]> git.saurik.com Git - apple/xnu.git/blame - config/MASTER
xnu-6153.11.26.tar.gz
[apple/xnu.git] / config / MASTER
CommitLineData
1c79356b
A
1#
2# Mach Operating System
3# Copyright (c) 1986 Carnegie-Mellon University
d9a64523 4# Copyright 2001-2018 Apple Inc.
fe8ab488 5#
1c79356b
A
6# All rights reserved. The CMU software License Agreement
7# specifies the terms and conditions for use and redistribution.
cb323159 8#
1c79356b
A
9#######################################################################
10#
11# Master machine independent configuration file.
12#
13# Specific configuration files are created based on this and
14# the machine specific master file using the doconf script.
15#
16# Any changes to the master configuration files will affect all
17# other configuration files based upon it.
18#
19#######################################################################
20#
21# To build a configuration, execute "doconf <configuration>."
22# Configurations are specified in the "Configurations:" section
23# of the MASTER and MASTER.* files as follows:
24#
25# <configuration> = [ <attribute0> <attribute1> ... <attributeN> ]
26#
27# Lines in the MASTER and MASTER.* files are selected based on
28# the attribute selector list, found in a comment at the end of
29# the line. This is a list of attributes separated by commas.
30# The "!" operator selects the line if none of the attributes are
31# specified.
32#
33# For example:
34#
35# <foo,bar> selects a line if "foo" or "bar" are specified.
36# <!foo,bar> selects a line if neither "foo" nor "bar" is
37# specified.
38#
39# Lines with no attributes specified are selected for all
40# configurations.
41#
42#######################################################################
43#
1c79356b
A
44# SYSTEM SIZE CONFIGURATION (select exactly one)
45#
46# xlarge = extra large scale system configuration
47# large = large scale system configuration
48# medium = medium scale system configuration
49# small = small scale system configuration
50# xsmall = extra small scale system configuration
cb323159 51# bsmall = special extra small scale system configuration
1c79356b
A
52#
53#######################################################################
1c79356b 54#
1c79356b 55
3e170ce0 56options INET # # <inet>
1c79356b
A
57options HW_AST # Hardware ast support # <hw_ast>
58options HW_FOOTPRINT # Cache footprint support # <hw_foot>
2d21ac55 59
1c79356b 60options MACH # Standard Mach features # <mach>
1c79356b 61options MACH_COMPAT # Vendor syscall compatibility # <mach>
1c79356b 62options MACH_FASTLINK # Fast symbolic links
1c79356b
A
63options MACH_HOST # Mach host (resource alloc.) # <host>
64options MACH_IPC_COMPAT # Enable old IPC interface # <ipc_compat>
1c79356b 65options MACH_IPC_TEST # Testing code/printfs # <ipc_test>
39037602 66options MACH_FLIPC # Fast-Local IPC # <mach_flipc>
1c79356b
A
67options MACH_NP # Mach IPC support # <np>
68options MACH_NBC # No buffer cache # <nbc>
1c79356b
A
69options MACH_NET # Fast network access # <mach_net>
70options MACH_XP # external pager support # <xp>
cb323159 71options NO_DIRECT_RPC # for untyped mig servers #
1c79356b 72options LOOP # loopback support # <loop>
1c79356b 73options VLAN # # <vlan>
cb323159 74options SIXLOWPAN # 6LoWPAN support # <sixlowpan>
91447636 75options BOND # # <bond>
5ba3f43e 76options IF_FAKE # # <if_fake>
cb323159 77options IF_HEADLESS # # <if_headless>
fe8ab488 78options AH_ALL_CRYPTO # AH all crypto algs # <ah_all_crypto>
b0d623f7 79options PF # Packet Filter # <pf>
3e170ce0 80options PF_ECN # PF use ECN marking # <pf_ecn>
b0d623f7 81options PFLOG # PF log interface # <pflog>
39236c6e 82options MEASURE_BW # interface bandwidth measurement # <measure_bw>
91447636 83options DUMMYNET # dummynet support # <dummynet>
2d21ac55 84options TRAFFIC_MGT # traffic management support # <traffic_mgt>
1c79356b 85options MULTICAST # Internet Protocol Class-D $
9bccf70c 86options TCPDEBUG # TCP debug # <tcpdebug>
9bccf70c
A
87options TCP_DROP_SYNFIN # Drop TCP packets with SYN+FIN set # <tcpdrop_synfin>
88options ICMP_BANDLIM # ICMP bandwidth limiting sysctl
2d21ac55 89options IFNET_INPUT_SANITY_CHK # allow dlil/ifnet input sanity check # <ifnet_input_chk>
39236c6e
A
90options MULTIPATH # Multipath domain # <multipath>
91options MPTCP # Multipath TCP # <mptcp>
3e170ce0
A
92options SYSV_SEM # SVID semaphores # <sysv_sem>
93options SYSV_MSG # SVID messages # <sysv_msg>
94options SYSV_SHM # SVID shared mem # <sysv_shm>
95options PSYNCH # pthread synch # <psynch>
39236c6e 96options FLOW_DIVERT # <flow_divert>
fe8ab488
A
97options NECP # <necp>
98options CONTENT_FILTER # # <content_filter>
99options PACKET_MANGLER # # <packet_mangler>
cb323159 100options SIXLOWPAN # # <sixlowpan>
2d21ac55 101# secure_kernel - secure kernel from user programs
cb323159 102options SECURE_KERNEL # <secure_kernel>
1c79356b 103
b0d623f7
A
104options OLD_SEMWAIT_SIGNAL # old semwait_signal handler
105
1c79356b 106#
cb323159 107# 4.4 general kernel
1c79356b 108#
3e170ce0
A
109options SOCKETS # socket support # <inet, inet6>
110options DIAGNOSTIC # diagnostics # <diagnostic>
fe8ab488 111options PROFILE # kernel profiling # <profile>
2d21ac55 112options SENDFILE # sendfile # <sendfile>
3e170ce0 113options NETWORKING # networking layer # <inet, inet6>
2d21ac55
A
114options CONFIG_FSE # file system events # <config_fse>
115options CONFIG_IMAGEBOOT # local image boot # <config_imageboot>
cb323159 116options CONFIG_LOCKERBOOT # locker boot # <config_lockerboot>
2d21ac55 117options CONFIG_MBUF_JUMBO # jumbo cluster pool # <config_mbuf_jumbo>
cb323159
A
118options CONFIG_IMAGEBOOT_IMG4 # authenticate image with AppleImage4 # <config_imageboot_img4>
119options CONFIG_IMAGEBOOT_CHUNKLIST # authenticate image with a chunk list # <config_imageboot_chunklist>
593a1d5f
A
120
121options CONFIG_WORKQUEUE # <config_workqueue>
d9a64523 122options CONFIG_WORKLOOP_DEBUG # <config_workloop_debug>
1c79356b
A
123
124#
cb323159 125# 4.4 filesystems
1c79356b 126#
3e170ce0 127options MOCKFS # Boot from an executable # <mockfs>
1c79356b 128options FIFO # fifo support # <fifo>
1c79356b 129options FDESC # fdesc_fs support # <fdesc>
1c79356b 130options DEVFS # devfs support # <devfs>
490019cf 131options ROUTEFS # routefs support # <routefs>
39037602
A
132options NULLFS # nullfs support # <nullfs>
133options FS_COMPRESSION # fs compression # <fs_compression>
3e170ce0 134options CONFIG_DEV_KMEM # /dev/kmem device for reading KVA # <config_dev_kmem>
2d21ac55
A
135
136#
137# file system features
138#
139options QUOTA # file system quotas # <quota>
2d21ac55 140options NAMEDSTREAMS # named stream vnop support # <namedstreams>
39236c6e 141options CONFIG_APPLEDOUBLE # apple double support # <config_appledouble>
2d21ac55 142options CONFIG_VOLFS # volfs path support (legacy) # <config_volfs>
b7266188 143options CONFIG_IMGSRC_ACCESS # source of imageboot dmg # <config_imgsrc_access>
6d2010ae 144options CONFIG_TRIGGERS # trigger vnodes # <config_triggers>
316670eb
A
145options CONFIG_EXT_RESOLVER # e.g. memberd # <config_ext_resolver>
146options CONFIG_SEARCHFS # searchfs syscall support # <config_searchfs>
813fb2f6 147options CONFIG_MNT_SUID # allow suid binaries # <config_mnt_suid>
d9a64523 148options CONFIG_MNT_ROOTSNAP # allow rooting from snapshot # <config_mnt_rootsnap>
cb323159
A
149options CONFIG_ROSV_STARTUP # allow read-only system volume startup # <config_rosv_startup>
150options CONFIG_FIRMLINKS # support "firmlinks" # <config_firmlinks>
151options CONFIG_MOUNT_VM # mount VM volume on startup # <config_mount_vm>
152options CONFIG_DATALESS_FILES # support dataless file materialization # <config_dataless_files>
1c79356b
A
153
154#
155# NFS support
156#
2d21ac55
A
157options NFSCLIENT # Be an NFS client # <nfsclient>
158options NFSSERVER # Be an NFS server # <nfsserver>
cb323159
A
159options CONFIG_NFS_GSS # Support NFS GSSAPI # <config_nfs_gss>
160options CONFIG_NFS4 # Use NFSv4 # <config_nfs4>
161options CONFIG_NETBOOT # network booting (requires NFSCLIENT) # <config_netboot>
1c79356b 162
1c79356b
A
163#
164# Machine Independent Apple Features
165#
3e170ce0 166profile # build a profiling kernel # <profile>
1c79356b 167
cb323159 168#
9bccf70c 169# IPv6 Support
cb323159 170#
3e170ce0
A
171options "INET6" # kernel IPv6 Support # <inet6>
172options IPV6SEND # Secure Neighbor Discovery # <ipv6send>
173options IPSEC # IP security # <ipsec>
174options IPSEC_ESP # IP security # <ipsec>
175options "IPV6FIREWALL" # IPv6 Firewall Feature # <ipv6firewall>
91447636
A
176options "IPV6FIREWALL_DEFAULT_TO_ACCEPT" #IPv6 Firewall Feature # <ipv6firewall>
177#options "IPV6FIREWALL_VERBOSE" #IPv6 Firewall Feature # <ipv6firewall>
9bccf70c 178
3e170ce0
A
179pseudo-device gif 1 # <gif>
180pseudo-device dummy 2 # <dummy>
181pseudo-device stf 1 # <stf>
9bccf70c 182
3e170ce0
A
183options CRYPTO # <ipsec,crypto>
184options CRYPTO_SHA2 # <crypto_sha2>
185options ENCRYPTED_SWAP # <encrypted_swap>
2d21ac55 186
d9a64523
A
187options CONFIG_IMG4 # <config_img4>
188
3e170ce0 189options ZLIB # inflate/deflate support # <zlib>
cb323159 190options ZLIBC # inflate/deflate support # <zlibc>
1c79356b 191
3e170ce0 192options IF_BRIDGE # <if_bridge>
b7266188 193
2d21ac55 194#
cb323159 195# configurable kernel event related resources
2d21ac55
A
196#
197options CONFIG_KN_HASHSIZE=64 # <medium,large,xlarge>
198options CONFIG_KN_HASHSIZE=48 # <small,xsmall>
199options CONFIG_KN_HASHSIZE=20 # <bsmall>
200
201#
cb323159
A
202# configurable vfs related resources
203# CONFIG_VNODES - used to pre allocate vnode related resources
2d21ac55
A
204# CONFIG_NC_HASH - name cache hash table allocation
205# CONFIG_VFS_NAMES - name strings
206#
cb323159
A
207# 263168 magic number for medium CONFIG_VNODES is based on memory
208# Number vnodes is (memsize/64k) + 1024
2d21ac55 209# This is the calculation that is used by launchd in tiger
cb323159 210# we are clipping the max based on 16G
2d21ac55
A
211# ie ((16*1024*1024*1024)/(64 *1024)) + 1024 = 263168;
212
213options CONFIG_VNODES=263168 # <large,xlarge>
214options CONFIG_VNODES=263168 # <medium>
215options CONFIG_VNODES=10240 # <small>
3e170ce0 216options CONFIG_VNODES=750 # <bsmall>
2d21ac55 217
2d21ac55
A
218options CONFIG_NC_HASH=5120 # <large,xlarge>
219options CONFIG_NC_HASH=4096 # <medium>
220options CONFIG_NC_HASH=2048 # <small,xsmall>
221options CONFIG_NC_HASH=1024 # <bsmall>
222
223options CONFIG_VFS_NAMES=5120 # <large,xlarge>
224options CONFIG_VFS_NAMES=4096 # <medium>
225options CONFIG_VFS_NAMES=3072 # <small,xsmall>
226options CONFIG_VFS_NAMES=2048 # <bsmall>
227
b7266188
A
228options CONFIG_MAX_CLUSTERS=8 # <xlarge,large,medium>
229options CONFIG_MAX_CLUSTERS=4 # <small,xsmall,bsmall>
230
2d21ac55 231#
cb323159 232# configurable options for minumum number of buffers for kernel memory
2d21ac55
A
233#
234options CONFIG_MIN_NBUF=256 # <medium,large,xlarge>
235options CONFIG_MIN_NBUF=128 # <small>
236options CONFIG_MIN_NBUF=80 # <xsmall>
237options CONFIG_MIN_NBUF=64 # <bsmall>
238
239options CONFIG_MIN_NIOBUF=128 # <medium,large,xlarge>
240options CONFIG_MIN_NIOBUF=64 # <xsmall,small>
241options CONFIG_MIN_NIOBUF=32 # <bsmall>
242
243#
244# set maximum space used for packet buffers
245#
3e170ce0
A
246options CONFIG_NMBCLUSTERS="((1024 * 1024) / MCLBYTES)" # <large,xlarge>
247options CONFIG_NMBCLUSTERS="((1024 * 512) / MCLBYTES)" # <medium>
248options CONFIG_NMBCLUSTERS="((1024 * 256) / MCLBYTES)" # <bsmall,xsmall,small>
2d21ac55
A
249
250#
251# Configure size of TCP hash table
252#
253options CONFIG_TCBHASHSIZE=4096 # <medium,large,xlarge>
254options CONFIG_TCBHASHSIZE=128 # <xsmall,small,bsmall>
255
316670eb
A
256#
257# Configure bandwidth limiting sysctl
258#
259options CONFIG_ICMP_BANDLIM=250 # <medium,large,xlarge>
260options CONFIG_ICMP_BANDLIM=50 # <xsmall,small,bsmall>
261
2d21ac55 262#
cb323159 263# configurable async IO options
2d21ac55
A
264# CONFIG_AIO_MAX - system wide limit of async IO requests.
265# CONFIG_AIO_PROCESS_MAX - process limit of async IO requests.
266# CONFIG_AIO_THREAD_COUNT - number of async IO worker threads created.
267#
3e170ce0
A
268options CONFIG_AIO_MAX=360 # <xlarge>
269options CONFIG_AIO_MAX=180 # <large>
2d21ac55
A
270options CONFIG_AIO_MAX=90 # <medium>
271options CONFIG_AIO_MAX=45 # <small>
272options CONFIG_AIO_MAX=20 # <xsmall>
273options CONFIG_AIO_MAX=10 # <bsmall>
274
275options CONFIG_AIO_PROCESS_MAX=64 # <xlarge>
276options CONFIG_AIO_PROCESS_MAX=32 # <large>
277options CONFIG_AIO_PROCESS_MAX=16 # <medium>
278options CONFIG_AIO_PROCESS_MAX=12 # <small>
279options CONFIG_AIO_PROCESS_MAX=8 # <xsmall>
280options CONFIG_AIO_PROCESS_MAX=4 # <bsmall>
281
3e170ce0 282options CONFIG_AIO_THREAD_COUNT=16 # <xlarge>
2d21ac55
A
283options CONFIG_AIO_THREAD_COUNT=8 # <large>
284options CONFIG_AIO_THREAD_COUNT=4 # <medium>
285options CONFIG_AIO_THREAD_COUNT=3 # <small>
286options CONFIG_AIO_THREAD_COUNT=2 # <xsmall,bsmall>
287
3e170ce0
A
288options CONFIG_MAXVIFS=32 # <medium,large,xlarge>
289options CONFIG_MAXVIFS=16 # <small,xsmall>
290options CONFIG_MAXVIFS=2 # <bsmall>
2d21ac55
A
291
292options CONFIG_MFCTBLSIZ=256 # <medium,large,xlarge>
293options CONFIG_MFCTBLSIZ=128 # <small,xsmall>
294options CONFIG_MFCTBLSIZ=16 # <bsmall>
295
6d2010ae
A
296#
297# configurable kernel message buffer size
298#
5ba3f43e
A
299options CONFIG_MSG_BSIZE_REL=4096 # <bsmall,small,xsmall>
300options CONFIG_MSG_BSIZE_DEV=4096 # <bsmall,small,xsmall>
301options CONFIG_MSG_BSIZE_REL=16384 # <medium,large,xlarge>
302options CONFIG_MSG_BSIZE_DEV=131072 # <medium,large,xlarge>
303options CONFIG_MSG_BSIZE=CONFIG_MSG_BSIZE_REL # <!development,debug>
304options CONFIG_MSG_BSIZE=CONFIG_MSG_BSIZE_DEV # <development,debug>
6d2010ae 305
3e170ce0
A
306#
307# maximum size of the per-process Mach IPC table
308#
309options CONFIG_IPC_TABLE_ENTRIES_STEPS=64 # 137898 entries # <bsmall,small,xsmall>
310options CONFIG_IPC_TABLE_ENTRIES_STEPS=256 # 300714 entries # <medium,large,xlarge>
311
2d21ac55
A
312#
313# configurable kernel - use these options to strip strings from panic
314# and printf calls.
2d21ac55
A
315# no_printf_str - saves around 45K of kernel footprint.
316#
2d21ac55
A
317options CONFIG_NO_PRINTF_STRINGS # <no_printf_str>
318options CONFIG_NO_KPRINTF_STRINGS # <no_kprintf_str>
319
d9a64523
A
320#
321# configurable kernel - general switch to say we are building for an
322# embedded device
323#
324options CONFIG_EMBEDDED # <config_embedded>
325
fe8ab488 326
b7266188
A
327# support dynamic signing of code
328#
329options CONFIG_DYNAMIC_CODE_SIGNING # <dynamic_codesigning>
330
cb323159 331# enforce library validation on all processes.
fe8ab488
A
332#
333options CONFIG_ENFORCE_LIBRARY_VALIDATION # <config_library_validation>
334
335#
336# code decryption... used on embedded for app protection, DSMOS on desktop
337#
3e170ce0 338options CONFIG_CODE_DECRYPTION # <config_code_decryption>
fe8ab488 339
d1ecb069
A
340#
341# User Content Protection, used on embedded
342#
3e170ce0 343options CONFIG_PROTECT # <config_protect>
d1ecb069 344
d9a64523
A
345#allow write-protection of key page
346options CONFIG_KEYPAGE_WP # <config_keypage_wp>
347
cb323159
A
348#
349# allow vm_pageout_scan to dynamically adjust its priority based on priorities of waiters
350#
351options CONFIG_VPS_DYNAMIC_PRIO # <vps_dynamic_prio>
352
6d2010ae 353#
316670eb
A
354# enable per-process memory priority tracking
355#
3e170ce0 356options CONFIG_MEMORYSTATUS # <memorystatus>
316670eb
A
357
358#
359# enable jetsam - used on embedded
360#
3e170ce0
A
361options CONFIG_JETSAM # <jetsam>
362
39037602
A
363#
364# enable new link table implementation stats/debugging
365# (adds mesaureable overhead)
366#
367options CONFIG_LTABLE_STATS # <config_ltable_stats>
368options CONFIG_LTABLE_DEBUG # <config_ltable_debug>
369
3e170ce0
A
370#
371# enable new wait queue implementation stats / debugging
372#
373options CONFIG_WAITQ_STATS # <config_waitq_stats>
374options CONFIG_WAITQ_DEBUG # <config_waitq_debug>
316670eb
A
375
376#
377# enable freezing of suspended processes - used on embedded
6d2010ae 378#
3e170ce0 379options CONFIG_FREEZE # <freeze>
6d2010ae 380
3e170ce0 381options CHECK_CS_VALIDATION_BITMAP # <config_cs_validation_bitmap>
593a1d5f 382
fe8ab488
A
383#
384# enable detectiion of file cache thrashing - used on platforms with
385# dynamic VM compression enabled
386#
3e170ce0 387options CONFIG_PHANTOM_CACHE # <phantom_cache>
fe8ab488 388
316670eb
A
389#
390# memory pressure event support
316670eb
A
391#
392options VM_PRESSURE_EVENTS # <vm_pressure_events>
393
39037602
A
394options CONFIG_SECLUDED_MEMORY # <config_secluded_memory>
395
396options CONFIG_BACKGROUND_QUEUE # <config_background_queue>
397
d9a64523
A
398#
399# Ledger features
400#
401options CONFIG_LEDGER_INTERVAL_MAX # <config_ledger_interval_max>
402
fe8ab488
A
403#
404# I/O Scheduling
405#
406options CONFIG_IOSCHED # <config_iosched>
407
39037602
A
408#
409# Accounting for I/O usage
410#
411options CONFIG_IO_ACCOUNTING # <config_io_accounting>
412
39236c6e
A
413#
414# Enable inheritance of importance through specially marked mach ports and for file locks
415# For now debug is enabled wherever inheritance is
416#
417options IMPORTANCE_INHERITANCE # <importance_inheritance>
5ba3f43e
A
418options IMPORTANCE_TRACE # <importance_trace>
419options IMPORTANCE_DEBUG # <importance_debug>
39236c6e 420
3e170ce0 421options CONFIG_TELEMETRY # <config_telemetry>
39236c6e
A
422
423options CONFIG_PROC_UUID_POLICY # <config_proc_uuid_policy>
424
fe8ab488
A
425#
426# ECC data logging
cb323159 427#
3e170ce0 428options CONFIG_ECC_LOGGING # <config_ecc_logging>
fe8ab488 429
39037602
A
430#
431# Application core dumps
432#
433options CONFIG_COREDUMP # <config_coredump>
434
5ba3f43e
A
435#
436# Vnode guards
437#
438options CONFIG_VNGUARD # <config_vnguard>
439
1c79356b
A
440#
441# Ethernet (ARP)
442#
3e170ce0 443pseudo-device ether # <networking,inet,inet6>
1c79356b
A
444#
445# Network loopback device
446#
3e170ce0 447pseudo-device loop # <networking,inet,inet6>
1c79356b
A
448#
449# UCB pseudo terminal service
450#
2d21ac55
A
451pseudo-device pty 512 init pty_init # <xlarge>
452pseudo-device pty 256 init pty_init # <large>
453pseudo-device pty 128 init pty_init # <medium>
454pseudo-device pty 48 init pty_init # <small>
455pseudo-device pty 16 init pty_init # <xsmall>
456pseudo-device pty 8 init pty_init # <bsmall>
457#
458# Cloning pseudo terminal service
459#
460pseudo-device ptmx 1 init ptmx_init
9bccf70c
A
461
462#
463# vnode device
2d21ac55 464#
fe8ab488 465pseudo-device vndevice 4 init vndevice_init # <development,debug>
9bccf70c 466
55e303ae
A
467#
468# memory device
469pseudo-device mdevdevice 1 init mdevinit
470
9bccf70c 471#
1c79356b
A
472#
473# packet filter device
474#
39236c6e 475pseudo-device bpfilter 4 init bpf_init # <networking,inet,inet6>
1c79356b 476
91447636
A
477#
478# fsevents device
2d21ac55 479pseudo-device fsevents 1 init fsevents_init # <config_fse>
91447636 480
0b4e3aa0 481pseudo-device random 1 init random_init
2d21ac55
A
482pseudo-device dtrace 1 init dtrace_init # <config_dtrace>
483pseudo-device helper 1 init helper_init # <config_dtrace>
484pseudo-device lockstat 1 init lockstat_init # <config_dtrace>
0a7de745 485pseudo-device lockprof 1 init lockprof_init # <config_dtrace>
2d21ac55
A
486pseudo-device sdt 1 init sdt_init # <config_dtrace>
487pseudo-device systrace 1 init systrace_init # <config_dtrace>
488pseudo-device fbt 1 init fbt_init # <config_dtrace>
489pseudo-device profile_prvd 1 init profile_init # <config_dtrace>
fe8ab488 490
5ba3f43e 491
fe8ab488
A
492#
493# IOKit configuration options
494#
495
496options HIBERNATION # system hibernation # <hibernation>
3e170ce0
A
497options IOKITCPP # C++ implementation # <iokitcpp>
498options IOKITSTATS # IOKit statistics # <iokitstats>
499options IOTRACKING # IOKit tracking # <iotracking>
500options CONFIG_SLEEP # # <config_sleep>
fe8ab488 501options CONFIG_MAX_THREADS=64 # IOConfigThread threads
3e170ce0
A
502options NO_KEXTD # <no_kextd>
503options NO_KERNEL_HID # <no_kernel_hid>
fe8ab488
A
504
505#
506# Libkern configuration options
507#
508
509options LIBKERNCPP # C++ implementation # <libkerncpp>
d9a64523 510options CONFIG_BLOCKS # Blocks runtime # <config_blocks>
fe8ab488
A
511options CONFIG_KXLD # kxld/runtime linking of kexts # <config_kxld>
512options CONFIG_KEC_FIPS # Kernel External Components for FIPS compliance (KEC_FIPS) # <config_kec_fips>
513
514# Note that when adding this config option to an architecture, one MUST
515# add the architecture to the preprocessor test at the beginning of
516# libkern/kmod/cplus_{start.c,stop.c}.
517options CONFIG_STATIC_CPPINIT # Static library initializes kext cpp runtime # <config_static_cppinit>
518
519#
520# libsa configuration options
521#
522
523# CONFIG_KEXT_BASEMENT - alloc post boot loaded kexts after prelinked kexts
524#
3e170ce0 525options CONFIG_KEXT_BASEMENT # # <config_kext_basement>
fe8ab488 526
490019cf
A
527#
528# Persona Management
529#
530options CONFIG_PERSONAS # Persona management # <config_personas>
531options PERSONA_DEBUG # Persona debugging # <persona_debug>
532
fe8ab488
A
533#
534# security configuration options
535#
536
3e170ce0 537options CONFIG_MACF # Mandatory Access Control Framework # <config_macf>
fe8ab488 538options CONFIG_MACF_SOCKET_SUBSET # MAC socket subest (no labels) # <config_macf>
3e170ce0
A
539#options CONFIG_MACF_SOCKET # MAC socket labels # <config_macf>
540#options CONFIG_MACF_NET # mbuf # <config_macf>
541#options CONFIG_MACF_DEBUG # debug # <config_macf>
fe8ab488 542
3e170ce0 543options CONFIG_AUDIT # Kernel auditing # <config_audit>
fe8ab488 544
cb323159 545options CONFIG_ARCADE # Arcade validation support # <config_arcade>
fe8ab488
A
546
547#
548# MACH configuration options.
549#
550# TASK_SWAPPER enables code that manages demand for physical memory by
551# forcibly suspending tasks when the demand exceeds supply. This
552# option should be on.
553#
fe8ab488
A
554options TASK_SWAPPER # <task_swapper_disabled>
555
556#
557# This defines configuration options that are normally used only during
558# kernel code development and debugging. They add run-time error checks or
559# statistics gathering, which will slow down the system
560#
561##########################################################
562#
563# MACH_ASSERT controls the assert() and ASSERT() macros, used to verify the
564# consistency of various algorithms in the kernel. The performance impact
565# of this option is significant.
566#
567options MACH_ASSERT # # <mach_assert>
568#
569# MACH_DEBUG enables the mach_debug_server, a message interface used to
570# retrieve or control various statistics. This interface may expose data
571# structures that would not normally be allowed outside the kernel, and
572# MUST NOT be enabled on a released configuration.
573# Other options here enable information retrieval for specific subsystems
574#
575options MACH_DEBUG # IPC debugging interface # <mdebug>
576options MACH_IPC_DEBUG # Enable IPC debugging calls # <ipc_debug>
3e170ce0 577options MACH_VM_DEBUG # # <debug>
fe8ab488
A
578#
579# MACH_MP_DEBUG control the possible dead locks that may occur by controlling
580# that IPL level has been raised down to SPL0 after some calls to
581# hardclock device driver.
582#
3e170ce0 583options MACH_MP_DEBUG # # <debug>
fe8ab488
A
584#
585# ZONE_DEBUG keeps track of all zalloc()ed elements to perform further
586# operations on each element.
587#
588options ZONE_DEBUG # # <debug>
d9a64523 589options CONFIG_ZCACHE #Enable per-cpu caching for zones # <config_zcache>
fe8ab488
A
590options CONFIG_ZLEAKS # Live zone leak debugging # <zleaks>
591
fe8ab488
A
592#
593# CONFIG_TASK_ZONE_INFO allows per-task zone information to be extracted
594# Primarily useful for xnu debug and development.
595#
596options CONFIG_TASK_ZONE_INFO # <task_zone_info>
597#
598# CONFIG_DEBUGGER_FOR_ZONE_INFO restricts zone info so that it is only
599# available when the kernel is being debugged.
600#
601options CONFIG_DEBUGGER_FOR_ZONE_INFO # <debugger_for_zone_info>
cb323159 602#
fe8ab488
A
603# MACH_LDEBUG controls the internal consistency checks and
604# data gathering in the locking package. This also enables a debug-only
605# version of simple-locks on uniprocessor machines. The code size and
606# performance impact of this option is significant.
cb323159 607#
fe8ab488
A
608options MACH_LDEBUG # # <debug>
609
610#
611# configuration option for full, partial, or no kernel debug event tracing
612#
613options KDEBUG # kernel tracing # <kdebug>
614options IST_KDEBUG # limited tracing # <ist_kdebug>
3e170ce0 615options NO_KDEBUG # no kernel tracing # <no_kdebug>
fe8ab488
A
616
617#
618# CONFIG_DTRACE enables code needed to support DTrace. Currently this is
619# only used for delivery of traps/interrupts to DTrace.
620#
3e170ce0 621options CONFIG_DTRACE # # <config_dtrace>
fe8ab488 622
0a7de745
A
623options LOCK_STATS # # <lock_stats>
624
fe8ab488
A
625# kernel performance tracing
626options KPERF # <kperf>
627options KPC # <kpc>
628
5ba3f43e 629
813fb2f6
A
630options PGO # <pgo>
631
fe8ab488 632# MACH_COUNTERS enables code that handles various counters in the system.
cb323159 633#
3e170ce0 634options MACH_COUNTERS # # <debug>
fe8ab488
A
635
636# DEVELOPMENT define for development builds
3e170ce0 637options DEVELOPMENT # dev kernel # <development>
fe8ab488
A
638
639# DEBUG kernel
3e170ce0 640options DEBUG # general debugging code # <debug>
cb323159 641options CONFIG_NONFATAL_ASSERTS # non fatal asserts # <softasserts>
fe8ab488
A
642
643##########################################################
644#
645# This defines configuration options that are normally used only during
646# kernel code development and performance characterization. They add run-time
647# statistics gathering, which will slow down the system,
648#
649##########################################################
650#
651# MACH_IPC_STATS controls the collection of statistics in the MACH IPC
652# subsystem.
653#
654#options MACH_IPC_STATS
655#
656# MACH_CLUSTER_STATS controls the collection of various statistics concerning
657# the effectiveness and behavior of the clustered pageout and pagein
658# code.
659#
660#options MACH_CLUSTER_STATS
661
662options MACH_BSD # BSD subsystem on top of Mach # <mach_bsd>
663options IOKIT # # <iokit>
664
665#
cb323159 666# configurable kernel related resources (CONFIG_THREAD_MAX needs to stay in
fe8ab488
A
667# sync with bsd/conf/MASTER until we fix the config system... todo XXX
668#
669options CONFIG_THREAD_MAX=2560 # <medium,large,xlarge>
670options CONFIG_THREAD_MAX=1536 # <small,xsmall>
671options CONFIG_THREAD_MAX=1024 # <bsmall>
672
673options CONFIG_TASK_MAX=1024 # <medium,large,xlarge>
674options CONFIG_TASK_MAX=768 # <small,>
675options CONFIG_TASK_MAX=512 # <xsmall,bsmall>
676
0a7de745
A
677#
678# Minimum zone map size: 115 MB
679#
680options CONFIG_ZONE_MAP_MIN=120586240 # <xsmall,bsmall,small,medium,large,xlarge>
fe8ab488 681
cb323159
A
682# Sizes must be a power of two for the zhash to
683# be able to just mask off bits instead of mod
fe8ab488
A
684options CONFIG_ZLEAK_ALLOCATION_MAP_NUM=16384 #<medium,large,xlarge>
685options CONFIG_ZLEAK_ALLOCATION_MAP_NUM=8192 #<small,xsmall,bsmall>
686options CONFIG_ZLEAK_TRACE_MAP_NUM=8192 #<medium,large,xlarge>
687options CONFIG_ZLEAK_TRACE_MAP_NUM=4096 #<small,xsmall,bsmall>
688
689# vc_progress_white - make the progress gear white instead of black
690options CONFIG_VC_PROGRESS_WHITE # <vc_progress_white>
691
fe8ab488
A
692#
693# Timeshare scheduler implementations
694#
695options CONFIG_SCHED_TRADITIONAL # <config_sched_traditional>
696options CONFIG_SCHED_PROTO # <config_sched_proto>
697options CONFIG_SCHED_GRRR # <config_sched_grrr>
698options CONFIG_SCHED_GRRR_CORE # <config_sched_grrr>
699options CONFIG_SCHED_MULTIQ # <config_sched_multiq>
700options CONFIG_SCHED_TIMESHARE_CORE # <config_sched_traditional,config_sched_multiq>
cb323159 701options CONFIG_CLUTCH # <config_clutch>
fe8ab488 702
3e170ce0
A
703options CONFIG_SCHED_IDLE_IN_PLACE # <config_sched_idle_in_place>
704options CONFIG_SCHED_SFI # <config_sched_sfi>
fe8ab488 705options CONFIG_GZALLOC # <config_gzalloc>
3e170ce0 706options CONFIG_SCHED_DEFERRED_AST # <config_sched_deferred_ast>
fe8ab488
A
707
708# Enable allocation of contiguous physical memory through vm_map_enter_cpm()
3e170ce0 709options VM_CPM # <vm_cpm>
fe8ab488 710
3e170ce0 711options CONFIG_SKIP_PRECISE_USER_KERNEL_TIME # <config_skip_precise_user_kernel_time>
fe8ab488
A
712
713#
714# Switch to disable cpu, wakeup and high memory watermark monitors
715#
3e170ce0 716options CONFIG_NOMONITORS # <config_nomonitors>
fe8ab488 717
3e170ce0
A
718options MACH_KDP # KDP # <mach_kdp>
719options CONFIG_SERIAL_KDP # KDP over serial # <config_serial_kdp>
fe8ab488
A
720options CONFIG_KDP_INTERACTIVE_DEBUGGING # <kdp_interactive_debugging>
721
3e170ce0
A
722#
723# Kernel Power On Self Tests
724#
725options CONFIG_XNUPOST # <config_xnupost>
726
727#
728# Kernel proc reference instrumentation
729#
730options PROC_REF_DEBUG # <proc_ref_debug>
731
39037602
A
732#
733# Kernel OS reason debug instrumentation
734#
735options OS_REASON_DEBUG # <os_reason_debug>
736
fe8ab488
A
737#
738# Kernel Voucher Attr Manager for Activity Trace
739#
3e170ce0 740options CONFIG_ATM # <config_atm>
fe8ab488 741
fe8ab488
A
742# Group related tasks together into coalitions
743options CONFIG_COALITIONS # <config_coalitions>
744
3e170ce0
A
745# Enable support for sysdiagnose notifications
746options CONFIG_SYSDIAGNOSE # <config_sysdiagnose>
747
fe8ab488 748# Configurable Security Restrictions
3e170ce0 749options CONFIG_CSR # <config_csr>
fe8ab488
A
750
751#
752# Console options
753#
754options SERIAL_CONSOLE # bi-directional serial over UART
755options VIDEO_CONSOLE # uni-directional output over framebuffer
756
757#
758# Syscall options
759#
760options CONFIG_REQUIRES_U32_MUNGING # incoming U32 argument structures must be munged to match U64 # <config_requires_u32_munging>
5ba3f43e
A
761
762#
763# copyout() instrumentation
764#
765options COPYOUT_SHIM # Shim for copyout memory analysis via kext #<copyout_shim>
766
0a7de745 767#
cb323159 768# Enable hardware correlation of mach absolute time
0a7de745
A
769# across intel/arm boundary
770options CONFIG_MACH_BRIDGE_SEND_TIME # # <config_mach_bridge_send_time>
771options CONFIG_MACH_BRIDGE_RECV_TIME # # <config_mach_bridge_recv_time>
527f9951
A
772
773#
774# Telemetry for 32-bit process launch
775#
776options CONFIG_32BIT_TELEMETRY # # <config_32bit_telemetry>
d9a64523
A
777
778options CONFIG_QUIESCE_COUNTER # Support for _COMM_PAGE_CPU_QUIESCENT_COUNTER # <config_quiesce_counter>
779
cb323159
A
780#
781# Sanitizers
782#
783options CONFIG_KASAN # <config_kasan>
784options CONFIG_UBSAN # <config_ubsan>
785options CONFIG_KSANCOV # <config_ksancov>
786
787pseudo-device ksancov 1 init ksancov_init_dev # <config_ksancov>