2007-03-09 01:38:02 +03:00
|
|
|
# $NetBSD: PARALLELS,v 1.12 2007/03/08 22:38:02 jmmv Exp $
|
2006-09-27 22:45:46 +04:00
|
|
|
#
|
|
|
|
# PARALLELS machine description file
|
|
|
|
#
|
|
|
|
# This machine description file is used to generate a trimmed kernel for the
|
2006-10-29 12:34:35 +03:00
|
|
|
# Parallels Virtual Machine with USB, audio and floppy disabled.
|
2006-09-27 22:45:46 +04:00
|
|
|
#
|
|
|
|
# Based on build 1848.
|
|
|
|
#
|
|
|
|
|
|
|
|
include "arch/i386/conf/std.i386"
|
|
|
|
|
|
|
|
maxusers 32
|
|
|
|
|
|
|
|
# CPU support.
|
|
|
|
options I686_CPU
|
2006-11-28 19:15:36 +03:00
|
|
|
makeoptions CPUFLAGS="-march=pentiumpro -mtune=pentiumpro"
|
2006-09-27 22:45:46 +04:00
|
|
|
|
|
|
|
# CPU-related options.
|
|
|
|
options VM86 # virtual 8086 emulation
|
|
|
|
options USER_LDT # user-settable LDT; used by WINE
|
|
|
|
|
|
|
|
options MTRR # memory-type range register syscall support
|
|
|
|
options PERFCTRS # performance-monitoring counters support
|
|
|
|
|
2007-03-09 01:38:02 +03:00
|
|
|
options MULTIBOOT # Multiboot support (see multiboot(8))
|
|
|
|
|
2006-09-27 22:45:46 +04:00
|
|
|
# Standard system options
|
|
|
|
|
|
|
|
options INSECURE # disable kernel security levels - X needs this
|
|
|
|
|
|
|
|
options RTC_OFFSET=0 # hardware clock is this many mins. west of GMT
|
|
|
|
options NTP # NTP phase/frequency locked loop
|
|
|
|
options KTRACE # system call tracing via ktrace(1)
|
|
|
|
options SYSVMSG # System V-like message queues
|
|
|
|
options SYSVSEM # System V-like semaphores
|
|
|
|
#options SEMMNI=10 # number of semaphore identifiers
|
|
|
|
#options SEMMNS=60 # number of semaphores in system
|
|
|
|
#options SEMUME=10 # max number of undo entries per process
|
|
|
|
#options SEMMNU=30 # number of undo structures in system
|
|
|
|
options SYSVSHM # System V-like memory sharing
|
|
|
|
#options SHMMAXPGS=2048 # 2048 pages is the default
|
|
|
|
options P1003_1B_SEMAPHORE # p1003.1b semaphore support
|
|
|
|
|
|
|
|
options LKM # loadable kernel modules
|
|
|
|
|
|
|
|
options USERCONF # userconf(4) support
|
|
|
|
options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
|
|
|
|
|
|
|
|
# Enable experimental buffer queue strategy for better responsiveness under
|
|
|
|
# high disk I/O load. Likely stable but not yet the default.
|
|
|
|
#options BUFQ_READPRIO
|
|
|
|
#options BUFQ_PRIOCSCAN
|
|
|
|
|
|
|
|
# Diagnostic/debugging support options
|
|
|
|
options DIAGNOSTIC # expensive kernel consistency checks
|
2006-11-09 00:18:13 +03:00
|
|
|
#options DEBUG # expensive debugging checks/support
|
2006-09-27 22:45:46 +04:00
|
|
|
#options KMEMSTATS # kernel memory statistics (vmstat -m)
|
|
|
|
options DDB # in-kernel debugger
|
|
|
|
#options DDB_ONPANIC=1 # see also sysctl(8): `ddb.onpanic'
|
|
|
|
options DDB_HISTORY_SIZE=512 # enable history editing in DDB
|
|
|
|
#options KGDB # remote debugger
|
|
|
|
#options KGDB_DEVNAME="\"com\"",KGDB_DEVADDR=0x3f8,KGDB_DEVRATE=9600
|
|
|
|
#makeoptions DEBUG="-g" # compile full symbol table
|
2006-11-09 00:18:13 +03:00
|
|
|
#options LOCKDEBUG
|
2006-09-27 22:45:46 +04:00
|
|
|
|
|
|
|
# Compatibility options
|
|
|
|
options COMPAT_NOMID # NetBSD 0.8, 386BSD, and BSDI
|
|
|
|
options COMPAT_09 # NetBSD 0.9
|
|
|
|
options COMPAT_10 # NetBSD 1.0
|
|
|
|
options COMPAT_11 # NetBSD 1.1
|
|
|
|
options COMPAT_12 # NetBSD 1.2, 386BSD, and BSDI
|
|
|
|
options COMPAT_13 # NetBSD 1.3, 386BSD, and BSDI
|
|
|
|
options COMPAT_14 # NetBSD 1.4
|
|
|
|
options COMPAT_15 # NetBSD 1.5
|
|
|
|
options COMPAT_16 # NetBSD 1.6
|
|
|
|
options COMPAT_20 # NetBSD 2.0
|
|
|
|
options COMPAT_30 # NetBSD 3.0
|
|
|
|
options COMPAT_43 # 4.3BSD, 386BSD, and BSDI
|
|
|
|
options COMPAT_386BSD_MBRPART # recognize old partition ID
|
|
|
|
#options TCP_COMPAT_42 # 4.2BSD TCP/IP bug compat. Not recommended.
|
|
|
|
|
|
|
|
options COMPAT_OSSAUDIO # OSS (Voxware) audio driver compatibility
|
|
|
|
options COMPAT_SVR4 # binary compatibility with SVR4
|
|
|
|
options COMPAT_IBCS2 # binary compatibility with SCO and ISC
|
|
|
|
options COMPAT_LINUX # binary compatibility with Linux
|
|
|
|
options COMPAT_FREEBSD # binary compatibility with FreeBSD
|
|
|
|
#options COMPAT_MACH # binary compatibility with Mach binaries
|
|
|
|
#options COMPAT_DARWIN # binary compatibility with Darwin binaries
|
|
|
|
#options EXEC_MACHO # exec MACH-O binaries
|
|
|
|
#options COMPAT_NDIS # NDIS network driver
|
|
|
|
#options COMPAT_PECOFF # kernel support to run Win32 apps
|
|
|
|
options COMPAT_BSDPTY # /dev/[pt]ty?? ptys.
|
|
|
|
|
|
|
|
# File systems
|
|
|
|
file-system FFS # UFS
|
|
|
|
file-system EXT2FS # second extended file system (linux)
|
|
|
|
file-system LFS # log-structured file system
|
|
|
|
file-system MFS # memory file system
|
|
|
|
file-system NFS # Network File System client
|
|
|
|
file-system NTFS # Windows/NT file system (experimental)
|
|
|
|
file-system CD9660 # ISO 9660 + Rock Ridge file system
|
|
|
|
file-system MSDOSFS # MS-DOS file system
|
|
|
|
file-system FDESC # /dev/fd
|
|
|
|
file-system KERNFS # /kern
|
|
|
|
file-system NULLFS # loopback file system
|
|
|
|
file-system OVERLAY # overlay file system
|
|
|
|
file-system PORTAL # portal filesystem (still experimental)
|
|
|
|
file-system PROCFS # /proc
|
|
|
|
file-system UMAPFS # NULLFS + uid and gid remapping
|
|
|
|
file-system UNION # union file system
|
|
|
|
file-system CODA # Coda File System; also needs vcoda (below)
|
|
|
|
file-system SMBFS # experimental - CIFS; also needs nsmb (below)
|
|
|
|
file-system PTYFS # /dev/ptm support
|
2006-11-11 22:00:16 +03:00
|
|
|
file-system TMPFS # Efficient memory file-system
|
2006-09-27 22:45:46 +04:00
|
|
|
#file-system UDF # experimental - OSTA UDF CD/DVD file-system
|
|
|
|
|
|
|
|
# File system options
|
|
|
|
options QUOTA # UFS quotas
|
|
|
|
#options FFS_EI # FFS Endian Independent support
|
|
|
|
options SOFTDEP # FFS soft updates support.
|
|
|
|
# Note that UFS_DIRHASH is suspected of causing kernel memory corruption.
|
|
|
|
# It is not recommended for general use.
|
|
|
|
#options UFS_DIRHASH # UFS Large Directory Hashing - Experimental
|
|
|
|
options NFSSERVER # Network File System server
|
|
|
|
# immutable) behave as system flags.
|
|
|
|
|
|
|
|
# Networking options
|
|
|
|
#options GATEWAY # packet forwarding
|
|
|
|
options INET # IP + ICMP + TCP + UDP
|
|
|
|
options INET6 # IPV6
|
|
|
|
#options IPSEC # IP security
|
|
|
|
#options IPSEC_ESP # IP security (encryption part; define w/IPSEC)
|
|
|
|
#options IPSEC_NAT_T # IPsec NAT traversal (NAT-T)
|
|
|
|
#options IPSEC_DEBUG # debug for IP security
|
|
|
|
#options MROUTING # IP multicast routing
|
|
|
|
#options PIM # Protocol Independent Multicast
|
|
|
|
options ISO,TPIP # OSI
|
|
|
|
#options EON # OSI tunneling over IP
|
|
|
|
options NETATALK # AppleTalk networking protocols
|
|
|
|
options PPP_BSDCOMP # BSD-Compress compression support for PPP
|
|
|
|
options PPP_DEFLATE # Deflate compression support for PPP
|
|
|
|
options PPP_FILTER # Active filter support for PPP (requires bpf)
|
|
|
|
options PFIL_HOOKS # pfil(9) packet filter hooks
|
|
|
|
options IPFILTER_LOG # ipmon(8) log support
|
|
|
|
options IPFILTER_LOOKUP # ippool(8) support
|
|
|
|
#options IPFILTER_DEFAULT_BLOCK # block all packets by default
|
|
|
|
#options TCP_DEBUG # Record last TCP_NDEBUG packets with SO_DEBUG
|
|
|
|
|
|
|
|
#options ALTQ # Manipulate network interfaces' output queues
|
|
|
|
#options ALTQ_BLUE # Stochastic Fair Blue
|
|
|
|
#options ALTQ_CBQ # Class-Based Queueing
|
|
|
|
#options ALTQ_CDNR # Diffserv Traffic Conditioner
|
|
|
|
#options ALTQ_FIFOQ # First-In First-Out Queue
|
|
|
|
#options ALTQ_FLOWVALVE # RED/flow-valve (red-penalty-box)
|
|
|
|
#options ALTQ_HFSC # Hierarchical Fair Service Curve
|
|
|
|
#options ALTQ_LOCALQ # Local queueing discipline
|
|
|
|
#options ALTQ_PRIQ # Priority Queueing
|
|
|
|
#options ALTQ_RED # Random Early Detection
|
|
|
|
#options ALTQ_RIO # RED with IN/OUT
|
|
|
|
#options ALTQ_WFQ # Weighted Fair Queueing
|
|
|
|
|
|
|
|
# These options enable verbose messages for several subsystems.
|
|
|
|
# Warning, these may compile large string tables into the kernel!
|
|
|
|
options EISAVERBOSE # verbose EISA device autoconfig messages
|
|
|
|
options MIIVERBOSE # verbose PHY autoconfig messages
|
|
|
|
options PCIVERBOSE # verbose PCI device autoconfig messages
|
|
|
|
#options PCI_CONFIG_DUMP # verbosely dump PCI config space
|
|
|
|
#options PCMCIAVERBOSE # verbose PCMCIA configuration messages
|
|
|
|
options SCSIVERBOSE # human readable SCSI error messages
|
|
|
|
options USBVERBOSE # verbose USB device autoconfig messages
|
|
|
|
#options PNPBIOSVERBOSE # verbose PnP BIOS messages
|
|
|
|
#options PNPBIOSDEBUG # more fulsome PnP BIOS debugging messages
|
|
|
|
options I2OVERBOSE # verbose I2O driver messages
|
|
|
|
options MCAVERBOSE # verbose MCA device autoconfig messages
|
|
|
|
|
|
|
|
options NFS_BOOT_DHCP,NFS_BOOT_BOOTPARAM
|
|
|
|
|
|
|
|
#
|
|
|
|
# wscons options
|
|
|
|
#
|
|
|
|
# builtin terminal emulations
|
|
|
|
#options WSEMUL_SUN # sun terminal emulation
|
|
|
|
options WSEMUL_VT100 # VT100 / VT220 emulation
|
|
|
|
# customization of console and kernel output - see dev/wscons/wsdisplayvar.h
|
|
|
|
options WSDISPLAY_CUSTOM_OUTPUT # color customization from wsconsctl(8)
|
|
|
|
#options WS_DEFAULT_FG=WSCOL_WHITE
|
|
|
|
#options WS_DEFAULT_BG=WSCOL_BLACK
|
|
|
|
#options WS_DEFAULT_COLATTR="(0)"
|
|
|
|
#options WS_DEFAULT_MONOATTR="(0)"
|
|
|
|
options WS_KERNEL_FG=WSCOL_GREEN
|
|
|
|
#options WS_KERNEL_BG=WSCOL_BLACK
|
|
|
|
#options WS_KERNEL_COLATTR=""
|
|
|
|
#options WS_KERNEL_MONOATTR=""
|
|
|
|
# customization of console border color
|
|
|
|
options WSDISPLAY_CUSTOM_BORDER # custom border colors via wsconsctl(8)
|
|
|
|
#options WSDISPLAY_BORDER_COLOR=WSCOL_BLUE # default color
|
|
|
|
# compatibility to other console drivers
|
|
|
|
options WSDISPLAY_COMPAT_PCVT # emulate some ioctls
|
|
|
|
options WSDISPLAY_COMPAT_SYSCONS # emulate some ioctls
|
|
|
|
options WSDISPLAY_COMPAT_USL # VT handling
|
|
|
|
options WSDISPLAY_COMPAT_RAWKBD # can get raw scancodes
|
|
|
|
#options WSKBD_EVENT_AUTOREPEAT # auto repeat in event mode
|
|
|
|
# don't attach pckbd as the console if no PS/2 keyboard is found
|
|
|
|
options PCKBD_CNATTACH_MAY_FAIL
|
|
|
|
# see dev/pckbport/wskbdmap_mfii.c for implemented layouts
|
|
|
|
#options PCKBD_LAYOUT="(KB_DE | KB_NODEAD)" # for pckbd driver
|
|
|
|
#options UKBD_LAYOUT="(KB_DE | KB_NODEAD)" # for ukbd driver
|
|
|
|
# allocate a number of virtual screens at autoconfiguration time
|
|
|
|
#options WSDISPLAY_DEFAULTSCREENS=4
|
|
|
|
# use a large software cursor that doesn't blink
|
|
|
|
options PCDISPLAY_SOFTCURSOR
|
|
|
|
# modify the screen type of the console; defaults to "80x25"
|
|
|
|
#options VGA_CONSOLE_SCREENTYPE="\"80x24\""
|
|
|
|
# work around a hardware bug that loaded fonts don't work; found on ATI cards
|
|
|
|
#options VGA_CONSOLE_ATI_BROKEN_FONTSEL
|
|
|
|
# console scrolling support.
|
|
|
|
options WSDISPLAY_SCROLLSUPPORT
|
|
|
|
# enable VGA raster mode capable of displaying multilingual text on console
|
|
|
|
#options VGA_RASTERCONSOLE
|
|
|
|
# enable splash screen support; requires hw driver support
|
|
|
|
#options SPLASHSCREEN
|
|
|
|
#options SPLASHSCREEN_PROGRESS
|
|
|
|
|
|
|
|
# Kernel root file system and dump configuration.
|
|
|
|
config netbsd root on ? type ?
|
|
|
|
|
|
|
|
#
|
|
|
|
# Device configuration
|
|
|
|
#
|
|
|
|
|
|
|
|
mainbus0 at root
|
|
|
|
|
|
|
|
cpu* at mainbus?
|
|
|
|
|
|
|
|
# Basic Bus Support
|
|
|
|
|
|
|
|
# PCI bus support
|
|
|
|
pci* at mainbus? bus ?
|
|
|
|
|
|
|
|
pchb* at pci? dev ? function ? # PCI-Host bridges
|
|
|
|
pcib* at pci? dev ? function ? # PCI-ISA bridges
|
|
|
|
agp* at pchb?
|
|
|
|
|
|
|
|
# Coprocessor Support
|
|
|
|
|
|
|
|
# Math Coprocessor support
|
|
|
|
npx0 at isa? port 0xf0 irq 13 # x86 math coprocessor
|
|
|
|
|
|
|
|
# ISA bus support
|
|
|
|
isa0 at pcib?
|
|
|
|
|
|
|
|
# wscons
|
|
|
|
pckbc0 at isa? # pc keyboard controller
|
|
|
|
pckbd* at pckbc? # PC keyboard
|
|
|
|
pms* at pckbc? # PS/2 mouse for wsmouse
|
|
|
|
vga* at pci? dev ? function ?
|
|
|
|
wsdisplay* at vga? console ?
|
|
|
|
wskbd* at pckbd? console ?
|
|
|
|
wsmouse* at pms? mux 0
|
|
|
|
|
|
|
|
# VESA framebuffer console
|
|
|
|
#options KVM86 # required for vesabios
|
|
|
|
#vesabios* at vesabiosbus?
|
|
|
|
#vesafb* at vesabios?
|
|
|
|
#options VESAFB_WIDTH=640
|
|
|
|
#options VESAFB_HEIGHT=480
|
|
|
|
#options VESAFB_DEPTH=8
|
|
|
|
#options VESAFB_PM # power management support
|
|
|
|
#wsdisplay* at vesafb? console ?
|
|
|
|
|
|
|
|
attimer0 at isa?
|
|
|
|
pcppi0 at isa?
|
|
|
|
sysbeep0 at pcppi?
|
|
|
|
|
|
|
|
# Serial Devices
|
|
|
|
|
|
|
|
# ISA serial interfaces
|
|
|
|
#com0 at isa? port 0x3f8 irq 4 # Standard PC serial ports
|
|
|
|
#com1 at isa? port 0x2f8 irq 3
|
|
|
|
#com2 at isa? port 0x3e8 irq 5
|
|
|
|
|
|
|
|
# Parallel Printer Interfaces
|
|
|
|
|
|
|
|
# ISA parallel printer interfaces
|
|
|
|
#lpt0 at isa? port 0x378 irq 7 # standard PC parallel ports
|
|
|
|
#lpt1 at isa? port 0x278
|
|
|
|
#lpt2 at isa? port 0x3bc
|
|
|
|
|
|
|
|
# IDE and related devices
|
|
|
|
# PCI IDE controllers - see pciide(4) for supported hardware.
|
|
|
|
# The 0x0001 flag force the driver to use DMA, even if the driver doesn't know
|
|
|
|
# how to set up DMA modes for this chip. This may work, or may cause
|
|
|
|
# a machine hang with some controllers.
|
|
|
|
piixide* at pci? dev ? function ? # Intel IDE controllers
|
|
|
|
|
|
|
|
# ATA (IDE) bus support
|
|
|
|
atabus* at ata?
|
|
|
|
|
|
|
|
# IDE drives
|
|
|
|
# Flags are used only with controllers that support DMA operations
|
|
|
|
# and mode settings (e.g. some pciide controllers)
|
|
|
|
# The lowest order four bits (rightmost digit) of the flags define the PIO
|
|
|
|
# mode to use, the next set of four bits the DMA mode and the third set the
|
|
|
|
# UltraDMA mode. For each set of four bits, the 3 lower bits define the mode
|
|
|
|
# to use, and the last bit must be 1 for this setting to be used.
|
|
|
|
# For DMA and UDMA, 0xf (1111) means 'disable'.
|
|
|
|
# 0x0fac means 'use PIO mode 4, DMA mode 2, disable UltraDMA'.
|
|
|
|
# (0xc=1100, 0xa=1010, 0xf=1111)
|
|
|
|
# 0x0000 means "use whatever the drive claims to support".
|
|
|
|
wd* at atabus? drive ? flags 0x0000
|
|
|
|
|
|
|
|
# ATAPI bus support
|
|
|
|
atapibus* at atapi?
|
|
|
|
|
|
|
|
# ATAPI devices
|
|
|
|
# flags have the same meaning as for IDE drives.
|
|
|
|
cd* at atapibus? drive ? flags 0x0000 # ATAPI CD-ROM drives
|
|
|
|
|
|
|
|
|
|
|
|
# Miscellaneous mass storage devices
|
|
|
|
|
|
|
|
# ISA floppy
|
|
|
|
#fdc0 at isa? port 0x3f0 irq 6 drq 2 # standard PC floppy controllers
|
|
|
|
#fdc1 at isa? port 0x370 irq ? drq ?
|
|
|
|
#fd* at fdc? drive ? # the drives themselves
|
|
|
|
# some machines need you to do this instead of fd*
|
|
|
|
#fd0 at fdc0 drive 0
|
|
|
|
|
|
|
|
# Network Interfaces
|
|
|
|
|
|
|
|
# PCI network interfaces
|
|
|
|
ne* at pci? dev ? function ? # NE2000-compatible Ethernet
|
|
|
|
|
|
|
|
# Pseudo-Devices
|
|
|
|
|
|
|
|
pseudo-device crypto # /dev/crypto device
|
|
|
|
pseudo-device swcrypto # software crypto implementation
|
|
|
|
|
|
|
|
# disk/mass storage pseudo-devices
|
|
|
|
pseudo-device ccd 4 # concatenated/striped disk devices
|
|
|
|
#pseudo-device cgd 4 # cryptographic disk devices
|
|
|
|
pseudo-device fss 4 # file system snapshot device
|
|
|
|
|
|
|
|
pseudo-device md 1 # memory disk device (ramdisk)
|
|
|
|
pseudo-device vnd # disk-like interface to files
|
|
|
|
options VND_COMPRESSION # compressed vnd(4)
|
|
|
|
|
|
|
|
# network pseudo-devices
|
|
|
|
pseudo-device bpfilter # Berkeley packet filter
|
|
|
|
#pseudo-device carp # Common Address Redundancy Protocol
|
|
|
|
pseudo-device ipfilter # IP filter (firewall) and NAT
|
|
|
|
pseudo-device loop # network loopback
|
|
|
|
pseudo-device ppp # Point-to-Point Protocol
|
|
|
|
pseudo-device pppoe # PPP over Ethernet (RFC 2516)
|
|
|
|
pseudo-device sl # Serial Line IP
|
|
|
|
pseudo-device strip # Starmode Radio IP (Metricom)
|
|
|
|
pseudo-device irframetty # IrDA frame line discipline
|
|
|
|
pseudo-device tap # virtual Ethernet
|
|
|
|
pseudo-device tun # network tunneling over tty
|
|
|
|
pseudo-device gre # generic L3 over IP tunnel
|
|
|
|
pseudo-device gif # IPv[46] over IPv[46] tunnel (RFC1933)
|
|
|
|
#pseudo-device faith # IPv[46] tcp relay translation i/f
|
|
|
|
pseudo-device stf # 6to4 IPv6 over IPv4 encapsulation
|
|
|
|
pseudo-device vlan # IEEE 802.1q encapsulation
|
|
|
|
pseudo-device bridge # simple inter-network bridging
|
|
|
|
#options BRIDGE_IPF # bridge uses IP/IPv6 pfil hooks too
|
|
|
|
#pseudo-device pf # PF packet filter
|
|
|
|
#pseudo-device pflog # PF log if
|
|
|
|
|
|
|
|
# miscellaneous pseudo-devices
|
|
|
|
pseudo-device pty # pseudo-terminals
|
|
|
|
pseudo-device rnd # /dev/random and in-kernel generator
|
|
|
|
pseudo-device clockctl # user control of clock subsystem
|
|
|
|
pseudo-device ksyms # /dev/ksyms
|
|
|
|
|
|
|
|
# a pseudo device needed for Coda # also needs CODA (above)
|
|
|
|
pseudo-device vcoda 4 # coda minicache <-> venus comm.
|
|
|
|
|
|
|
|
# a pseudo device needed for SMBFS
|
|
|
|
pseudo-device nsmb # experimental - SMB requester
|
|
|
|
|
|
|
|
# wscons pseudo-devices
|
|
|
|
pseudo-device wsmux # mouse & keyboard multiplexor
|
|
|
|
pseudo-device wsfont
|
|
|
|
|
|
|
|
#options FILEASSOC # fileassoc(9) - required for Veriexec
|
2007-02-10 00:55:00 +03:00
|
|
|
#options FILEASSOC_NHOOKS=4 # Default number of storage slots
|
2006-09-27 22:45:46 +04:00
|
|
|
|
|
|
|
# Veriexec
|
|
|
|
#pseudo-device veriexec
|
|
|
|
#
|
|
|
|
# Uncomment the fingerprint methods below that are desired. Note that
|
|
|
|
# removing fingerprint methods will have almost no impact on the kernel
|
|
|
|
# code size.
|
|
|
|
#
|
|
|
|
#options VERIFIED_EXEC_FP_RMD160
|
|
|
|
#options VERIFIED_EXEC_FP_SHA256
|
|
|
|
#options VERIFIED_EXEC_FP_SHA384
|
|
|
|
#options VERIFIED_EXEC_FP_SHA512
|
|
|
|
#options VERIFIED_EXEC_FP_SHA1
|
|
|
|
#options VERIFIED_EXEC_FP_MD5
|
|
|
|
|
|
|
|
options PAX_MPROTECT=0 # PaX mprotect(2) restrictions
|