xnu-4903.231.4.tar.gz
[apple/xnu.git] / config / MASTER
CommitLineData
1c79356b
A
1#
2# Mach Operating System
3# Copyright (c) 1986 Carnegie-Mellon University
d9a64523 4# Copyright 2001-2018 Apple Inc.
fe8ab488 5#
1c79356b
A
6# All rights reserved. The CMU software License Agreement
7# specifies the terms and conditions for use and redistribution.
8#
9#######################################################################
10#
11# Master machine independent configuration file.
12#
13# Specific configuration files are created based on this and
14# the machine specific master file using the doconf script.
15#
16# Any changes to the master configuration files will affect all
17# other configuration files based upon it.
18#
19#######################################################################
20#
21# To build a configuration, execute "doconf <configuration>."
22# Configurations are specified in the "Configurations:" section
23# of the MASTER and MASTER.* files as follows:
24#
25# <configuration> = [ <attribute0> <attribute1> ... <attributeN> ]
26#
27# Lines in the MASTER and MASTER.* files are selected based on
28# the attribute selector list, found in a comment at the end of
29# the line. This is a list of attributes separated by commas.
30# The "!" operator selects the line if none of the attributes are
31# specified.
32#
33# For example:
34#
35# <foo,bar> selects a line if "foo" or "bar" are specified.
36# <!foo,bar> selects a line if neither "foo" nor "bar" is
37# specified.
38#
39# Lines with no attributes specified are selected for all
40# configurations.
41#
42#######################################################################
43#
1c79356b
A
44# SYSTEM SIZE CONFIGURATION (select exactly one)
45#
46# xlarge = extra large scale system configuration
47# large = large scale system configuration
48# medium = medium scale system configuration
49# small = small scale system configuration
50# xsmall = extra small scale system configuration
2d21ac55 51# bsmall = special extra small scale system configuration
1c79356b
A
52#
53#######################################################################
1c79356b 54#
1c79356b 55
3e170ce0 56options INET # # <inet>
1c79356b
A
57options HW_AST # Hardware ast support # <hw_ast>
58options HW_FOOTPRINT # Cache footprint support # <hw_foot>
2d21ac55 59
1c79356b 60options MACH # Standard Mach features # <mach>
1c79356b 61options MACH_COMPAT # Vendor syscall compatibility # <mach>
1c79356b 62options MACH_FASTLINK # Fast symbolic links
1c79356b
A
63options MACH_HOST # Mach host (resource alloc.) # <host>
64options MACH_IPC_COMPAT # Enable old IPC interface # <ipc_compat>
1c79356b 65options MACH_IPC_TEST # Testing code/printfs # <ipc_test>
39037602 66options MACH_FLIPC # Fast-Local IPC # <mach_flipc>
1c79356b
A
67options MACH_NP # Mach IPC support # <np>
68options MACH_NBC # No buffer cache # <nbc>
1c79356b
A
69options MACH_NET # Fast network access # <mach_net>
70options MACH_XP # external pager support # <xp>
1c79356b 71options NO_DIRECT_RPC # for untyped mig servers #
1c79356b 72options LOOP # loopback support # <loop>
1c79356b 73options VLAN # # <vlan>
91447636 74options BOND # # <bond>
5ba3f43e 75options IF_FAKE # # <if_fake>
fe8ab488
A
76options AH_ALL_CRYPTO # AH all crypto algs # <ah_all_crypto>
77options IPCOMP_ZLIB # IP compression using zlib # <ipcomp_zlib>
b0d623f7 78options PF # Packet Filter # <pf>
3e170ce0 79options PF_ECN # PF use ECN marking # <pf_ecn>
b0d623f7 80options PFLOG # PF log interface # <pflog>
39236c6e 81options MEASURE_BW # interface bandwidth measurement # <measure_bw>
91447636 82options DUMMYNET # dummynet support # <dummynet>
2d21ac55 83options TRAFFIC_MGT # traffic management support # <traffic_mgt>
1c79356b 84options MULTICAST # Internet Protocol Class-D $
9bccf70c 85options TCPDEBUG # TCP debug # <tcpdebug>
9bccf70c
A
86options TCP_DROP_SYNFIN # Drop TCP packets with SYN+FIN set # <tcpdrop_synfin>
87options ICMP_BANDLIM # ICMP bandwidth limiting sysctl
2d21ac55 88options IFNET_INPUT_SANITY_CHK # allow dlil/ifnet input sanity check # <ifnet_input_chk>
39236c6e
A
89options MULTIPATH # Multipath domain # <multipath>
90options MPTCP # Multipath TCP # <mptcp>
3e170ce0
A
91options SYSV_SEM # SVID semaphores # <sysv_sem>
92options SYSV_MSG # SVID messages # <sysv_msg>
93options SYSV_SHM # SVID shared mem # <sysv_shm>
94options PSYNCH # pthread synch # <psynch>
39236c6e 95options FLOW_DIVERT # <flow_divert>
fe8ab488
A
96options NECP # <necp>
97options CONTENT_FILTER # # <content_filter>
98options PACKET_MANGLER # # <packet_mangler>
39037602 99
2d21ac55
A
100# secure_kernel - secure kernel from user programs
101options SECURE_KERNEL # <secure_kernel>
1c79356b 102
b0d623f7
A
103options OLD_SEMWAIT_SIGNAL # old semwait_signal handler
104
1c79356b
A
105#
106# 4.4 general kernel
107#
3e170ce0
A
108options SOCKETS # socket support # <inet, inet6>
109options DIAGNOSTIC # diagnostics # <diagnostic>
110options GPROF # build profiling # <profile>
fe8ab488 111options PROFILE # kernel profiling # <profile>
2d21ac55 112options SENDFILE # sendfile # <sendfile>
3e170ce0 113options NETWORKING # networking layer # <inet, inet6>
2d21ac55
A
114options CONFIG_FSE # file system events # <config_fse>
115options CONFIG_IMAGEBOOT # local image boot # <config_imageboot>
2d21ac55 116options CONFIG_MBUF_JUMBO # jumbo cluster pool # <config_mbuf_jumbo>
593a1d5f
A
117
118options CONFIG_WORKQUEUE # <config_workqueue>
d9a64523 119options CONFIG_WORKLOOP_DEBUG # <config_workloop_debug>
1c79356b
A
120
121#
122# 4.4 filesystems
123#
3e170ce0 124options MOCKFS # Boot from an executable # <mockfs>
1c79356b 125options FIFO # fifo support # <fifo>
1c79356b 126options FDESC # fdesc_fs support # <fdesc>
1c79356b 127options DEVFS # devfs support # <devfs>
490019cf 128options ROUTEFS # routefs support # <routefs>
39037602
A
129options NULLFS # nullfs support # <nullfs>
130options FS_COMPRESSION # fs compression # <fs_compression>
3e170ce0 131options CONFIG_DEV_KMEM # /dev/kmem device for reading KVA # <config_dev_kmem>
2d21ac55
A
132
133#
134# file system features
135#
136options QUOTA # file system quotas # <quota>
2d21ac55 137options NAMEDSTREAMS # named stream vnop support # <namedstreams>
39236c6e 138options CONFIG_APPLEDOUBLE # apple double support # <config_appledouble>
2d21ac55 139options CONFIG_VOLFS # volfs path support (legacy) # <config_volfs>
b7266188 140options CONFIG_IMGSRC_ACCESS # source of imageboot dmg # <config_imgsrc_access>
6d2010ae 141options CONFIG_TRIGGERS # trigger vnodes # <config_triggers>
316670eb
A
142options CONFIG_EXT_RESOLVER # e.g. memberd # <config_ext_resolver>
143options CONFIG_SEARCHFS # searchfs syscall support # <config_searchfs>
813fb2f6 144options CONFIG_MNT_SUID # allow suid binaries # <config_mnt_suid>
d9a64523 145options CONFIG_MNT_ROOTSNAP # allow rooting from snapshot # <config_mnt_rootsnap>
1c79356b
A
146
147#
148# NFS support
149#
2d21ac55
A
150options NFSCLIENT # Be an NFS client # <nfsclient>
151options NFSSERVER # Be an NFS server # <nfsserver>
1c79356b 152
1c79356b
A
153#
154# Machine Independent Apple Features
155#
3e170ce0 156profile # build a profiling kernel # <profile>
1c79356b
A
157
158#
9bccf70c 159# IPv6 Support
1c79356b 160#
3e170ce0
A
161options "INET6" # kernel IPv6 Support # <inet6>
162options IPV6SEND # Secure Neighbor Discovery # <ipv6send>
163options IPSEC # IP security # <ipsec>
164options IPSEC_ESP # IP security # <ipsec>
165options "IPV6FIREWALL" # IPv6 Firewall Feature # <ipv6firewall>
91447636
A
166options "IPV6FIREWALL_DEFAULT_TO_ACCEPT" #IPv6 Firewall Feature # <ipv6firewall>
167#options "IPV6FIREWALL_VERBOSE" #IPv6 Firewall Feature # <ipv6firewall>
9bccf70c 168
3e170ce0
A
169pseudo-device gif 1 # <gif>
170pseudo-device dummy 2 # <dummy>
171pseudo-device stf 1 # <stf>
9bccf70c 172
3e170ce0
A
173options CRYPTO # <ipsec,crypto>
174options CRYPTO_SHA2 # <crypto_sha2>
175options ENCRYPTED_SWAP # <encrypted_swap>
2d21ac55 176
d9a64523
A
177options CONFIG_IMG4 # <config_img4>
178
3e170ce0 179options ZLIB # inflate/deflate support # <zlib>
1c79356b 180
3e170ce0 181options IF_BRIDGE # <if_bridge>
b7266188 182
2d21ac55
A
183#
184# configurable kernel event related resources
185#
186options CONFIG_KN_HASHSIZE=64 # <medium,large,xlarge>
187options CONFIG_KN_HASHSIZE=48 # <small,xsmall>
188options CONFIG_KN_HASHSIZE=20 # <bsmall>
189
190#
191# configurable vfs related resources
192# CONFIG_VNODES - used to pre allocate vnode related resources
2d21ac55
A
193# CONFIG_NC_HASH - name cache hash table allocation
194# CONFIG_VFS_NAMES - name strings
195#
196# 263168 magic number for medium CONFIG_VNODES is based on memory
197# Number vnodes is (memsize/64k) + 1024
198# This is the calculation that is used by launchd in tiger
199# we are clipping the max based on 16G
200# ie ((16*1024*1024*1024)/(64 *1024)) + 1024 = 263168;
201
202options CONFIG_VNODES=263168 # <large,xlarge>
203options CONFIG_VNODES=263168 # <medium>
204options CONFIG_VNODES=10240 # <small>
3e170ce0 205options CONFIG_VNODES=750 # <bsmall>
2d21ac55 206
2d21ac55
A
207options CONFIG_NC_HASH=5120 # <large,xlarge>
208options CONFIG_NC_HASH=4096 # <medium>
209options CONFIG_NC_HASH=2048 # <small,xsmall>
210options CONFIG_NC_HASH=1024 # <bsmall>
211
212options CONFIG_VFS_NAMES=5120 # <large,xlarge>
213options CONFIG_VFS_NAMES=4096 # <medium>
214options CONFIG_VFS_NAMES=3072 # <small,xsmall>
215options CONFIG_VFS_NAMES=2048 # <bsmall>
216
b7266188
A
217options CONFIG_MAX_CLUSTERS=8 # <xlarge,large,medium>
218options CONFIG_MAX_CLUSTERS=4 # <small,xsmall,bsmall>
219
2d21ac55
A
220#
221# configurable options for minumum number of buffers for kernel memory
222#
223options CONFIG_MIN_NBUF=256 # <medium,large,xlarge>
224options CONFIG_MIN_NBUF=128 # <small>
225options CONFIG_MIN_NBUF=80 # <xsmall>
226options CONFIG_MIN_NBUF=64 # <bsmall>
227
228options CONFIG_MIN_NIOBUF=128 # <medium,large,xlarge>
229options CONFIG_MIN_NIOBUF=64 # <xsmall,small>
230options CONFIG_MIN_NIOBUF=32 # <bsmall>
231
232#
233# set maximum space used for packet buffers
234#
3e170ce0
A
235options CONFIG_NMBCLUSTERS="((1024 * 1024) / MCLBYTES)" # <large,xlarge>
236options CONFIG_NMBCLUSTERS="((1024 * 512) / MCLBYTES)" # <medium>
237options CONFIG_NMBCLUSTERS="((1024 * 256) / MCLBYTES)" # <bsmall,xsmall,small>
2d21ac55
A
238
239#
240# Configure size of TCP hash table
241#
242options CONFIG_TCBHASHSIZE=4096 # <medium,large,xlarge>
243options CONFIG_TCBHASHSIZE=128 # <xsmall,small,bsmall>
244
316670eb
A
245#
246# Configure bandwidth limiting sysctl
247#
248options CONFIG_ICMP_BANDLIM=250 # <medium,large,xlarge>
249options CONFIG_ICMP_BANDLIM=50 # <xsmall,small,bsmall>
250
2d21ac55
A
251#
252# configurable async IO options
253# CONFIG_AIO_MAX - system wide limit of async IO requests.
254# CONFIG_AIO_PROCESS_MAX - process limit of async IO requests.
255# CONFIG_AIO_THREAD_COUNT - number of async IO worker threads created.
256#
3e170ce0
A
257options CONFIG_AIO_MAX=360 # <xlarge>
258options CONFIG_AIO_MAX=180 # <large>
2d21ac55
A
259options CONFIG_AIO_MAX=90 # <medium>
260options CONFIG_AIO_MAX=45 # <small>
261options CONFIG_AIO_MAX=20 # <xsmall>
262options CONFIG_AIO_MAX=10 # <bsmall>
263
264options CONFIG_AIO_PROCESS_MAX=64 # <xlarge>
265options CONFIG_AIO_PROCESS_MAX=32 # <large>
266options CONFIG_AIO_PROCESS_MAX=16 # <medium>
267options CONFIG_AIO_PROCESS_MAX=12 # <small>
268options CONFIG_AIO_PROCESS_MAX=8 # <xsmall>
269options CONFIG_AIO_PROCESS_MAX=4 # <bsmall>
270
3e170ce0 271options CONFIG_AIO_THREAD_COUNT=16 # <xlarge>
2d21ac55
A
272options CONFIG_AIO_THREAD_COUNT=8 # <large>
273options CONFIG_AIO_THREAD_COUNT=4 # <medium>
274options CONFIG_AIO_THREAD_COUNT=3 # <small>
275options CONFIG_AIO_THREAD_COUNT=2 # <xsmall,bsmall>
276
3e170ce0
A
277options CONFIG_MAXVIFS=32 # <medium,large,xlarge>
278options CONFIG_MAXVIFS=16 # <small,xsmall>
279options CONFIG_MAXVIFS=2 # <bsmall>
2d21ac55
A
280
281options CONFIG_MFCTBLSIZ=256 # <medium,large,xlarge>
282options CONFIG_MFCTBLSIZ=128 # <small,xsmall>
283options CONFIG_MFCTBLSIZ=16 # <bsmall>
284
6d2010ae
A
285#
286# configurable kernel message buffer size
287#
5ba3f43e
A
288options CONFIG_MSG_BSIZE_REL=4096 # <bsmall,small,xsmall>
289options CONFIG_MSG_BSIZE_DEV=4096 # <bsmall,small,xsmall>
290options CONFIG_MSG_BSIZE_REL=16384 # <medium,large,xlarge>
291options CONFIG_MSG_BSIZE_DEV=131072 # <medium,large,xlarge>
292options CONFIG_MSG_BSIZE=CONFIG_MSG_BSIZE_REL # <!development,debug>
293options CONFIG_MSG_BSIZE=CONFIG_MSG_BSIZE_DEV # <development,debug>
6d2010ae 294
3e170ce0
A
295#
296# maximum size of the per-process Mach IPC table
297#
298options CONFIG_IPC_TABLE_ENTRIES_STEPS=64 # 137898 entries # <bsmall,small,xsmall>
299options CONFIG_IPC_TABLE_ENTRIES_STEPS=256 # 300714 entries # <medium,large,xlarge>
300
2d21ac55
A
301#
302# configurable kernel - use these options to strip strings from panic
303# and printf calls.
2d21ac55
A
304# no_printf_str - saves around 45K of kernel footprint.
305#
2d21ac55
A
306options CONFIG_NO_PRINTF_STRINGS # <no_printf_str>
307options CONFIG_NO_KPRINTF_STRINGS # <no_kprintf_str>
308
6d2010ae
A
309#
310# use finer-grained lock groups for the proc subsystem
311#
312options CONFIG_FINE_LOCK_GROUPS # <medium,large,xlarge>
313
d9a64523
A
314#
315# configurable kernel - general switch to say we are building for an
316# embedded device
317#
318options CONFIG_EMBEDDED # <config_embedded>
319
fe8ab488 320
b7266188
A
321# support dynamic signing of code
322#
323options CONFIG_DYNAMIC_CODE_SIGNING # <dynamic_codesigning>
324
fe8ab488
A
325# enforce library validation on all processes.
326#
327options CONFIG_ENFORCE_LIBRARY_VALIDATION # <config_library_validation>
328
329#
330# code decryption... used on embedded for app protection, DSMOS on desktop
331#
3e170ce0 332options CONFIG_CODE_DECRYPTION # <config_code_decryption>
fe8ab488 333
d1ecb069
A
334#
335# User Content Protection, used on embedded
336#
3e170ce0 337options CONFIG_PROTECT # <config_protect>
d1ecb069 338
d9a64523
A
339#allow write-protection of key page
340options CONFIG_KEYPAGE_WP # <config_keypage_wp>
341
6d2010ae 342#
316670eb
A
343# enable per-process memory priority tracking
344#
3e170ce0 345options CONFIG_MEMORYSTATUS # <memorystatus>
316670eb
A
346
347#
348# enable jetsam - used on embedded
349#
3e170ce0
A
350options CONFIG_JETSAM # <jetsam>
351
39037602
A
352#
353# enable new link table implementation stats/debugging
354# (adds mesaureable overhead)
355#
356options CONFIG_LTABLE_STATS # <config_ltable_stats>
357options CONFIG_LTABLE_DEBUG # <config_ltable_debug>
358
3e170ce0
A
359#
360# enable new wait queue implementation stats / debugging
361#
362options CONFIG_WAITQ_STATS # <config_waitq_stats>
363options CONFIG_WAITQ_DEBUG # <config_waitq_debug>
316670eb
A
364
365#
366# enable freezing of suspended processes - used on embedded
6d2010ae 367#
3e170ce0 368options CONFIG_FREEZE # <freeze>
6d2010ae 369
3e170ce0 370options CHECK_CS_VALIDATION_BITMAP # <config_cs_validation_bitmap>
593a1d5f 371
fe8ab488
A
372#
373# enable detectiion of file cache thrashing - used on platforms with
374# dynamic VM compression enabled
375#
3e170ce0 376options CONFIG_PHANTOM_CACHE # <phantom_cache>
fe8ab488 377
316670eb
A
378#
379# memory pressure event support
316670eb
A
380#
381options VM_PRESSURE_EVENTS # <vm_pressure_events>
382
39037602
A
383options CONFIG_SECLUDED_MEMORY # <config_secluded_memory>
384
385options CONFIG_BACKGROUND_QUEUE # <config_background_queue>
386
d9a64523
A
387#
388# Ledger features
389#
390options CONFIG_LEDGER_INTERVAL_MAX # <config_ledger_interval_max>
391
fe8ab488
A
392#
393# I/O Scheduling
394#
395options CONFIG_IOSCHED # <config_iosched>
396
39037602
A
397#
398# Accounting for I/O usage
399#
400options CONFIG_IO_ACCOUNTING # <config_io_accounting>
401
39236c6e
A
402#
403# Enable inheritance of importance through specially marked mach ports and for file locks
404# For now debug is enabled wherever inheritance is
405#
406options IMPORTANCE_INHERITANCE # <importance_inheritance>
5ba3f43e
A
407options IMPORTANCE_TRACE # <importance_trace>
408options IMPORTANCE_DEBUG # <importance_debug>
39236c6e 409
3e170ce0 410options CONFIG_TELEMETRY # <config_telemetry>
39236c6e
A
411
412options CONFIG_PROC_UUID_POLICY # <config_proc_uuid_policy>
413
fe8ab488
A
414#
415# ECC data logging
416#
3e170ce0 417options CONFIG_ECC_LOGGING # <config_ecc_logging>
fe8ab488 418
39037602
A
419#
420# Application core dumps
421#
422options CONFIG_COREDUMP # <config_coredump>
423
5ba3f43e
A
424#
425# Vnode guards
426#
427options CONFIG_VNGUARD # <config_vnguard>
428
1c79356b
A
429#
430# Ethernet (ARP)
431#
3e170ce0 432pseudo-device ether # <networking,inet,inet6>
1c79356b
A
433#
434# Network loopback device
435#
3e170ce0 436pseudo-device loop # <networking,inet,inet6>
1c79356b
A
437#
438# UCB pseudo terminal service
439#
2d21ac55
A
440pseudo-device pty 512 init pty_init # <xlarge>
441pseudo-device pty 256 init pty_init # <large>
442pseudo-device pty 128 init pty_init # <medium>
443pseudo-device pty 48 init pty_init # <small>
444pseudo-device pty 16 init pty_init # <xsmall>
445pseudo-device pty 8 init pty_init # <bsmall>
446#
447# Cloning pseudo terminal service
448#
449pseudo-device ptmx 1 init ptmx_init
9bccf70c
A
450
451#
452# vnode device
2d21ac55 453#
fe8ab488 454pseudo-device vndevice 4 init vndevice_init # <development,debug>
9bccf70c 455
55e303ae
A
456#
457# memory device
458pseudo-device mdevdevice 1 init mdevinit
459
9bccf70c 460#
1c79356b
A
461#
462# packet filter device
463#
39236c6e 464pseudo-device bpfilter 4 init bpf_init # <networking,inet,inet6>
1c79356b 465
91447636
A
466#
467# fsevents device
2d21ac55 468pseudo-device fsevents 1 init fsevents_init # <config_fse>
91447636 469
0b4e3aa0 470pseudo-device random 1 init random_init
2d21ac55
A
471pseudo-device dtrace 1 init dtrace_init # <config_dtrace>
472pseudo-device helper 1 init helper_init # <config_dtrace>
473pseudo-device lockstat 1 init lockstat_init # <config_dtrace>
474pseudo-device sdt 1 init sdt_init # <config_dtrace>
475pseudo-device systrace 1 init systrace_init # <config_dtrace>
476pseudo-device fbt 1 init fbt_init # <config_dtrace>
477pseudo-device profile_prvd 1 init profile_init # <config_dtrace>
fe8ab488 478
5ba3f43e 479
fe8ab488
A
480#
481# IOKit configuration options
482#
483
484options HIBERNATION # system hibernation # <hibernation>
3e170ce0
A
485options IOKITCPP # C++ implementation # <iokitcpp>
486options IOKITSTATS # IOKit statistics # <iokitstats>
487options IOTRACKING # IOKit tracking # <iotracking>
488options CONFIG_SLEEP # # <config_sleep>
fe8ab488 489options CONFIG_MAX_THREADS=64 # IOConfigThread threads
3e170ce0
A
490options NO_KEXTD # <no_kextd>
491options NO_KERNEL_HID # <no_kernel_hid>
fe8ab488
A
492
493#
494# Libkern configuration options
495#
496
497options LIBKERNCPP # C++ implementation # <libkerncpp>
d9a64523 498options CONFIG_BLOCKS # Blocks runtime # <config_blocks>
fe8ab488
A
499options CONFIG_KXLD # kxld/runtime linking of kexts # <config_kxld>
500options CONFIG_KEC_FIPS # Kernel External Components for FIPS compliance (KEC_FIPS) # <config_kec_fips>
501
502# Note that when adding this config option to an architecture, one MUST
503# add the architecture to the preprocessor test at the beginning of
504# libkern/kmod/cplus_{start.c,stop.c}.
505options CONFIG_STATIC_CPPINIT # Static library initializes kext cpp runtime # <config_static_cppinit>
506
507#
508# libsa configuration options
509#
510
511# CONFIG_KEXT_BASEMENT - alloc post boot loaded kexts after prelinked kexts
512#
3e170ce0 513options CONFIG_KEXT_BASEMENT # # <config_kext_basement>
fe8ab488 514
490019cf
A
515#
516# Persona Management
517#
518options CONFIG_PERSONAS # Persona management # <config_personas>
519options PERSONA_DEBUG # Persona debugging # <persona_debug>
520
fe8ab488
A
521#
522# security configuration options
523#
524
3e170ce0 525options CONFIG_MACF # Mandatory Access Control Framework # <config_macf>
fe8ab488 526options CONFIG_MACF_SOCKET_SUBSET # MAC socket subest (no labels) # <config_macf>
3e170ce0
A
527#options CONFIG_MACF_SOCKET # MAC socket labels # <config_macf>
528#options CONFIG_MACF_NET # mbuf # <config_macf>
529#options CONFIG_MACF_DEBUG # debug # <config_macf>
fe8ab488 530
3e170ce0 531options CONFIG_AUDIT # Kernel auditing # <config_audit>
fe8ab488
A
532
533
534#
535# MACH configuration options.
536#
537# TASK_SWAPPER enables code that manages demand for physical memory by
538# forcibly suspending tasks when the demand exceeds supply. This
539# option should be on.
540#
fe8ab488
A
541options TASK_SWAPPER # <task_swapper_disabled>
542
543#
544# This defines configuration options that are normally used only during
545# kernel code development and debugging. They add run-time error checks or
546# statistics gathering, which will slow down the system
547#
548##########################################################
549#
550# MACH_ASSERT controls the assert() and ASSERT() macros, used to verify the
551# consistency of various algorithms in the kernel. The performance impact
552# of this option is significant.
553#
554options MACH_ASSERT # # <mach_assert>
555#
556# MACH_DEBUG enables the mach_debug_server, a message interface used to
557# retrieve or control various statistics. This interface may expose data
558# structures that would not normally be allowed outside the kernel, and
559# MUST NOT be enabled on a released configuration.
560# Other options here enable information retrieval for specific subsystems
561#
562options MACH_DEBUG # IPC debugging interface # <mdebug>
563options MACH_IPC_DEBUG # Enable IPC debugging calls # <ipc_debug>
3e170ce0 564options MACH_VM_DEBUG # # <debug>
fe8ab488
A
565#
566# MACH_MP_DEBUG control the possible dead locks that may occur by controlling
567# that IPL level has been raised down to SPL0 after some calls to
568# hardclock device driver.
569#
3e170ce0 570options MACH_MP_DEBUG # # <debug>
fe8ab488
A
571#
572# ZONE_DEBUG keeps track of all zalloc()ed elements to perform further
573# operations on each element.
574#
575options ZONE_DEBUG # # <debug>
d9a64523 576options CONFIG_ZCACHE #Enable per-cpu caching for zones # <config_zcache>
fe8ab488
A
577options CONFIG_ZLEAKS # Live zone leak debugging # <zleaks>
578
fe8ab488
A
579#
580# CONFIG_TASK_ZONE_INFO allows per-task zone information to be extracted
581# Primarily useful for xnu debug and development.
582#
583options CONFIG_TASK_ZONE_INFO # <task_zone_info>
584#
585# CONFIG_DEBUGGER_FOR_ZONE_INFO restricts zone info so that it is only
586# available when the kernel is being debugged.
587#
588options CONFIG_DEBUGGER_FOR_ZONE_INFO # <debugger_for_zone_info>
589#
590# XPR_DEBUG enables the gathering of data through the XPR macros inserted
591# into various subsystems. This option is normally only enabled for
592# specific performance or behavior studies, as the overhead in both
593# code and data space is large. The data is normally retrieved through
594# the kernel debugger (kdb) or by reading /dev/kmem.
595#
596options XPR_DEBUG # # <debug>
597#
598# MACH_LDEBUG controls the internal consistency checks and
599# data gathering in the locking package. This also enables a debug-only
600# version of simple-locks on uniprocessor machines. The code size and
601# performance impact of this option is significant.
602#
603options MACH_LDEBUG # # <debug>
604
605#
606# configuration option for full, partial, or no kernel debug event tracing
607#
608options KDEBUG # kernel tracing # <kdebug>
609options IST_KDEBUG # limited tracing # <ist_kdebug>
3e170ce0 610options NO_KDEBUG # no kernel tracing # <no_kdebug>
fe8ab488
A
611
612#
613# CONFIG_DTRACE enables code needed to support DTrace. Currently this is
614# only used for delivery of traps/interrupts to DTrace.
615#
3e170ce0 616options CONFIG_DTRACE # # <config_dtrace>
fe8ab488
A
617
618# kernel performance tracing
619options KPERF # <kperf>
620options KPC # <kpc>
621
5ba3f43e 622
813fb2f6
A
623options PGO # <pgo>
624
fe8ab488
A
625# MACH_COUNTERS enables code that handles various counters in the system.
626#
3e170ce0 627options MACH_COUNTERS # # <debug>
fe8ab488
A
628
629# DEVELOPMENT define for development builds
3e170ce0 630options DEVELOPMENT # dev kernel # <development>
fe8ab488
A
631
632# DEBUG kernel
3e170ce0 633options DEBUG # general debugging code # <debug>
fe8ab488
A
634
635##########################################################
636#
637# This defines configuration options that are normally used only during
638# kernel code development and performance characterization. They add run-time
639# statistics gathering, which will slow down the system,
640#
641##########################################################
642#
643# MACH_IPC_STATS controls the collection of statistics in the MACH IPC
644# subsystem.
645#
646#options MACH_IPC_STATS
647#
648# MACH_CLUSTER_STATS controls the collection of various statistics concerning
649# the effectiveness and behavior of the clustered pageout and pagein
650# code.
651#
652#options MACH_CLUSTER_STATS
653
654options MACH_BSD # BSD subsystem on top of Mach # <mach_bsd>
655options IOKIT # # <iokit>
656
657#
658# configurable kernel related resources (CONFIG_THREAD_MAX needs to stay in
659# sync with bsd/conf/MASTER until we fix the config system... todo XXX
660#
661options CONFIG_THREAD_MAX=2560 # <medium,large,xlarge>
662options CONFIG_THREAD_MAX=1536 # <small,xsmall>
663options CONFIG_THREAD_MAX=1024 # <bsmall>
664
665options CONFIG_TASK_MAX=1024 # <medium,large,xlarge>
666options CONFIG_TASK_MAX=768 # <small,>
667options CONFIG_TASK_MAX=512 # <xsmall,bsmall>
668
669options CONFIG_ZONE_MAP_MIN=12582912 # <medium,large,xlarge>
670options CONFIG_ZONE_MAP_MIN=6291456 # <small>
671options CONFIG_ZONE_MAP_MIN=1048576 # <xsmall,bsmall>
672
673# Sizes must be a power of two for the zhash to
674# be able to just mask off bits instead of mod
675options CONFIG_ZLEAK_ALLOCATION_MAP_NUM=16384 #<medium,large,xlarge>
676options CONFIG_ZLEAK_ALLOCATION_MAP_NUM=8192 #<small,xsmall,bsmall>
677options CONFIG_ZLEAK_TRACE_MAP_NUM=8192 #<medium,large,xlarge>
678options CONFIG_ZLEAK_TRACE_MAP_NUM=4096 #<small,xsmall,bsmall>
679
680# vc_progress_white - make the progress gear white instead of black
681options CONFIG_VC_PROGRESS_WHITE # <vc_progress_white>
682
fe8ab488
A
683#
684# Timeshare scheduler implementations
685#
686options CONFIG_SCHED_TRADITIONAL # <config_sched_traditional>
687options CONFIG_SCHED_PROTO # <config_sched_proto>
688options CONFIG_SCHED_GRRR # <config_sched_grrr>
689options CONFIG_SCHED_GRRR_CORE # <config_sched_grrr>
690options CONFIG_SCHED_MULTIQ # <config_sched_multiq>
691options CONFIG_SCHED_TIMESHARE_CORE # <config_sched_traditional,config_sched_multiq>
fe8ab488 692
3e170ce0
A
693options CONFIG_SCHED_IDLE_IN_PLACE # <config_sched_idle_in_place>
694options CONFIG_SCHED_SFI # <config_sched_sfi>
fe8ab488 695options CONFIG_GZALLOC # <config_gzalloc>
3e170ce0 696options CONFIG_SCHED_DEFERRED_AST # <config_sched_deferred_ast>
fe8ab488
A
697
698# Enable allocation of contiguous physical memory through vm_map_enter_cpm()
3e170ce0 699options VM_CPM # <vm_cpm>
fe8ab488 700
3e170ce0 701options CONFIG_SKIP_PRECISE_USER_KERNEL_TIME # <config_skip_precise_user_kernel_time>
fe8ab488
A
702
703#
704# Switch to disable cpu, wakeup and high memory watermark monitors
705#
3e170ce0 706options CONFIG_NOMONITORS # <config_nomonitors>
fe8ab488 707
3e170ce0
A
708options MACH_KDP # KDP # <mach_kdp>
709options CONFIG_SERIAL_KDP # KDP over serial # <config_serial_kdp>
fe8ab488
A
710options CONFIG_KDP_INTERACTIVE_DEBUGGING # <kdp_interactive_debugging>
711
3e170ce0
A
712#
713# Kernel Power On Self Tests
714#
715options CONFIG_XNUPOST # <config_xnupost>
716
717#
718# Kernel proc reference instrumentation
719#
720options PROC_REF_DEBUG # <proc_ref_debug>
721
39037602
A
722#
723# Kernel OS reason debug instrumentation
724#
725options OS_REASON_DEBUG # <os_reason_debug>
726
fe8ab488
A
727#
728# Kernel Voucher Attr Manager for Activity Trace
729#
3e170ce0 730options CONFIG_ATM # <config_atm>
fe8ab488 731
fe8ab488
A
732# Group related tasks together into coalitions
733options CONFIG_COALITIONS # <config_coalitions>
734
3e170ce0
A
735# Enable support for sysdiagnose notifications
736options CONFIG_SYSDIAGNOSE # <config_sysdiagnose>
737
fe8ab488 738# Configurable Security Restrictions
3e170ce0 739options CONFIG_CSR # <config_csr>
fe8ab488
A
740
741#
742# Console options
743#
744options SERIAL_CONSOLE # bi-directional serial over UART
745options VIDEO_CONSOLE # uni-directional output over framebuffer
746
747#
748# Syscall options
749#
750options CONFIG_REQUIRES_U32_MUNGING # incoming U32 argument structures must be munged to match U64 # <config_requires_u32_munging>
5ba3f43e
A
751
752#
753# copyout() instrumentation
754#
755options COPYOUT_SHIM # Shim for copyout memory analysis via kext #<copyout_shim>
756
527f9951
A
757
758#
759# Telemetry for 32-bit process launch
760#
761options CONFIG_32BIT_TELEMETRY # # <config_32bit_telemetry>
d9a64523
A
762
763options CONFIG_QUIESCE_COUNTER # Support for _COMM_PAGE_CPU_QUIESCENT_COUNTER # <config_quiesce_counter>
764