options BOND # # <bond>
options PF # Packet Filter # <pf>
options PF_PKTHDR # PF tag inside mbuf pkthdr # <pf_pkthdr>
+options PKT_PRIORITY # Packet priority support # <pkt_priority>
options PFLOG # PF log interface # <pflog>
options IPDIVERT # Divert sockets (for NAT) # <ipdivert>
options IPFLOW # IP fast forwarding # <ipflow>
options TCP_DROP_SYNFIN # Drop TCP packets with SYN+FIN set # <tcpdrop_synfin>
options ICMP_BANDLIM # ICMP bandwidth limiting sysctl
options IFNET_INPUT_SANITY_CHK # allow dlil/ifnet input sanity check # <ifnet_input_chk>
+options IFNET_ROUTE_REFCNT # count route references to ifnet # <ifnet_route_refcnt>
options SYSV_SEM # SVID semaphores # <sysv_sem>
options SYSV_MSG # SVID messages # <sysv_msg>
options SYSV_SHM # SVID shared mem # <sysv_shm>
options DEVFS # devfs support # <devfs>
options JOURNALING # journaling support # <journaling>
options HFS_COMPRESSION # hfs compression # <hfs_compression>
+options CONFIG_HFS_TRIM # HFS trims unused blocks # <config_hfs_trim>
#
# file system features
options REV_ENDIAN_FS # Reverse Endian FS # <revfs>
options NAMEDSTREAMS # named stream vnop support # <namedstreams>
options CONFIG_VOLFS # volfs path support (legacy) # <config_volfs>
+options CONFIG_IMGSRC_ACCESS # source of imageboot dmg # <config_imgsrc_access>
#
# NFS support
options ZLIB # inflate/deflate support # <zlib>
+
makeoptions LIBDRIVER = "libDriver_kern.o" # <libdriver>
makeoptions LIBOBJC = "libkobjc.o" # <kernobjc>
options CONFIG_VFS_NAMES=3072 # <small,xsmall>
options CONFIG_VFS_NAMES=2048 # <bsmall>
+options CONFIG_MAX_CLUSTERS=8 # <xlarge,large,medium>
+options CONFIG_MAX_CLUSTERS=4 # <small,xsmall,bsmall>
+
#
# configurable kauth credential related resources
#
#
options CONFIG_ENFORCE_SIGNED_CODE # <config_embedded>
+# support dynamic signing of code
+#
+options CONFIG_DYNAMIC_CODE_SIGNING # <dynamic_codesigning>
+
#
# code decryption... used on embedded for app protection
# must be set in all the bsd/conf and osfmk/conf MASTER files
#
options CONFIG_CODE_DECRYPTION # <config_embedded>
+#
+# User Content Protection, used on embedded
+#
+
+options CONFIG_PROTECT # <config_protect>
+
#
# Ethernet (ARP)