1c79356b A |
155 | |
156 | # | |
157 | # NFS support | |
158 | # | |
2d21ac55 A |
159 | options NFSCLIENT # Be an NFS client # <nfsclient> |
160 | options NFSSERVER # Be an NFS server # <nfsserver> | |
cb323159 A |
161 | options CONFIG_NFS_GSS # Support NFS GSSAPI # <config_nfs_gss> |
162 | options CONFIG_NFS4 # Use NFSv4 # <config_nfs4> | |
163 | options CONFIG_NETBOOT # network booting (requires NFSCLIENT) # <config_netboot> | |
1c79356b | 164 | |
1c79356b A |
165 | # |
166 | # Machine Independent Apple Features | |
167 | # | |
3e170ce0 | 168 | profile # build a profiling kernel # <profile> |
1c79356b | 169 | |
cb323159 | 170 | # |
9bccf70c | 171 | # IPv6 Support |
cb323159 | 172 | # |
3e170ce0 A |
173 | options IPSEC # IP security # <ipsec> |
174 | options IPSEC_ESP # IP security # <ipsec> | |
9bccf70c | 175 | |
3e170ce0 A |
176 | pseudo-device gif 1 # <gif> |
177 | pseudo-device dummy 2 # <dummy> | |
178 | pseudo-device stf 1 # <stf> | |
9bccf70c | 179 | |
3e170ce0 A |
180 | options CRYPTO # <ipsec,crypto> |
181 | options CRYPTO_SHA2 # <crypto_sha2> | |
182 | options ENCRYPTED_SWAP # <encrypted_swap> | |
2d21ac55 | 183 | |
d9a64523 A |
184 | options CONFIG_IMG4 # <config_img4> |
185 | ||
3e170ce0 | 186 | options ZLIB # inflate/deflate support # <zlib> |
cb323159 | 187 | options ZLIBC # inflate/deflate support # <zlibc> |
1c79356b | 188 | |
3e170ce0 | 189 | options IF_BRIDGE # <if_bridge> |
b7266188 | 190 | |
2d21ac55 | 191 | # |
cb323159 | 192 | # configurable kernel event related resources |
2d21ac55 A |
193 | # |
194 | options CONFIG_KN_HASHSIZE=64 # <medium,large,xlarge> | |
195 | options CONFIG_KN_HASHSIZE=48 # <small,xsmall> | |
196 | options CONFIG_KN_HASHSIZE=20 # <bsmall> | |
197 | ||
198 | # | |
cb323159 A |
199 | # configurable vfs related resources |
200 | # CONFIG_VNODES - used to pre allocate vnode related resources | |
2d21ac55 A |
201 | # CONFIG_NC_HASH - name cache hash table allocation |
202 | # CONFIG_VFS_NAMES - name strings | |
203 | # | |
cb323159 A |
204 | # 263168 magic number for medium CONFIG_VNODES is based on memory |
205 | # Number vnodes is (memsize/64k) + 1024 | |
2d21ac55 | 206 | # This is the calculation that is used by launchd in tiger |
cb323159 | 207 | # we are clipping the max based on 16G |
2d21ac55 A |
208 | # ie ((16*1024*1024*1024)/(64 *1024)) + 1024 = 263168; |
209 | ||
210 | options CONFIG_VNODES=263168 # <large,xlarge> | |
211 | options CONFIG_VNODES=263168 # <medium> | |
212 | options CONFIG_VNODES=10240 # <small> | |
3e170ce0 | 213 | options CONFIG_VNODES=750 # <bsmall> |
2d21ac55 | 214 | |
2d21ac55 A |
215 | options CONFIG_NC_HASH=5120 # <large,xlarge> |
216 | options CONFIG_NC_HASH=4096 # <medium> | |
217 | options CONFIG_NC_HASH=2048 # <small,xsmall> | |
218 | options CONFIG_NC_HASH=1024 # <bsmall> | |
219 | ||
220 | options CONFIG_VFS_NAMES=5120 # <large,xlarge> | |
221 | options CONFIG_VFS_NAMES=4096 # <medium> | |
222 | options CONFIG_VFS_NAMES=3072 # <small,xsmall> | |
223 | options CONFIG_VFS_NAMES=2048 # <bsmall> | |
224 | ||
b7266188 A |
225 | options CONFIG_MAX_CLUSTERS=8 # <xlarge,large,medium> |
226 | options CONFIG_MAX_CLUSTERS=4 # <small,xsmall,bsmall> | |
227 | ||
2d21ac55 | 228 | # |
cb323159 | 229 | # configurable options for minumum number of buffers for kernel memory |
2d21ac55 A |
230 | # |
231 | options CONFIG_MIN_NBUF=256 # <medium,large,xlarge> | |
232 | options CONFIG_MIN_NBUF=128 # <small> | |
233 | options CONFIG_MIN_NBUF=80 # <xsmall> | |
234 | options CONFIG_MIN_NBUF=64 # <bsmall> | |
235 | ||
236 | options CONFIG_MIN_NIOBUF=128 # <medium,large,xlarge> | |
237 | options CONFIG_MIN_NIOBUF=64 # <xsmall,small> | |
238 | options CONFIG_MIN_NIOBUF=32 # <bsmall> | |
239 | ||
240 | # | |
241 | # set maximum space used for packet buffers | |
242 | # | |
3e170ce0 A |
243 | options CONFIG_NMBCLUSTERS="((1024 * 1024) / MCLBYTES)" # <large,xlarge> |
244 | options CONFIG_NMBCLUSTERS="((1024 * 512) / MCLBYTES)" # <medium> | |
245 | options CONFIG_NMBCLUSTERS="((1024 * 256) / MCLBYTES)" # <bsmall,xsmall,small> | |
2d21ac55 A |
246 | |
247 | # | |
248 | # Configure size of TCP hash table | |
249 | # | |
250 | options CONFIG_TCBHASHSIZE=4096 # <medium,large,xlarge> | |
251 | options CONFIG_TCBHASHSIZE=128 # <xsmall,small,bsmall> | |
252 | ||
316670eb A |
253 | # |
254 | # Configure bandwidth limiting sysctl | |
255 | # | |
256 | options CONFIG_ICMP_BANDLIM=250 # <medium,large,xlarge> | |
257 | options CONFIG_ICMP_BANDLIM=50 # <xsmall,small,bsmall> | |
258 | ||
2d21ac55 | 259 | # |
cb323159 | 260 | # configurable async IO options |
2d21ac55 A |
261 | # CONFIG_AIO_MAX - system wide limit of async IO requests. |
262 | # CONFIG_AIO_PROCESS_MAX - process limit of async IO requests. | |
263 | # CONFIG_AIO_THREAD_COUNT - number of async IO worker threads created. | |
264 | # | |
3e170ce0 A |
265 | options CONFIG_AIO_MAX=360 # <xlarge> |
266 | options CONFIG_AIO_MAX=180 # <large> | |
2d21ac55 A |
267 | options CONFIG_AIO_MAX=90 # <medium> |
268 | options CONFIG_AIO_MAX=45 # <small> | |
269 | options CONFIG_AIO_MAX=20 # <xsmall> | |
270 | options CONFIG_AIO_MAX=10 # <bsmall> | |
271 | ||
272 | options CONFIG_AIO_PROCESS_MAX=64 # <xlarge> | |
273 | options CONFIG_AIO_PROCESS_MAX=32 # <large> | |
274 | options CONFIG_AIO_PROCESS_MAX=16 # <medium> | |
275 | options CONFIG_AIO_PROCESS_MAX=12 # <small> | |
276 | options CONFIG_AIO_PROCESS_MAX=8 # <xsmall> | |
277 | options CONFIG_AIO_PROCESS_MAX=4 # <bsmall> | |
278 | ||
3e170ce0 | 279 | options CONFIG_AIO_THREAD_COUNT=16 # <xlarge> |
2d21ac55 A |
280 | options CONFIG_AIO_THREAD_COUNT=8 # <large> |
281 | options CONFIG_AIO_THREAD_COUNT=4 # <medium> | |
282 | options CONFIG_AIO_THREAD_COUNT=3 # <small> | |
283 | options CONFIG_AIO_THREAD_COUNT=2 # <xsmall,bsmall> | |
284 | ||
3e170ce0 A |
285 | options CONFIG_MAXVIFS=32 # <medium,large,xlarge> |
286 | options CONFIG_MAXVIFS=16 # <small,xsmall> | |
287 | options CONFIG_MAXVIFS=2 # <bsmall> | |
2d21ac55 A |
288 | |
289 | options CONFIG_MFCTBLSIZ=256 # <medium,large,xlarge> | |
290 | options CONFIG_MFCTBLSIZ=128 # <small,xsmall> | |
291 | options CONFIG_MFCTBLSIZ=16 # <bsmall> | |
292 | ||
6d2010ae A |
293 | # |
294 | # configurable kernel message buffer size | |
295 | # | |
c3c9b80d A |
296 | options CONFIG_MSG_BSIZE_REL=16384 # <msgb_small> |
297 | options CONFIG_MSG_BSIZE_DEV=131072 # <msgb_small> | |
298 | options CONFIG_MSG_BSIZE_REL=131072 # <msgb_large> | |
f427ee49 | 299 | options CONFIG_MSG_BSIZE_DEV=131072 # <msgb_large> |
5ba3f43e A |
300 | options CONFIG_MSG_BSIZE=CONFIG_MSG_BSIZE_REL # <!development,debug> |
301 | options CONFIG_MSG_BSIZE=CONFIG_MSG_BSIZE_DEV # <development,debug> | |
6d2010ae | 302 | |
3e170ce0 A |
303 | # |
304 | # maximum size of the per-process Mach IPC table | |
305 | # | |
306 | options CONFIG_IPC_TABLE_ENTRIES_STEPS=64 # 137898 entries # <bsmall,small,xsmall> | |
307 | options CONFIG_IPC_TABLE_ENTRIES_STEPS=256 # 300714 entries # <medium,large,xlarge> | |
308 | ||
c3c9b80d A |
309 | # |
310 | # maximum copyout size for IPC debugging tools | |
311 | # | |
312 | options CONFIG_IPC_KERNEL_MAP_SIZE=16 # 16M # <bsmall,small,xsmall> | |
313 | options CONFIG_IPC_KERNEL_MAP_SIZE=64 # 64M # <medium,large,xlarge> | |
314 | ||
2d21ac55 A |
315 | # |
316 | # configurable kernel - use these options to strip strings from panic | |
317 | # and printf calls. | |
2d21ac55 A |
318 | # no_printf_str - saves around 45K of kernel footprint. |
319 | # | |
2d21ac55 A |
320 | options CONFIG_NO_PRINTF_STRINGS # <no_printf_str> |
321 | options CONFIG_NO_KPRINTF_STRINGS # <no_kprintf_str> | |
322 | ||
f427ee49 A |
323 | # support vsprintf (deprecated in favor of vsnprintf) |
324 | options CONFIG_VSPRINTF # <vsprintf> | |
325 | ||
d9a64523 A |
326 | # |
327 | # configurable kernel - general switch to say we are building for an | |
328 | # embedded device | |
329 | # | |
330 | options CONFIG_EMBEDDED # <config_embedded> | |
331 | ||
f427ee49 A |
332 | options CONFIG_ARROW # <config_arrow> |
333 | ||
fe8ab488 | 334 | |
2a1bd2d3 A |
335 | options NOS_ARM_ASM # <nos_arm_asm> |
336 | options NOS_ARM_PMAP # <nos_arm_pmap> | |
337 | ||
b7266188 A |
338 | # support dynamic signing of code |
339 | # | |
340 | options CONFIG_DYNAMIC_CODE_SIGNING # <dynamic_codesigning> | |
341 | ||
cb323159 | 342 | # enforce library validation on all processes. |
fe8ab488 A |
343 | # |
344 | options CONFIG_ENFORCE_LIBRARY_VALIDATION # <config_library_validation> | |
345 | ||
f427ee49 A |
346 | # support loading a second static trust cache |
347 | # | |
348 | options CONFIG_SECOND_STATIC_TRUST_CACHE # <second_static_trust_cache> | |
349 | ||
350 | # support supplemental signatures | |
351 | # | |
352 | options CONFIG_SUPPLEMENTAL_SIGNATURES # <config_supplemental_signatures> | |
353 | ||
fe8ab488 A |
354 | # |
355 | # code decryption... used on embedded for app protection, DSMOS on desktop | |
356 | # | |
3e170ce0 | 357 | options CONFIG_CODE_DECRYPTION # <config_code_decryption> |
fe8ab488 | 358 | |
d1ecb069 A |
359 | # |
360 | # User Content Protection, used on embedded | |
361 | # | |
3e170ce0 | 362 | options CONFIG_PROTECT # <config_protect> |
d1ecb069 | 363 | |
d9a64523 A |
364 | #allow write-protection of key page |
365 | options CONFIG_KEYPAGE_WP # <config_keypage_wp> | |
366 | ||
cb323159 A |
367 | # |
368 | # allow vm_pageout_scan to dynamically adjust its priority based on priorities of waiters | |
369 | # | |
370 | options CONFIG_VPS_DYNAMIC_PRIO # <vps_dynamic_prio> | |
371 | ||
6d2010ae | 372 | # |
316670eb A |
373 | # enable per-process memory priority tracking |
374 | # | |
3e170ce0 | 375 | options CONFIG_MEMORYSTATUS # <memorystatus> |
316670eb | 376 | |
f427ee49 A |
377 | # |
378 | # enable per-process dirty-status tracking | |
379 | # | |
380 | options CONFIG_DIRTYSTATUS_TRACKING # <dirtystatus_tracking> | |
316670eb A |
381 | # |
382 | # enable jetsam - used on embedded | |
383 | # | |
3e170ce0 A |
384 | options CONFIG_JETSAM # <jetsam> |
385 | ||
39037602 A |
386 | # |
387 | # enable new link table implementation stats/debugging | |
388 | # (adds mesaureable overhead) | |
389 | # | |
390 | options CONFIG_LTABLE_STATS # <config_ltable_stats> | |
391 | options CONFIG_LTABLE_DEBUG # <config_ltable_debug> | |
392 | ||
3e170ce0 A |
393 | # |
394 | # enable new wait queue implementation stats / debugging | |
395 | # | |
396 | options CONFIG_WAITQ_STATS # <config_waitq_stats> | |
397 | options CONFIG_WAITQ_DEBUG # <config_waitq_debug> | |
316670eb A |
398 | |
399 | # | |
400 | # enable freezing of suspended processes - used on embedded | |
6d2010ae | 401 | # |
3e170ce0 | 402 | options CONFIG_FREEZE # <freeze> |
6d2010ae | 403 | |
3e170ce0 | 404 | options CHECK_CS_VALIDATION_BITMAP # <config_cs_validation_bitmap> |
593a1d5f | 405 | |
f427ee49 A |
406 | # |
407 | # enable physical writes accounting | |
408 | # | |
409 | options CONFIG_PHYS_WRITE_ACCT # <phys_write_acct> | |
410 | ||
fe8ab488 A |
411 | # |
412 | # enable detectiion of file cache thrashing - used on platforms with | |
413 | # dynamic VM compression enabled | |
414 | # | |
3e170ce0 | 415 | options CONFIG_PHANTOM_CACHE # <phantom_cache> |
fe8ab488 | 416 | |
316670eb A |
417 | # |
418 | # memory pressure event support | |
316670eb A |
419 | # |
420 | options VM_PRESSURE_EVENTS # <vm_pressure_events> | |
421 | ||
39037602 A |
422 | options CONFIG_SECLUDED_MEMORY # <config_secluded_memory> |
423 | ||
424 | options CONFIG_BACKGROUND_QUEUE # <config_background_queue> | |
425 | ||
d9a64523 A |
426 | # |
427 | # Ledger features | |
428 | # | |
429 | options CONFIG_LEDGER_INTERVAL_MAX # <config_ledger_interval_max> | |
430 | ||
fe8ab488 A |
431 | # |
432 | # I/O Scheduling | |
433 | # | |
434 | options CONFIG_IOSCHED # <config_iosched> | |
435 | ||
39037602 A |
436 | # |
437 | # Accounting for I/O usage | |
438 | # | |
439 | options CONFIG_IO_ACCOUNTING # <config_io_accounting> | |
440 | ||
39236c6e A |
441 | # |
442 | # Enable inheritance of importance through specially marked mach ports and for file locks | |
443 | # For now debug is enabled wherever inheritance is | |
444 | # | |
445 | options IMPORTANCE_INHERITANCE # <importance_inheritance> | |
5ba3f43e A |
446 | options IMPORTANCE_TRACE # <importance_trace> |
447 | options IMPORTANCE_DEBUG # <importance_debug> | |
39236c6e | 448 | |
3e170ce0 | 449 | options CONFIG_TELEMETRY # <config_telemetry> |
39236c6e A |
450 | |
451 | options CONFIG_PROC_UUID_POLICY # <config_proc_uuid_policy> | |
452 | ||
fe8ab488 A |
453 | # |
454 | # ECC data logging | |
cb323159 | 455 | # |
3e170ce0 | 456 | options CONFIG_ECC_LOGGING # <config_ecc_logging> |
fe8ab488 | 457 | |
39037602 A |
458 | # |
459 | # Application core dumps | |
460 | # | |
461 | options CONFIG_COREDUMP # <config_coredump> | |
462 | ||
5ba3f43e A |
463 | # |
464 | # Vnode guards | |
465 | # | |
466 | options CONFIG_VNGUARD # <config_vnguard> | |
467 | ||
1c79356b A |
468 | # |
469 | # Ethernet (ARP) | |
470 | # | |
f427ee49 | 471 | pseudo-device ether # <networking,inet> |
1c79356b A |
472 | # |
473 | # Network loopback device | |
474 | # | |
f427ee49 | 475 | pseudo-device loop # <networking,inet> |
1c79356b A |
476 | # |
477 | # UCB pseudo terminal service | |
478 | # | |
2d21ac55 A |
479 | pseudo-device pty 512 init pty_init # <xlarge> |
480 | pseudo-device pty 256 init pty_init # <large> | |
481 | pseudo-device pty 128 init pty_init # <medium> | |
482 | pseudo-device pty 48 init pty_init # <small> | |
483 | pseudo-device pty 16 init pty_init # <xsmall> | |
484 | pseudo-device pty 8 init pty_init # <bsmall> | |
485 | # | |
486 | # Cloning pseudo terminal service | |
487 | # | |
488 | pseudo-device ptmx 1 init ptmx_init | |
9bccf70c A |
489 | |
490 | # | |
491 | # vnode device | |
2d21ac55 | 492 | # |
fe8ab488 | 493 | pseudo-device vndevice 4 init vndevice_init # <development,debug> |
9bccf70c | 494 | |
55e303ae A |
495 | # |
496 | # memory device | |
497 | pseudo-device mdevdevice 1 init mdevinit | |
498 | ||
9bccf70c | 499 | # |
1c79356b A |
500 | # |
501 | # packet filter device | |
502 | # | |
f427ee49 | 503 | pseudo-device bpfilter 4 init bpf_init # <networking,inet> |
1c79356b | 504 | |
91447636 A |
505 | # |
506 | # fsevents device | |
2d21ac55 | 507 | pseudo-device fsevents 1 init fsevents_init # <config_fse> |
91447636 | 508 | |
0b4e3aa0 | 509 | pseudo-device random 1 init random_init |
2d21ac55 A |
510 | pseudo-device dtrace 1 init dtrace_init # <config_dtrace> |
511 | pseudo-device helper 1 init helper_init # <config_dtrace> | |
512 | pseudo-device lockstat 1 init lockstat_init # <config_dtrace> | |
0a7de745 | 513 | pseudo-device lockprof 1 init lockprof_init # <config_dtrace> |
2d21ac55 A |
514 | pseudo-device sdt 1 init sdt_init # <config_dtrace> |
515 | pseudo-device systrace 1 init systrace_init # <config_dtrace> | |
516 | pseudo-device fbt 1 init fbt_init # <config_dtrace> | |
517 | pseudo-device profile_prvd 1 init profile_init # <config_dtrace> | |
fe8ab488 | 518 | |
5ba3f43e | 519 | |
fe8ab488 A |
520 | # |
521 | # IOKit configuration options | |
522 | # | |
523 | ||
524 | options HIBERNATION # system hibernation # <hibernation> | |
3e170ce0 A |
525 | options IOKITCPP # C++ implementation # <iokitcpp> |
526 | options IOKITSTATS # IOKit statistics # <iokitstats> | |
527 | options IOTRACKING # IOKit tracking # <iotracking> | |
528 | options CONFIG_SLEEP # # <config_sleep> | |
f427ee49 | 529 | options CONFIG_MAX_THREADS=500 # IOConfigThread threads |
3e170ce0 A |
530 | options NO_KEXTD # <no_kextd> |
531 | options NO_KERNEL_HID # <no_kernel_hid> | |
fe8ab488 A |
532 | |
533 | # | |
534 | # Libkern configuration options | |
535 | # | |
536 | ||
537 | options LIBKERNCPP # C++ implementation # <libkerncpp> | |
d9a64523 | 538 | options CONFIG_BLOCKS # Blocks runtime # <config_blocks> |
fe8ab488 A |
539 | options CONFIG_KXLD # kxld/runtime linking of kexts # <config_kxld> |
540 | options CONFIG_KEC_FIPS # Kernel External Components for FIPS compliance (KEC_FIPS) # <config_kec_fips> | |
541 | ||
542 | # Note that when adding this config option to an architecture, one MUST | |
543 | # add the architecture to the preprocessor test at the beginning of | |
544 | # libkern/kmod/cplus_{start.c,stop.c}. | |
545 | options CONFIG_STATIC_CPPINIT # Static library initializes kext cpp runtime # <config_static_cppinit> | |
546 | ||
547 | # | |
548 | # libsa configuration options | |
549 | # | |
550 | ||
551 | # CONFIG_KEXT_BASEMENT - alloc post boot loaded kexts after prelinked kexts | |
552 | # | |
3e170ce0 | 553 | options CONFIG_KEXT_BASEMENT # # <config_kext_basement> |
fe8ab488 | 554 | |
490019cf A |
555 | # |
556 | # Persona Management | |
557 | # | |
558 | options CONFIG_PERSONAS # Persona management # <config_personas> | |
559 | options PERSONA_DEBUG # Persona debugging # <persona_debug> | |
560 | ||
fe8ab488 A |
561 | # |
562 | # security configuration options | |
563 | # | |
564 | ||
3e170ce0 | 565 | options CONFIG_MACF # Mandatory Access Control Framework # <config_macf> |
fe8ab488 | 566 | options CONFIG_MACF_SOCKET_SUBSET # MAC socket subest (no labels) # <config_macf> |
3e170ce0 | 567 | #options CONFIG_MACF_DEBUG # debug # <config_macf> |
fe8ab488 | 568 | |
3e170ce0 | 569 | options CONFIG_AUDIT # Kernel auditing # <config_audit> |
fe8ab488 | 570 | |
cb323159 | 571 | options CONFIG_ARCADE # Arcade validation support # <config_arcade> |
fe8ab488 | 572 | |
f427ee49 A |
573 | options CONFIG_SETUID # setuid/setgid support # <config_setuid> |
574 | ||
575 | options CONFIG_SECURE_BSD_ROOT # secure BSD root # <config_secure_bsd_root> | |
576 | ||
577 | options CONFIG_KAS_INFO # kas_info support # <config_kas_info> | |
578 | ||
fe8ab488 A |
579 | # |
580 | # MACH configuration options. | |
581 | # | |
fe8ab488 A |
582 | |
583 | # | |
584 | # This defines configuration options that are normally used only during | |
585 | # kernel code development and debugging. They add run-time error checks or | |
586 | # statistics gathering, which will slow down the system | |
587 | # | |
588 | ########################################################## | |
589 | # | |
590 | # MACH_ASSERT controls the assert() and ASSERT() macros, used to verify the | |
591 | # consistency of various algorithms in the kernel. The performance impact | |
592 | # of this option is significant. | |
593 | # | |
594 | options MACH_ASSERT # # <mach_assert> | |
595 | # | |
596 | # MACH_DEBUG enables the mach_debug_server, a message interface used to | |
597 | # retrieve or control various statistics. This interface may expose data | |
598 | # structures that would not normally be allowed outside the kernel, and | |
599 | # MUST NOT be enabled on a released configuration. | |
600 | # Other options here enable information retrieval for specific subsystems | |
601 | # | |
602 | options MACH_DEBUG # IPC debugging interface # <mdebug> | |
603 | options MACH_IPC_DEBUG # Enable IPC debugging calls # <ipc_debug> | |
3e170ce0 | 604 | options MACH_VM_DEBUG # # <debug> |
fe8ab488 A |
605 | # |
606 | # MACH_MP_DEBUG control the possible dead locks that may occur by controlling | |
607 | # that IPL level has been raised down to SPL0 after some calls to | |
608 | # hardclock device driver. | |
609 | # | |
3e170ce0 | 610 | options MACH_MP_DEBUG # # <debug> |
fe8ab488 A |
611 | options CONFIG_ZLEAKS # Live zone leak debugging # <zleaks> |
612 | ||
fe8ab488 A |
613 | # |
614 | # CONFIG_TASK_ZONE_INFO allows per-task zone information to be extracted | |
615 | # Primarily useful for xnu debug and development. | |
616 | # | |
617 | options CONFIG_TASK_ZONE_INFO # <task_zone_info> | |
618 | # | |
619 | # CONFIG_DEBUGGER_FOR_ZONE_INFO restricts zone info so that it is only | |
620 | # available when the kernel is being debugged. | |
621 | # | |
622 | options CONFIG_DEBUGGER_FOR_ZONE_INFO # <debugger_for_zone_info> | |
cb323159 | 623 | # |
fe8ab488 A |
624 | # MACH_LDEBUG controls the internal consistency checks and |
625 | # data gathering in the locking package. This also enables a debug-only | |
626 | # version of simple-locks on uniprocessor machines. The code size and | |
627 | # performance impact of this option is significant. | |
cb323159 | 628 | # |
fe8ab488 A |
629 | options MACH_LDEBUG # # <debug> |
630 | ||
631 | # | |
632 | # configuration option for full, partial, or no kernel debug event tracing | |
633 | # | |
634 | options KDEBUG # kernel tracing # <kdebug> | |
635 | options IST_KDEBUG # limited tracing # <ist_kdebug> | |
3e170ce0 | 636 | options NO_KDEBUG # no kernel tracing # <no_kdebug> |
fe8ab488 A |
637 | |
638 | # | |
639 | # CONFIG_DTRACE enables code needed to support DTrace. Currently this is | |
640 | # only used for delivery of traps/interrupts to DTrace. | |
641 | # | |
3e170ce0 | 642 | options CONFIG_DTRACE # # <config_dtrace> |
fe8ab488 | 643 | |
0a7de745 A |
644 | options LOCK_STATS # # <lock_stats> |
645 | ||
fe8ab488 A |
646 | # kernel performance tracing |
647 | options KPERF # <kperf> | |
648 | options KPC # <kpc> | |
649 | ||
5ba3f43e | 650 | |
813fb2f6 A |
651 | options PGO # <pgo> |
652 | ||
fe8ab488 | 653 | # DEVELOPMENT define for development builds |
3e170ce0 | 654 | options DEVELOPMENT # dev kernel # <development> |
fe8ab488 A |
655 | |
656 | # DEBUG kernel | |
3e170ce0 | 657 | options DEBUG # general debugging code # <debug> |
cb323159 | 658 | options CONFIG_NONFATAL_ASSERTS # non fatal asserts # <softasserts> |
fe8ab488 A |
659 | |
660 | ########################################################## | |
661 | # | |
662 | # This defines configuration options that are normally used only during | |
663 | # kernel code development and performance characterization. They add run-time | |
664 | # statistics gathering, which will slow down the system, | |
665 | # | |
666 | ########################################################## | |
667 | # | |
668 | # MACH_IPC_STATS controls the collection of statistics in the MACH IPC | |
669 | # subsystem. | |
670 | # | |
671 | #options MACH_IPC_STATS | |
672 | # | |
673 | # MACH_CLUSTER_STATS controls the collection of various statistics concerning | |
674 | # the effectiveness and behavior of the clustered pageout and pagein | |
675 | # code. | |
676 | # | |
677 | #options MACH_CLUSTER_STATS | |
678 | ||
679 | options MACH_BSD # BSD subsystem on top of Mach # <mach_bsd> | |
680 | options IOKIT # # <iokit> | |
681 | ||
682 | # | |
cb323159 | 683 | # configurable kernel related resources (CONFIG_THREAD_MAX needs to stay in |
fe8ab488 A |
684 | # sync with bsd/conf/MASTER until we fix the config system... todo XXX |
685 | # | |
686 | options CONFIG_THREAD_MAX=2560 # <medium,large,xlarge> | |
687 | options CONFIG_THREAD_MAX=1536 # <small,xsmall> | |
688 | options CONFIG_THREAD_MAX=1024 # <bsmall> | |
689 | ||
690 | options CONFIG_TASK_MAX=1024 # <medium,large,xlarge> | |
691 | options CONFIG_TASK_MAX=768 # <small,> | |
692 | options CONFIG_TASK_MAX=512 # <xsmall,bsmall> | |
693 | ||
0a7de745 A |
694 | # |
695 | # Minimum zone map size: 115 MB | |
696 | # | |
697 | options CONFIG_ZONE_MAP_MIN=120586240 # <xsmall,bsmall,small,medium,large,xlarge> | |
fe8ab488 | 698 | |
cb323159 A |
699 | # Sizes must be a power of two for the zhash to |
700 | # be able to just mask off bits instead of mod | |
fe8ab488 A |
701 | options CONFIG_ZLEAK_ALLOCATION_MAP_NUM=16384 #<medium,large,xlarge> |
702 | options CONFIG_ZLEAK_ALLOCATION_MAP_NUM=8192 #<small,xsmall,bsmall> | |
703 | options CONFIG_ZLEAK_TRACE_MAP_NUM=8192 #<medium,large,xlarge> | |
704 | options CONFIG_ZLEAK_TRACE_MAP_NUM=4096 #<small,xsmall,bsmall> | |
705 | ||
706 | # vc_progress_white - make the progress gear white instead of black | |
707 | options CONFIG_VC_PROGRESS_WHITE # <vc_progress_white> | |
708 | ||
fe8ab488 A |
709 | # |
710 | # Timeshare scheduler implementations | |
711 | # | |
712 | options CONFIG_SCHED_TRADITIONAL # <config_sched_traditional> | |
713 | options CONFIG_SCHED_PROTO # <config_sched_proto> | |
714 | options CONFIG_SCHED_GRRR # <config_sched_grrr> | |
715 | options CONFIG_SCHED_GRRR_CORE # <config_sched_grrr> | |
716 | options CONFIG_SCHED_MULTIQ # <config_sched_multiq> | |
717 | options CONFIG_SCHED_TIMESHARE_CORE # <config_sched_traditional,config_sched_multiq> | |
cb323159 | 718 | options CONFIG_CLUTCH # <config_clutch> |
f427ee49 | 719 | options CONFIG_SCHED_AUTO_JOIN # <config_sched_auto_join> |
fe8ab488 | 720 | |
3e170ce0 A |
721 | options CONFIG_SCHED_IDLE_IN_PLACE # <config_sched_idle_in_place> |
722 | options CONFIG_SCHED_SFI # <config_sched_sfi> | |
fe8ab488 | 723 | options CONFIG_GZALLOC # <config_gzalloc> |
3e170ce0 | 724 | options CONFIG_SCHED_DEFERRED_AST # <config_sched_deferred_ast> |
fe8ab488 A |
725 | |
726 | # Enable allocation of contiguous physical memory through vm_map_enter_cpm() | |
3e170ce0 | 727 | options VM_CPM # <vm_cpm> |
fe8ab488 | 728 | |
3e170ce0 | 729 | options CONFIG_SKIP_PRECISE_USER_KERNEL_TIME # <config_skip_precise_user_kernel_time> |
fe8ab488 A |
730 | |
731 | # | |
732 | # Switch to disable cpu, wakeup and high memory watermark monitors | |
733 | # | |
3e170ce0 | 734 | options CONFIG_NOMONITORS # <config_nomonitors> |
fe8ab488 | 735 | |
3e170ce0 A |
736 | options MACH_KDP # KDP # <mach_kdp> |
737 | options CONFIG_SERIAL_KDP # KDP over serial # <config_serial_kdp> | |
fe8ab488 A |
738 | options CONFIG_KDP_INTERACTIVE_DEBUGGING # <kdp_interactive_debugging> |
739 | ||
f427ee49 | 740 | options CONFIG_TASKWATCH |
c3c9b80d | 741 | options CONFIG_USER_NOTIFICATION # <config_user_notification> |
3e170ce0 A |
742 | # |
743 | # Kernel Power On Self Tests | |
744 | # | |
745 | options CONFIG_XNUPOST # <config_xnupost> | |
746 | ||
747 | # | |
748 | # Kernel proc reference instrumentation | |
749 | # | |
750 | options PROC_REF_DEBUG # <proc_ref_debug> | |
751 | ||
fe8ab488 A |
752 | # |
753 | # Kernel Voucher Attr Manager for Activity Trace | |
754 | # | |
3e170ce0 | 755 | options CONFIG_ATM # <config_atm> |
fe8ab488 | 756 | |
fe8ab488 A |
757 | # Group related tasks together into coalitions |
758 | options CONFIG_COALITIONS # <config_coalitions> | |
759 | ||
3e170ce0 A |
760 | # Enable support for sysdiagnose notifications |
761 | options CONFIG_SYSDIAGNOSE # <config_sysdiagnose> | |
762 | ||
fe8ab488 | 763 | # Configurable Security Restrictions |
3e170ce0 | 764 | options CONFIG_CSR # <config_csr> |
f427ee49 | 765 | options CONFIG_CSR_FROM_DT # <config_csr_from_dt> |
fe8ab488 | 766 | |
c3c9b80d A |
767 | # Enable collection of IO Compression statistics |
768 | options CONFIG_IO_COMPRESSION_STATS # <config_io_compression_stats> | |
769 | ||
fe8ab488 A |
770 | # |
771 | # Console options | |
772 | # | |
773 | options SERIAL_CONSOLE # bi-directional serial over UART | |
774 | options VIDEO_CONSOLE # uni-directional output over framebuffer | |
775 | ||
776 | # | |
777 | # Syscall options | |
778 | # | |
779 | options CONFIG_REQUIRES_U32_MUNGING # incoming U32 argument structures must be munged to match U64 # <config_requires_u32_munging> | |
5ba3f43e A |
780 | |
781 | # | |
782 | # copyout() instrumentation | |
783 | # | |
784 | options COPYOUT_SHIM # Shim for copyout memory analysis via kext #<copyout_shim> | |
785 | ||
0a7de745 | 786 | # |
cb323159 | 787 | # Enable hardware correlation of mach absolute time |
0a7de745 A |
788 | # across intel/arm boundary |
789 | options CONFIG_MACH_BRIDGE_SEND_TIME # # <config_mach_bridge_send_time> | |
790 | options CONFIG_MACH_BRIDGE_RECV_TIME # # <config_mach_bridge_recv_time> | |
527f9951 A |
791 | |
792 | # | |
793 | # Telemetry for 32-bit process launch | |
794 | # | |
795 | options CONFIG_32BIT_TELEMETRY # # <config_32bit_telemetry> | |
d9a64523 A |
796 | |
797 | options CONFIG_QUIESCE_COUNTER # Support for _COMM_PAGE_CPU_QUIESCENT_COUNTER # <config_quiesce_counter> | |
f427ee49 | 798 | options CONFIG_ARM_PFZ # Support for PFZ on ARM # <config_arm_pfz> |
d9a64523 | 799 | |
cb323159 A |
800 | # |
801 | # Sanitizers | |
802 | # | |
803 | options CONFIG_KASAN # <config_kasan> | |
804 | options CONFIG_UBSAN # <config_ubsan> | |
805 | options CONFIG_KSANCOV # <config_ksancov> | |
806 | ||
f427ee49 A |
807 | # dark boot support |
808 | options CONFIG_DARKBOOT # <config_darkboot> | |
809 | ||
810 | # support for processes delaying idle sleep for pending IO | |
811 | options CONFIG_DELAY_IDLE_SLEEP # <config_delay_idle_sleep> | |
812 | ||
813 | # support for storing a 64-bit user supplied value in the proc structure | |
814 | options CONFIG_PROC_UDATA_STORAGE # <config_proc_udata_storage> | |
815 | ||
cb323159 | 816 | pseudo-device ksancov 1 init ksancov_init_dev # <config_ksancov> |
f427ee49 A |
817 | |
818 | # debug instrumentation to catch code that leaves interrupts masked | |
819 | # for an excessive period of time | |
820 | options INTERRUPT_MASKED_DEBUG # <interrupt_masked_debug> |