diff options
Diffstat (limited to 'init/Kconfig')
| -rw-r--r-- | init/Kconfig | 38 |
1 files changed, 38 insertions, 0 deletions
diff --git a/init/Kconfig b/init/Kconfig index b56a125b5a76..d0e8bf5d6a4e 100644 --- a/init/Kconfig +++ b/init/Kconfig @@ -19,6 +19,9 @@ config GCC_VERSION config CC_IS_CLANG def_bool $(success,$(CC) --version | head -n 1 | grep -q clang) +config LD_IS_LLD + def_bool $(success,$(LD) -v | head -n 1 | grep -q LLD) + config CLANG_VERSION int default $(shell,$(srctree)/scripts/clang-version.sh $(CC)) @@ -1166,6 +1169,31 @@ menuconfig EXPERT environments which can tolerate a "non-standard" kernel. Only use this if you really know what you are doing. +config UPTIME_LIMITED_KERNEL + bool "Create a kernel with uptime limitations" + default n + help + Limit the amount of time a kernel can run. The associated UPTIME_LIMIT* + kernel config options should be used to tune the behaviour. + +config UPTIME_LIMIT_DURATION + int "Kernel uptime limit in minutes" + depends on UPTIME_LIMITED_KERNEL + range 0 14400 + default 0 + help + Define the uptime limitation on a kernel in minutes. Once + the defined time expires the kernel will emit a warning, cease + to be usable and eventually restart. The valid range is 0 (disable) + to 14400 (10 days) + +config UPTIME_LIMIT_KERNEL_REBOOT + bool "Reboot a time limited kernel at expiration" + depends on UPTIME_LIMITED_KERNEL + default y + help + Reboot an uptime limited kernel at expiration. + config UID16 bool "Enable 16-bit UID system calls" if EXPERT depends on HAVE_UID16 && MULTIUSER @@ -1474,6 +1502,16 @@ config BPF_JIT_ALWAYS_ON Enables BPF JIT and removes BPF interpreter to avoid speculative execution of BPF instructions by the interpreter +config BPF_UNPRIV_DEFAULT_OFF + bool "Disable unprivileged BPF by default" + depends on BPF_SYSCALL + help + Disables unprivileged BPF by default by setting the corresponding + /proc/sys/kernel/unprivileged_bpf_disabled knob to 2. An admin can + still reenable it by setting it to 0 later on, or permanently + disable it by setting it to 1 (from which no other transition to + 0 is possible anymore). + config USERFAULTFD bool "Enable userfaultfd() system call" select ANON_INODES |