Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Enable BUFQ_PRIOCSCAN, CARP, Veriexec by default in GENERIC kernel configs. 

On ports without a GENERIC kernel config enable in individul files, e.g evbmips.
Omit on:
atari, dreamcast, emips, epoc32, evbppc/VIRTEX*, ia64, luna68x, mvme68k,
mvmeppc, playstation2, riscv, sun2, sun3, x68k, zaurus due to resource
constraints or port infancy.
This commit is contained in:
sevan 2019-04-26 21:40:28 +00:00
parent 0fa231dd33
commit 75d6e670be
78 changed files with 480 additions and 768 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
sys/arch/acorn32/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.128 2019/04/13 08:22:58 isaki Exp $
# $NetBSD: GENERIC,v 1.129 2019/04/26 21:40:28 sevan Exp $
#
# GENERIC --- NetBSD/acorn32 complete configuration
#
@ -22,7 +22,7 @@ include "arch/acorn32/conf/std.acorn32"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.128 $"
#ident "GENERIC-$Revision: 1.129 $"
# estimated number of users
maxusers 32
@ -131,7 +131,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Development and Debugging options
@ -285,7 +285,7 @@ ne* at podulebus? # NE2000 clone cards
pseudo-device loop # network loopback
pseudo-device bpfilter # packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device sl # CSLIP
pseudo-device ppp # PPP
pseudo-device pppoe # PPP over Ethernet (RFC 2516)
@ -328,18 +328,7 @@ pseudo-device putter # for puffs and pud
pseudo-device accf_data # "dataready" accept filter
pseudo-device accf_http # "httpready" accept filter
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"
# If the standard modes don't work for your monitor, you can specify
# a RISC-OS-format monitor definition file and a list of modes here.

24
sys/arch/alpha/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.393 2019/04/13 08:22:58 isaki Exp $
# $NetBSD: GENERIC,v 1.394 2019/04/26 21:40:28 sevan Exp $
#
# This machine description file is used to generate the default NetBSD
# kernel.
@ -19,7 +19,7 @@ include "arch/alpha/conf/std.alpha"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
ident "GENERIC-$Revision: 1.393 $"
ident "GENERIC-$Revision: 1.394 $"
maxusers 32
@ -51,7 +51,7 @@ options NTP # kernel PLL for NTP
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
#options DIAGNOSTIC # Cheap kernel consistency checks
@ -707,7 +707,7 @@ pseudo-device crypto # /dev/crypto device
pseudo-device swcrypto # software crypto implementation
pseudo-device bpfilter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device ccd
pseudo-device cgd # cryptographic disk devices
pseudo-device raid # RAIDframe disk driver
@ -757,21 +757,7 @@ pseudo-device bcsp # BlueCore Serial Protocol
pseudo-device btuart # Bluetooth HCI UART (H4)
pseudo-device putter # for puffs and pud
#options FILEASSOC # fileassoc(9) - required for Veriexec
# and PAX_SEGVGUARD
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"
options PAX_MPROTECT=0 # PaX mprotect(2) restrictions
options PAX_ASLR=0 # PaX Address Space Layout Randomization

22
sys/arch/amd64/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.525 2019/04/25 03:53:11 msaitoh Exp $
# $NetBSD: GENERIC,v 1.526 2019/04/26 21:40:28 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/amd64/conf/std.amd64"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.525 $"
#ident "GENERIC-$Revision: 1.526 $"
maxusers 64 # estimated number of users
@ -1133,7 +1133,7 @@ options VND_COMPRESSION # compressed vnd(4)
# network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device loop # network loopback
#pseudo-device mpls # MPLS pseudo-interface
pseudo-device ppp # Point-to-Point Protocol
@ -1196,21 +1196,7 @@ pseudo-device pad
# userland interface to drivers, including autoconf and properties retrieval
pseudo-device drvctl
options FILEASSOC # fileassoc(9) - needed by Veriexec
# and PAX_SEGVGUARD
# Veriexec
#
# a pseudo device needed for veriexec
pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
options VERIFIED_EXEC_FP_SHA256
options VERIFIED_EXEC_FP_SHA384
options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"
options PAX_SEGVGUARD=0 # PaX Segmentation fault guard
options PAX_MPROTECT=1 # PaX mprotect(2) restrictions

21
sys/arch/amiga/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.323 2019/04/13 08:26:14 isaki Exp $
# $NetBSD: GENERIC,v 1.324 2019/04/26 21:40:28 sevan Exp $
#
# This file was automatically created.
# Changes will be lost when make is run in this directory.
@ -29,7 +29,7 @@ include "arch/amiga/conf/std.amiga"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.323 $"
#ident "GENERIC-$Revision: 1.324 $"
makeoptions COPTS="-O2 -fno-reorder-blocks" # see share/mk/sys.mk
@ -164,7 +164,7 @@ options NTP # NTP phase/frequency locked loop
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
#
# Misc. debugging options
@ -552,7 +552,7 @@ pseudo-device tun # network tunnel line discipline
pseudo-device tap # virtual Ethernet
#pseudo-device gre # generic L3 over IP tunnel
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device gif # IPv[46] over IPv[46] tunnel (RFC1933)
#pseudo-device faith # IPv[46] tcp relay translation i/f
@ -594,17 +594,6 @@ pseudo-device nsmb # experimental - SMB requester
pseudo-device bcsp # BlueCore Serial Protocol
pseudo-device btuart # Bluetooth HCI UART (H4)
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"
config netbsd root on ? type ?

21
sys/arch/amigappc/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.36 2019/04/13 08:22:58 isaki Exp $
# $NetBSD: GENERIC,v 1.37 2019/04/26 21:40:28 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/amigappc/conf/std.amigappc"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.36 $"
#ident "GENERIC-$Revision: 1.37 $"
maxusers 8
@ -58,7 +58,7 @@ options SYSVSEM # System V-like semaphores
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
#
# Diagnostic/debugging support options
@ -392,7 +392,7 @@ pseudo-device tun # network tunnel line discipline
pseudo-device tap # virtual Ethernet
#pseudo-device gre # generic L3 over IP tunnel
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device gif # IPv[46] over IPv[46] tunnel (RFC1933)
#pseudo-device faith # IPv[46] tcp relay translation i/f
@ -431,18 +431,7 @@ options RAID_AUTOCONFIG # auto-configuration of RAID components
pseudo-device ksyms # /dev/ksyms (kernel symbols)
pseudo-device nsmb # experimental - SMB requester
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"
# Kernel root file system and dump configuration
config netbsd root on ? type ?

21
sys/arch/arc/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.192 2018/12/12 06:29:36 maxv Exp $
# $NetBSD: GENERIC,v 1.193 2019/04/26 21:40:29 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/arc/conf/std.arc"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.192 $"
#ident "GENERIC-$Revision: 1.193 $"
maxusers 32 # estimated number of users
@ -60,7 +60,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
#options DIAGNOSTIC # cheap kernel consistency checks
@ -445,7 +445,7 @@ pseudo-device putter # for puffs and pud
# network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
pseudo-device ppp # Point-to-Point Protocol
@ -482,15 +482,4 @@ pseudo-device clockctl # user control of clock subsystem
#pseudo-device wsmux
pseudo-device ksyms # /dev/ksyms
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

25
sys/arch/bebox/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.159 2019/04/13 08:22:59 isaki Exp $
# $NetBSD: GENERIC,v 1.160 2019/04/26 21:40:29 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/bebox/conf/std.bebox"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.159 $"
#ident "GENERIC-$Revision: 1.160 $"
maxusers 32
@ -44,7 +44,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
#options DIAGNOSTIC # cheap kernel consistency checks
@ -272,7 +272,7 @@ options VND_COMPRESSION # compressed vnd(4)
# network pseudo-devices
pseudo-device bpfilter # packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
pseudo-device ppp # Point-to-Point Protocol
@ -324,22 +324,7 @@ pseudo-device wsfont
# userland interface to drivers, including autoconf and properties retrieval
pseudo-device drvctl
#options FILEASSOC # fileassoc(9) - required for Veriexec
# and PAX_SEGVGUARD
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"
#options PAX_MPROTECT=0 # PaX mprotect(2) restrictions
#options PAX_ASLR=0 # PaX Address Space Layout Randomization

19
sys/arch/cats/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.172 2019/04/13 08:22:59 isaki Exp $
# $NetBSD: GENERIC,v 1.173 2019/04/26 21:40:29 sevan Exp $
#
# GENERIC machine description file
#
@ -40,7 +40,7 @@ options NTP # NTP phase/frequency locked loop
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# CPU options
@ -536,7 +536,7 @@ pseudo-device putter # for puffs and pud
# network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
#pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
pseudo-device ppp # Point-to-Point Protocol
@ -574,15 +574,4 @@ pseudo-device wsmux
pseudo-device wsfont
pseudo-device ksyms # /dev/ksyms
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

19
sys/arch/cesfic/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.71 2019/03/14 16:59:09 thorpej Exp $
# $NetBSD: GENERIC,v 1.72 2019/04/26 21:40:29 sevan Exp $
#
# GENERIC machine description file
#
@ -39,7 +39,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
include "conf/compat_netbsd09.config"
@ -121,7 +121,7 @@ pseudo-device pty # pseudo ptys
#pseudo-device ppp # PPP network interfaces
#pseudo-device pppoe # PPP over Ethernet (RFC 2516)
#pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
#pseudo-device bridge # simple inter-network bridging
#options BRIDGE_IPF # bridge uses IP/IPv6 pfil hooks too
#pseudo-device vnd # vnode pseudo-disks
@ -133,15 +133,4 @@ pseudo-device loop # loopback network interface
pseudo-device clockctl # user control of clock subsystem
pseudo-device ksyms # /dev/ksyms
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

21
sys/arch/cobalt/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.161 2018/12/12 06:29:36 maxv Exp $
# $NetBSD: GENERIC,v 1.162 2019/04/26 21:40:29 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/cobalt/conf/std.cobalt"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.161 $"
#ident "GENERIC-$Revision: 1.162 $"
maxusers 32
@ -39,7 +39,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Debugging options
options DIAGNOSTIC # extra kernel sanity checking
@ -311,7 +311,7 @@ pseudo-device vnd # disk-like interface to files
# Network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
#pseudo-device ppp # Point-to-Point Protocol
@ -349,15 +349,4 @@ pseudo-device nsmb # experimental - SMB requester
pseudo-device ksyms # /dev/ksyms
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

19
sys/arch/evbarm/conf/GENERIC.common
View File

@ -1,5 +1,5 @@
#
# $NetBSD: GENERIC.common,v 1.32 2018/12/26 19:54:09 skrll Exp $
# $NetBSD: GENERIC.common,v 1.33 2019/04/26 21:40:29 sevan Exp $
#
# GENERIC evbarm kernel config (template)
#
@ -133,6 +133,7 @@ pseudo-device drvctl # driver control
# network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device loop # network loopback
pseudo-device bridge # simple inter-network bridging
pseudo-device vlan # IEEE 802.1q encapsulation
@ -152,21 +153,7 @@ pseudo-device clockctl # user control of clock subsystem
pseudo-device ksyms # /dev/ksyms
pseudo-device lockstat # lock profiling
options FILEASSOC # fileassoc(9) - required for Veriexec
# and PAX_SEGVGUARD
# Veriexec
#
# a pseudo device needed for veriexec
pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
options VERIFIED_EXEC_FP_SHA256
options VERIFIED_EXEC_FP_SHA384
options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"
options PAX_ASLR_DEBUG=1 # PaX ASLR debug
options PAX_SEGVGUARD=0 # PaX Segmentation fault guard

7
sys/arch/evbmips/conf/ADM5120
View File

@ -1,11 +1,11 @@
# $NetBSD: ADM5120,v 1.27 2018/12/30 14:51:36 sevan Exp $
# $NetBSD: ADM5120,v 1.28 2019/04/26 21:40:29 sevan Exp $
#
# Kernel config for the Alchemy Semiconductor (AMD) PB1000, PB1500,
# DBAu1000 and DBAu1500 evaluation boards.
include "arch/evbmips/conf/std.adm5120"
#ident "GENERIC-$Revision: 1.27 $"
#ident "GENERIC-$Revision: 1.28 $"
maxusers 32
@ -109,6 +109,7 @@ cpu0 at mainbus?
# Network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device loop # network loopback
#pseudo-device ppp # Point-to-Point Protocol
#pseudo-device sl # Serial Line IP
@ -133,3 +134,5 @@ uart* at obio? addr ?
admsw* at obio? addr ?
#admflash* at obio? addr ?
#options VND_COMPRESSION
include "dev/veriexec.config"

7
sys/arch/evbmips/conf/ADM5120-NB
View File

@ -1,11 +1,11 @@
# $NetBSD: ADM5120-NB,v 1.25 2018/12/30 14:51:36 sevan Exp $
# $NetBSD: ADM5120-NB,v 1.26 2019/04/26 21:40:29 sevan Exp $
#
# Kernel config for the Alchemy Semiconductor (AMD) PB1000, PB1500,
# DBAu1000 and DBAu1500 evaluation boards.
include "arch/evbmips/conf/std.adm5120"
#ident "GENERIC-$Revision: 1.25 $"
#ident "GENERIC-$Revision: 1.26 $"
maxusers 32
@ -133,6 +133,7 @@ cpu0 at mainbus?
# Network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device loop # network loopback
#pseudo-device ppp # Point-to-Point Protocol
#pseudo-device sl # Serial Line IP
@ -158,3 +159,5 @@ uart* at obio? addr ?
admsw* at obio? addr ?
#admflash* at obio? addr ?
#options VND_COMPRESSION
include "dev/veriexec.config"

6
sys/arch/evbmips/conf/ADM5120-USB
View File

@ -1,11 +1,11 @@
# $NetBSD: ADM5120-USB,v 1.27 2018/12/30 14:51:36 sevan Exp $
# $NetBSD: ADM5120-USB,v 1.28 2019/04/26 21:40:29 sevan Exp $
#
# Kernel config for the Alchemy Semiconductor (AMD) PB1000, PB1500,
# DBAu1000 and DBAu1500 evaluation boards.
include "arch/evbmips/conf/std.adm5120"
#ident "GENERIC-$Revision: 1.27 $"
#ident "GENERIC-$Revision: 1.28 $"
maxusers 32
@ -109,6 +109,7 @@ cpu0 at mainbus?
# Network pseudo-devices
#pseudo-device bpfilter # Berkeley packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device loop # network loopback
#pseudo-device ppp # Point-to-Point Protocol
#pseudo-device sl # Serial Line IP
@ -151,3 +152,4 @@ options MSGBUFSIZE=65536
scsibus* at scsi?
sd* at scsibus? target ? lun ? # SCSI disk drives
include "dev/veriexec.config"

7
sys/arch/evbmips/conf/ALCHEMY
View File

@ -1,11 +1,11 @@
# $NetBSD: ALCHEMY,v 1.66 2019/04/13 08:22:59 isaki Exp $
# $NetBSD: ALCHEMY,v 1.67 2019/04/26 21:40:29 sevan Exp $
#
# Kernel config for the Alchemy Semiconductor (AMD) PB1000, PB1500,
# DBAu1000 and DBAu1500 evaluation boards.
include "arch/evbmips/conf/std.alchemy"
#ident "ALCHEMY-$Revision: 1.66 $"
#ident "ALCHEMY-$Revision: 1.67 $"
maxusers 32
@ -232,6 +232,7 @@ pseudo-device vnd # disk-like interface to files
# Network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
#pseudo-device ppp # Point-to-Point Protocol
@ -256,3 +257,5 @@ pseudo-device ksyms # /dev/ksyms
# A pseudo device needed for Coda # also needs CODA (above)
#pseudo-device vcoda # coda minicache <-> venus comm.
include "dev/veriexec.config"

7
sys/arch/evbmips/conf/AP30
View File

@ -1,10 +1,10 @@
# $NetBSD: AP30,v 1.38 2018/12/30 14:51:36 sevan Exp $
# $NetBSD: AP30,v 1.39 2019/04/26 21:40:29 sevan Exp $
include "arch/evbmips/conf/std.atheros"
#options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "AP30-$Revision: 1.38 $"
#ident "AP30-$Revision: 1.39 $"
maxusers 32
@ -165,6 +165,7 @@ ukphy* at mii? phy ? # generic unknown PHYs
# Network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
pseudo-device carp # Common Address Redundancy Protocol
#pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
#pseudo-device ppp # Point-to-Point Protocol
@ -187,3 +188,5 @@ pseudo-device ksyms # /dev/ksyms
# A pseudo device needed for Coda # also needs CODA (above)
#pseudo-device vcoda # coda minicache <-> venus comm.
include "dev/veriexec.config"

6
sys/arch/evbmips/conf/CI20
View File

@ -1,4 +1,4 @@
# $NetBSD: CI20,v 1.27 2018/12/30 14:51:36 sevan Exp $
# $NetBSD: CI20,v 1.28 2019/04/26 21:40:29 sevan Exp $
#
# MIPS Creator CI20
#
@ -7,7 +7,7 @@ include "arch/evbmips/conf/std.ingenic"
#options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "CI20-$Revision: 1.27 $"
#ident "CI20-$Revision: 1.28 $"
maxusers 32
@ -247,6 +247,7 @@ jzrng0 at apbus0
# Network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
pseudo-device carp # Common Address Redundancy Protocol
#pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
#pseudo-device ppp # Point-to-Point Protocol
@ -270,6 +271,7 @@ pseudo-device ksyms # /dev/ksyms
# A pseudo device needed for Coda # also needs CODA (above)
#pseudo-device vcoda # coda minicache <-> venus comm.
include "dev/veriexec.config"
cinclude "arch/evbmips/conf/CI20.local"

5
sys/arch/evbmips/conf/CPMBR1400
View File

@ -1,4 +1,4 @@
# $NetBSD: CPMBR1400,v 1.30 2018/12/30 14:51:36 sevan Exp $
# $NetBSD: CPMBR1400,v 1.31 2019/04/26 21:40:29 sevan Exp $
include "arch/evbmips/conf/std.rasoc"
@ -221,6 +221,7 @@ ukphy* at mii? phy ? # generic unknown PHYs
# network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device bridge # simple inter-network bridging
pseudo-device loop # network loopback
pseudo-device tap # virtual Ethernet
@ -232,3 +233,5 @@ pseudo-device vlan # 802.1q
pseudo-device pty # pseudo-terminals
pseudo-device clockctl # /dev/clockctl - user control of clock subsystem
pseudo-device ksyms # /dev/ksyms - kernel symbols
include "dev/veriexec.config"

7
sys/arch/evbmips/conf/DB120
View File

@ -1,4 +1,4 @@
# $NetBSD: DB120,v 1.21 2018/12/30 14:51:36 sevan Exp $
# $NetBSD: DB120,v 1.22 2019/04/26 21:40:29 sevan Exp $
#
# Qualcomm Atheros AR9344 DB120 evaluation board.
#
@ -7,7 +7,7 @@ include "arch/evbmips/conf/std.atheros"
#options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "DB120-$Revision: 1.21 $"
#ident "DB120-$Revision: 1.22 $"
maxusers 32
@ -185,6 +185,7 @@ sd* at scsibus? target ? lun ?
# Network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
pseudo-device carp # Common Address Redundancy Protocol
#pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
#pseudo-device ppp # Point-to-Point Protocol
@ -207,3 +208,5 @@ pseudo-device ksyms # /dev/ksyms
# A pseudo device needed for Coda # also needs CODA (above)
#pseudo-device vcoda # coda minicache <-> venus comm.
include "dev/veriexec.config"

7
sys/arch/evbmips/conf/ERLITE
View File

@ -1,11 +1,11 @@
# $NetBSD: ERLITE,v 1.22 2019/04/10 15:19:09 roy Exp $
# $NetBSD: ERLITE,v 1.23 2019/04/26 21:40:29 sevan Exp $
include "arch/mips/conf/std.octeon"
include "arch/evbmips/conf/files.octeon"
#options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "ERLITE-$Revision: 1.22 $"
#ident "ERLITE-$Revision: 1.23 $"
maxusers 32
@ -149,6 +149,7 @@ ukphy* at mii? phy ? # generic unknown PHYs
# Network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
pseudo-device ppp # Point-to-Point Protocol
@ -174,5 +175,7 @@ pseudo-device drvctl # driver control
# A pseudo device needed for Coda # also needs CODA (above)
#pseudo-device vcoda # coda minicache <-> venus comm.
include "dev/veriexec.config"
cinclude "arch/evbmips/conf/ERLITE.local"

19
sys/arch/evbmips/conf/GDIUM
View File

@ -1,4 +1,4 @@
# $NetBSD: GDIUM,v 1.35 2018/12/30 14:51:36 sevan Exp $
# $NetBSD: GDIUM,v 1.36 2019/04/26 21:40:29 sevan Exp $
#
# GDIUM machine description file
#
@ -22,7 +22,7 @@ include "arch/evbmips/conf/std.gdium"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GDIUM-$Revision: 1.35 $"
#ident "GDIUM-$Revision: 1.36 $"
maxusers 16
@ -227,7 +227,7 @@ pseudo-device ppp # serial-line IP ports
pseudo-device pppoe # PPP over Ethernet (RFC 2516)
pseudo-device pty # pseudo-terminals
pseudo-device bpfilter # packet filter ports
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device vnd # virtual disk ick
@ -265,15 +265,4 @@ pseudo-device bridge
pseudo-device agr # IEEE 802.3ad link aggregation
pseudo-device ksyms # /dev/ksyms
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

19
sys/arch/evbmips/conf/LOONGSON
View File

@ -1,4 +1,4 @@
# $NetBSD: LOONGSON,v 1.41 2018/12/30 14:51:36 sevan Exp $
# $NetBSD: LOONGSON,v 1.42 2019/04/26 21:40:29 sevan Exp $
#
# LOONGSON machine description file
#
@ -22,7 +22,7 @@ include "arch/evbmips/conf/std.loongson"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "LOONGSON-$Revision: 1.41 $"
#ident "LOONGSON-$Revision: 1.42 $"
maxusers 16
@ -262,7 +262,7 @@ pseudo-device ppp # serial-line IP ports
pseudo-device pppoe # PPP over Ethernet (RFC 2516)
pseudo-device pty # pseudo-terminals
pseudo-device bpfilter # packet filter ports
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device vnd # virtual disk ick
@ -302,15 +302,4 @@ pseudo-device agr # IEEE 802.3ad link aggregation
pseudo-device ksyms # /dev/ksyms
pseudo-device drvctl # driver control
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

7
sys/arch/evbmips/conf/MALTA
View File

@ -1,10 +1,10 @@
# $NetBSD: MALTA,v 1.95 2019/04/13 08:22:59 isaki Exp $
# $NetBSD: MALTA,v 1.96 2019/04/26 21:40:29 sevan Exp $
include "arch/evbmips/conf/std.malta"
#options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "MALTA-$Revision: 1.95 $"
#ident "MALTA-$Revision: 1.96 $"
maxusers 32
@ -296,6 +296,7 @@ pseudo-device vnd # disk-like interface to files
# Network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
pseudo-device npf # NPF packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device loop # network loopback
#pseudo-device ppp # Point-to-Point Protocol
#pseudo-device sl # Serial Line IP
@ -319,3 +320,5 @@ pseudo-device ksyms # /dev/ksyms
# A pseudo device needed for Coda # also needs CODA (above)
#pseudo-device vcoda # coda minicache <-> venus comm.
include "dev/veriexec.config"

7
sys/arch/evbmips/conf/MERAKI
View File

@ -1,10 +1,10 @@
# $NetBSD: MERAKI,v 1.32 2018/12/30 14:51:36 sevan Exp $
# $NetBSD: MERAKI,v 1.33 2019/04/26 21:40:29 sevan Exp $
include "arch/evbmips/conf/std.meraki"
#options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "MERAKI-$Revision: 1.32 $"
#ident "MERAKI-$Revision: 1.33 $"
maxusers 32
@ -172,6 +172,7 @@ ukphy* at mii? phy ? # generic unknown PHYs
# Network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
pseudo-device carp # Common Address Redundancy Protocol
#pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
#pseudo-device ppp # Point-to-Point Protocol
@ -194,3 +195,5 @@ pseudo-device ksyms # /dev/ksyms
# A pseudo device needed for Coda # also needs CODA (above)
#pseudo-device vcoda # coda minicache <-> venus comm.
include "dev/veriexec.config"

7
sys/arch/evbmips/conf/RB153
View File

@ -1,10 +1,10 @@
# $NetBSD: RB153,v 1.22 2018/12/30 14:51:36 sevan Exp $
# $NetBSD: RB153,v 1.23 2019/04/26 21:40:29 sevan Exp $
#
# Example kernel config for the RouterBOARD 153.
include "arch/evbmips/conf/std.adm5120"
#ident "RB153-$Revision: 1.22 $"
#ident "RB153-$Revision: 1.23 $"
maxusers 32
@ -105,6 +105,7 @@ cpu0 at mainbus?
# Network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device loop # network loopback
#pseudo-device ppp # Point-to-Point Protocol
#pseudo-device sl # Serial Line IP
@ -159,3 +160,5 @@ options IPSELSRC
#options WDC_EXTIO_DEBUG
#options EXTIO_DEBUG
#options ATADEBUG
include "dev/veriexec.config"

7
sys/arch/evbmips/conf/RB433UAH
View File

@ -1,10 +1,10 @@
# $NetBSD: RB433UAH,v 1.18 2018/12/30 14:51:36 sevan Exp $
# $NetBSD: RB433UAH,v 1.19 2019/04/26 21:40:29 sevan Exp $
include "arch/evbmips/conf/std.atheros"
#options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "RB433UAH-$Revision: 1.18 $"
#ident "RB433UAH-$Revision: 1.19 $"
maxusers 32
@ -175,6 +175,7 @@ sd* at scsibus? target ? lun ?
# Network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
pseudo-device carp # Common Address Redundancy Protocol
#pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
#pseudo-device ppp # Point-to-Point Protocol
@ -197,3 +198,5 @@ pseudo-device ksyms # /dev/ksyms
# A pseudo device needed for Coda # also needs CODA (above)
#pseudo-device vcoda # coda minicache <-> venus comm.
include "dev/veriexec.config"

19
sys/arch/evbmips/conf/SBMIPS
View File

@ -1,10 +1,10 @@
# $NetBSD: SBMIPS,v 1.8 2018/12/30 14:51:36 sevan Exp $
# $NetBSD: SBMIPS,v 1.9 2019/04/26 21:40:29 sevan Exp $
include "arch/evbmips/conf/std.sbmips"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.8 $"
#ident "GENERIC-$Revision: 1.9 $"
#options LOCKDEBUG # XXX XXX XXX XXX
#options DEBUG # extra kernel debugging support
@ -173,7 +173,7 @@ pseudo-device vnd # disk-like interface to files
# Network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
#pseudo-device ppp # Point-to-Point Protocol
@ -207,15 +207,4 @@ pseudo-device ksyms # /dev/ksyms
# A pseudo device needed for Coda # also needs CODA (above)
#pseudo-device vcoda # coda minicache <-> venus comm.
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

7
sys/arch/evbmips/conf/XLSATX
View File

@ -1,8 +1,8 @@
# $NetBSD: XLSATX,v 1.28 2018/12/30 14:51:36 sevan Exp $
# $NetBSD: XLSATX,v 1.29 2019/04/26 21:40:29 sevan Exp $
include "arch/evbmips/conf/std.rmixl"
#ident "XLSATX-$Revision: 1.28 $"
#ident "XLSATX-$Revision: 1.29 $"
#options INCLUDE_CONFIG_FILE # embed config file in kernel binary
@ -185,6 +185,7 @@ pseudo-device vnd # disk-like interface to files
# Network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
#pseudo-device ppp # Point-to-Point Protocol
@ -209,3 +210,5 @@ pseudo-device ksyms # /dev/ksyms
# A pseudo device needed for Coda # also needs CODA (above)
#pseudo-device vcoda # coda minicache <-> venus comm.
include "dev/veriexec.config"

5
sys/arch/evbmips/conf/ZYXELKX
View File

@ -1,4 +1,4 @@
# $NetBSD: ZYXELKX,v 1.15 2018/12/30 14:51:36 sevan Exp $
# $NetBSD: ZYXELKX,v 1.16 2019/04/26 21:40:29 sevan Exp $
include "arch/evbmips/conf/std.rasoc"
@ -225,6 +225,7 @@ ukphy* at mii? phy ? # generic unknown PHYs
# network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device bridge # simple inter-network bridging
pseudo-device loop # network loopback
pseudo-device tap # virtual Ethernet
@ -236,3 +237,5 @@ pseudo-device vlan # 802.1q
pseudo-device pty # pseudo-terminals
pseudo-device clockctl # /dev/clockctl - user control of clock subsystem
pseudo-device ksyms # /dev/ksyms - kernel symbols
include "dev/veriexec.config"

10
sys/arch/evbppc/conf/EV64260
View File

@ -1,4 +1,4 @@
# $NetBSD: EV64260,v 1.72 2018/08/01 20:04:11 maxv Exp $
# $NetBSD: EV64260,v 1.73 2019/04/26 21:40:29 sevan Exp $
#
# MVP -- Motorola's Multiprocessing Verification Platform
#
@ -52,6 +52,11 @@ options SYSVSHM # System V shared memory
#options PIPE_SOCKETPAIR # smaller, but slower pipe(2)
#options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
options DIAGNOSTIC # cheap kernel consistency checks
#options DEBUG # expensive debugging checks/support
@ -246,6 +251,7 @@ wd* at atabus? drive ? flags 0x0000
pseudo-device md # memory disk device
pseudo-device loop # network loopback
pseudo-device bpfilter # packet filter
pseudo-device carp # Common Address Redundancy Protocol
#pseudo-device npf # NPF packet filter
#pseudo-device ppp # Point-to-Point Protocol
#pseudo-device sl # Serial Line IP
@ -261,3 +267,5 @@ pseudo-device clockctl # user control of clock subsystem
pseudo-device ksyms # /dev/ksyms
pseudo-device swdmover # softare dmover(9) back-end
pseudo-device dmoverio # /dev/dmover dmover(9) interface
include "dev/veriexec.config"

7
sys/arch/evbppc/conf/EXPLORA451
View File

@ -1,4 +1,4 @@
# $NetBSD: EXPLORA451,v 1.63 2018/08/01 20:04:11 maxv Exp $
# $NetBSD: EXPLORA451,v 1.64 2019/04/26 21:40:29 sevan Exp $
#
# GENERIC -- everything that's currently supported
#
@ -41,7 +41,7 @@ options USERCONF # userconf(4) support
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
options DIAGNOSTIC # expensive kernel consistency checks
@ -152,6 +152,7 @@ pseudo-device putter # for puffs and pud
# network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
pseudo-device ppp # Point-to-Point Protocol
@ -184,3 +185,5 @@ pseudo-device nsmb # experimental - SMB requester
# wscons pseudo-devices
pseudo-device wsmux # mouse & keyboard multiplexor
pseudo-device wsfont
include "dev/veriexec.config"

12
sys/arch/evbppc/conf/MPC8536DS
View File

@ -1,4 +1,4 @@
# $NetBSD: MPC8536DS,v 1.27 2018/08/01 20:04:11 maxv Exp $
# $NetBSD: MPC8536DS,v 1.28 2019/04/26 21:40:29 sevan Exp $
#
# MPC8536DS -- everything that's currently supported
#
@ -7,7 +7,7 @@ include "arch/evbppc/conf/std.mpc85xx"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
ident "MPC8536DS-$Revision: 1.27 $"
ident "MPC8536DS-$Revision: 1.28 $"
maxusers 32
@ -33,6 +33,11 @@ options USERCONF # userconf(4) support
#options PIPE_SOCKETPAIR # smaller, but slower pipe(2)
#options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
options DIAGNOSTIC # cheap kernel consistency checks
options DEBUG # expensive debugging checks/support
@ -205,9 +210,12 @@ makphy* at mii? phy ? # Marvell PHYs
pseudo-device loop # network loopback
pseudo-device bpfilter # packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device clockctl # user control of clock subsystem
pseudo-device drvctl # user control of disk subsystem
pseudo-device ksyms # /dev/ksyms
pseudo-device pty # pseudo-terminals
pseudo-device kttcp # kernel ttcp
pseudo-device vlan # 802.1Q VLANs
include "dev/veriexec.config"

12
sys/arch/evbppc/conf/MPC8548CDS
View File

@ -1,4 +1,4 @@
# $NetBSD: MPC8548CDS,v 1.26 2018/08/01 20:04:11 maxv Exp $
# $NetBSD: MPC8548CDS,v 1.27 2019/04/26 21:40:29 sevan Exp $
#
# MPC8548CDS -- everything that's currently supported
#
@ -7,7 +7,7 @@ include "arch/evbppc/conf/std.mpc85xx"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
ident "MPC8548CDS-$Revision: 1.26 $"
ident "MPC8548CDS-$Revision: 1.27 $"
maxusers 32
@ -35,6 +35,11 @@ options USERCONF # userconf(4) support
#options PIPE_SOCKETPAIR # smaller, but slower pipe(2)
#options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
options DIAGNOSTIC # cheap kernel consistency checks
options DEBUG # expensive debugging checks/support
@ -193,9 +198,12 @@ wd* at atabus? drive ?
pseudo-device loop # network loopback
pseudo-device bpfilter # packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device clockctl # user control of clock subsystem
pseudo-device drvctl # user control of drive subsystem
pseudo-device ksyms # /dev/ksyms
pseudo-device pty # pseudo-terminals
pseudo-device kttcp # kernel ttcp
pseudo-device vlan # 802.1Q VLANs
include "dev/veriexec.config"

10
sys/arch/evbppc/conf/OPENBLOCKS200
View File

@ -1,4 +1,4 @@
# $NetBSD: OPENBLOCKS200,v 1.47 2018/08/01 20:04:11 maxv Exp $
# $NetBSD: OPENBLOCKS200,v 1.48 2019/04/26 21:40:29 sevan Exp $
#
# GENERIC -- everything that's currently supported
#
@ -33,6 +33,11 @@ options SYSVSHM # System V shared memory
#options PIPE_SOCKETPAIR # smaller, but slower pipe(2)
#options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
#options DIAGNOSTIC # cheap kernel consistency checks
options DEBUG # expensive debugging checks/support
@ -198,6 +203,7 @@ pseudo-device ccd # concatenated/striped disk devices
pseudo-device md # memory disk device
pseudo-device loop # network loopback
pseudo-device bpfilter # packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device ppp # Point-to-Point Protocol
pseudo-device sl # Serial Line IP
@ -213,3 +219,5 @@ pseudo-device clockctl # user control of clock subsystem
pseudo-device ksyms # /dev/ksyms
pseudo-device kttcp # kernel ttcp
pseudo-device putter # for puffs and pud
include "dev/veriexec.config"

12
sys/arch/evbppc/conf/OPENBLOCKS266
View File

@ -1,4 +1,4 @@
# $NetBSD: OPENBLOCKS266,v 1.74 2018/08/01 20:04:11 maxv Exp $
# $NetBSD: OPENBLOCKS266,v 1.75 2019/04/26 21:40:29 sevan Exp $
#
# GENERIC -- everything that's currently supported
#
@ -7,7 +7,7 @@ include "arch/evbppc/conf/std.obs266"
#options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "OPENBLOCKS266-$Revision: 1.74 $"
#ident "OPENBLOCKS266-$Revision: 1.75 $"
maxusers 32
@ -32,6 +32,11 @@ options SYSVSHM # System V shared memory
#options UVMHIST_PRINT
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
#
# Diagnostic/debugging support options
#
@ -176,6 +181,7 @@ options MIIVERBOSE # verbose PHY autoconfig messages
# network pseudo-devices
pseudo-device loop # network loopback
pseudo-device bpfilter # packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device ppp # Point-to-Point Protocol
pseudo-device pppoe # PPP over Ethernet (RFC 2516)
@ -198,3 +204,5 @@ pseudo-device pty # pseudo-terminals
pseudo-device clockctl # user control of clock subsystem
pseudo-device ksyms # /dev/ksyms
pseudo-device putter # for puffs and pud
include "dev/veriexec.config"

11
sys/arch/evbppc/conf/OPENBLOCKS600
View File

@ -1,4 +1,4 @@
# $NetBSD: OPENBLOCKS600,v 1.26 2018/08/01 20:04:11 maxv Exp $
# $NetBSD: OPENBLOCKS600,v 1.27 2019/04/26 21:40:29 sevan Exp $
#
# GENERIC -- everything that's currently supported
#
@ -7,7 +7,7 @@ include "arch/evbppc/conf/std.obs600"
#options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "OPENBLOCKS600-$Revision: 1.26 $"
#ident "OPENBLOCKS600-$Revision: 1.27 $"
maxusers 32
@ -31,6 +31,10 @@ options SYSVSHM # System V shared memory
#options UVMHIST
#options UVMHIST_PRINT
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
#
# Diagnostic/debugging support options
@ -179,6 +183,7 @@ brgphy* at mii? phy ? # Broadcom BCM5400-family PHYs
# network pseudo-devices
pseudo-device loop # network loopback
pseudo-device bpfilter # packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device ppp # Point-to-Point Protocol
pseudo-device pppoe # PPP over Ethernet (RFC 2516)
@ -202,3 +207,5 @@ pseudo-device pty # pseudo-terminals
pseudo-device clockctl # user control of clock subsystem
pseudo-device ksyms # /dev/ksyms
pseudo-device putter # for puffs and pud
include "dev/veriexec.config"

12
sys/arch/evbppc/conf/P2020DS
View File

@ -1,4 +1,4 @@
# $NetBSD: P2020DS,v 1.30 2018/08/01 20:04:11 maxv Exp $
# $NetBSD: P2020DS,v 1.31 2019/04/26 21:40:29 sevan Exp $
#
# P2020DS -- everything that's currently supported
#
@ -8,7 +8,7 @@ include "arch/evbppc/conf/std.mpc85xx"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
ident "P2020DS-$Revision: 1.30 $"
ident "P2020DS-$Revision: 1.31 $"
maxusers 32
@ -40,6 +40,11 @@ options USERCONF # userconf(4) support
#options PIPE_SOCKETPAIR # smaller, but slower pipe(2)
#options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
options DIAGNOSTIC # cheap kernel consistency checks
options DEBUG # expensive debugging checks/support
@ -218,6 +223,7 @@ ukphy* at mii? phy ? # generic unknown PHYs
pseudo-device loop # network loopback
pseudo-device bpfilter # packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device clockctl # user control of clock subsystem
pseudo-device drvctl # user control of drive subsystem
pseudo-device ksyms # /dev/ksyms
@ -226,3 +232,5 @@ pseudo-device kttcp # kernel ttcp
pseudo-device vlan # 802.1Q VLANs
pseudo-device putter # for puffs and pud
pseudo-device vnd # disk-like interface to files
include "dev/veriexec.config"

12
sys/arch/evbppc/conf/P2020RDB
View File

@ -1,4 +1,4 @@
# $NetBSD: P2020RDB,v 1.30 2018/08/01 20:04:11 maxv Exp $
# $NetBSD: P2020RDB,v 1.31 2019/04/26 21:40:29 sevan Exp $
#
# P2020RBD -- everything that's currently supported
#
@ -7,7 +7,7 @@ include "arch/evbppc/conf/std.mpc85xx"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
ident "P2020RBD-$Revision: 1.30 $"
ident "P2020RBD-$Revision: 1.31 $"
maxusers 32
@ -35,6 +35,11 @@ options USERCONF # userconf(4) support
#options PIPE_SOCKETPAIR # smaller, but slower pipe(2)
#options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
options DIAGNOSTIC # cheap kernel consistency checks
#options DEBUG # expensive debugging checks/support
@ -206,6 +211,7 @@ sd* at scsibus? target ? lun ?
pseudo-device loop # network loopback
pseudo-device bpfilter # packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device clockctl # user control of clock subsystem
pseudo-device drvctl # user control of disk subsystem
pseudo-device ksyms # /dev/ksyms
@ -214,3 +220,5 @@ pseudo-device kttcp # kernel ttcp
pseudo-device vlan # 802.1Q VLANs
pseudo-device vnd # disk-like interface to files
pseudo-device putter # for puffs and pud
include "dev/veriexec.config"

9
sys/arch/evbppc/conf/PMPPC
View File

@ -1,4 +1,4 @@
# $NetBSD: PMPPC,v 1.49 2019/04/13 08:22:59 isaki Exp $
# $NetBSD: PMPPC,v 1.50 2019/04/26 21:40:29 sevan Exp $
#
# PMPPC
#
@ -27,6 +27,11 @@ options USERCONF # userconf(4) support
#options PIPE_SOCKETPAIR # smaller, but slower pipe(2)
#options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
options DIAGNOSTIC # cheap kernel consistency checks
#options DEBUG # expensive debugging checks/support
@ -422,6 +427,7 @@ pseudo-device vnd # disk-like interface to files
#pseudo-device md # memory disk device
pseudo-device loop # network loopback
pseudo-device bpfilter # packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device ppp # Point-to-Point Protocol
pseudo-device sl # Serial Line IP
@ -441,3 +447,4 @@ pseudo-device ksyms
pseudo-device wsmux # mouse & keyboard multiplexor
pseudo-device wsfont
include "dev/veriexec.config"

12
sys/arch/evbppc/conf/RB800
View File

@ -1,4 +1,4 @@
# $NetBSD: RB800,v 1.36 2018/08/01 20:04:11 maxv Exp $
# $NetBSD: RB800,v 1.37 2019/04/26 21:40:29 sevan Exp $
#
# RB800 -- everything that's currently supported
#
@ -7,7 +7,7 @@ include "arch/evbppc/conf/std.mpc85xx"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
ident "RB800-$Revision: 1.36 $"
ident "RB800-$Revision: 1.37 $"
maxusers 32
@ -37,6 +37,11 @@ options USERCONF # userconf(4) support
#options PIPE_SOCKETPAIR # smaller, but slower pipe(2)
#options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
#options VERBOSE_INITPPC
options DIAGNOSTIC # cheap kernel consistency checks
@ -211,8 +216,11 @@ ukphy* at mii? phy ? # generic unknown PHYs
pseudo-device md # memory disk device
pseudo-device loop # network loopback
pseudo-device bpfilter # packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device clockctl # user control of clock subsystem
pseudo-device drvctl # user control of drive subsystem
pseudo-device ksyms # /dev/ksyms
pseudo-device pty # pseudo-terminals
pseudo-device kttcp # kernel ttcp
include "dev/veriexec.config"

12
sys/arch/evbppc/conf/RB850GX2
View File

@ -1,4 +1,4 @@
# $NetBSD: RB850GX2,v 1.5 2018/08/01 20:04:11 maxv Exp $
# $NetBSD: RB850GX2,v 1.6 2019/04/26 21:40:29 sevan Exp $
#
# RouterBOARD RB850Gx2
#
@ -7,7 +7,7 @@ include "arch/evbppc/conf/std.mpc85xx"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
ident "RB850GX2-$Revision: 1.5 $"
ident "RB850GX2-$Revision: 1.6 $"
maxusers 32
@ -35,6 +35,11 @@ options USERCONF # userconf(4) support
#options PIPE_SOCKETPAIR # smaller, but slower pipe(2)
options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
options DIAGNOSTIC # cheap kernel consistency checks
options DEBUG # expensive debugging checks/support
@ -141,6 +146,7 @@ iic* at diic?
pseudo-device loop # network loopback
pseudo-device bpfilter # packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device clockctl # user control of clock subsystem
pseudo-device drvctl # user control of drive subsystem
pseudo-device ksyms # /dev/ksyms
@ -148,3 +154,5 @@ pseudo-device pty # pseudo-terminals
pseudo-device vnd # disk-like interface to files
pseudo-device putter # for puffs and pud
pseudo-device lockstat # lock profiling
include "dev/veriexec.config"

12
sys/arch/evbppc/conf/TWRP1025
View File

@ -1,4 +1,4 @@
# $NetBSD: TWRP1025,v 1.26 2018/08/01 20:04:11 maxv Exp $
# $NetBSD: TWRP1025,v 1.27 2019/04/26 21:40:29 sevan Exp $
#
# TWRP1025 -- everything that's currently supported
#
@ -7,7 +7,7 @@ include "arch/evbppc/conf/std.mpc85xx"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
ident "TWRP1025-$Revision: 1.26 $"
ident "TWRP1025-$Revision: 1.27 $"
maxusers 32
@ -35,6 +35,11 @@ options USERCONF # userconf(4) support
#options PIPE_SOCKETPAIR # smaller, but slower pipe(2)
#options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
options DIAGNOSTIC # cheap kernel consistency checks
options DEBUG # expensive debugging checks/support
@ -206,6 +211,7 @@ ld* at sdmmc?
pseudo-device loop # network loopback
pseudo-device bpfilter # packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device clockctl # user control of clock subsystem
pseudo-device drvctl # user control of drive subsystem
pseudo-device ksyms # /dev/ksyms
@ -214,4 +220,6 @@ pseudo-device kttcp # kernel ttcp
pseudo-device vlan # 802.1Q VLANs
pseudo-device lockstat # lock profiling
include "dev/veriexec.config"
cinclude "arch/evbppc/conf/TWRP1025.local"

10
sys/arch/evbsh3/conf/AP_MS104_SH4
View File

@ -1,4 +1,4 @@
# $NetBSD: AP_MS104_SH4,v 1.11 2017/09/14 07:58:40 mrg Exp $
# $NetBSD: AP_MS104_SH4,v 1.12 2019/04/26 21:40:29 sevan Exp $
#
# Alpha project AP-MS104-SH4 config file
#
@ -35,6 +35,11 @@ options SYSVSHM # System V-like memory sharing
options USERCONF # userconf(4) support
#options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Development and Debugging options
options DIAGNOSTIC # expensive kernel consistency checks
#options DEBUG # expensive debugging checks/support
@ -109,6 +114,7 @@ options VND_COMPRESSION # compressed vnd(4)
# network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device loop # network loopback
# miscellaneous pseudo-devices
@ -118,3 +124,5 @@ pseudo-device ksyms # /dev/ksyms
# userland interface to drivers, including autoconf and properties retrieval
pseudo-device drvctl
include "dev/veriexec.config"

10
sys/arch/evbsh3/conf/T_SH7706LAN
View File

@ -1,4 +1,4 @@
# $NetBSD: T_SH7706LAN,v 1.14 2018/08/01 20:04:11 maxv Exp $
# $NetBSD: T_SH7706LAN,v 1.15 2019/04/26 21:40:29 sevan Exp $
#
# TAC T-SH7706LAN Rev.3 config file
#
@ -29,6 +29,11 @@ options SYSVSHM # System V-like memory sharing
options USERCONF # userconf(4) support
#options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Development and Debugging options
options DIAGNOSTIC # expensive kernel consistency checks
#options DEBUG # expensive debugging checks/support
@ -96,6 +101,7 @@ options VND_COMPRESSION # compressed vnd(4)
# network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
@ -106,3 +112,5 @@ pseudo-device ksyms # /dev/ksyms
# userland interface to drivers, including autoconf and properties retrieval
pseudo-device drvctl
include "dev/veriexec.config"

10
sys/arch/evbsh3/conf/T_SH7706LSR
View File

@ -1,4 +1,4 @@
# $NetBSD: T_SH7706LSR,v 1.16 2018/08/01 20:04:11 maxv Exp $
# $NetBSD: T_SH7706LSR,v 1.17 2019/04/26 21:40:29 sevan Exp $
#
# TAC T-SH7706LSR Rev.1 config file
#
@ -29,6 +29,11 @@ options SYSVSHM # System V-like memory sharing
options USERCONF # userconf(4) support
#options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Development and Debugging options
options DIAGNOSTIC # expensive kernel consistency checks
#options DEBUG # expensive debugging checks/support
@ -97,6 +102,7 @@ options VND_COMPRESSION # compressed vnd(4)
# network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
@ -107,3 +113,5 @@ pseudo-device ksyms # /dev/ksyms
# userland interface to drivers, including autoconf and properties retrieval
pseudo-device drvctl
include "dev/veriexec.config"

20
sys/arch/ews4800mips/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.57 2018/08/01 20:04:11 maxv Exp $
# $NetBSD: GENERIC,v 1.58 2019/04/26 21:40:30 sevan Exp $
#
# GENERIC machine description file
# This machine description file is used to generate the default NetBSD
@ -25,7 +25,7 @@ include "arch/ews4800mips/conf/std.ews4800mips"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.57 $"
#ident "GENERIC-$Revision: 1.58 $"
maxusers 16
@ -59,7 +59,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
#options DIAGNOSTIC # expensive kernel consistency checks
@ -228,7 +228,7 @@ options VND_COMPRESSION # compressed vnd(4)
# network pseudo-devices
pseudo-device bpfilter # packet filter ports
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
pseudo-device ppp # Point-to-Point Protocol
@ -267,14 +267,4 @@ pseudo-device ksyms # /dev/ksyms
# wscons pseudo-devices
pseudo-device wsmux
# Veriexec
# a pseudo device needed for veriexec
#pseudo-device veriexec
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

21
sys/arch/hp300/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.202 2019/04/13 08:22:59 isaki Exp $
# $NetBSD: GENERIC,v 1.203 2019/04/26 21:40:30 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/hp300/conf/std.hp300"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.202 $"
#ident "GENERIC-$Revision: 1.203 $"
makeoptions COPTS="-O2 -fno-reorder-blocks" # see share/mk/sys.mk
@ -65,7 +65,7 @@ options MODULAR_DEFAULT_AUTOLOAD
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Debugging options
#options DIAGNOSTIC # Extra kernel sanity checks
@ -291,7 +291,7 @@ pseudo-device bridge # simple inter-network bridging
#options BRIDGE_IPF # bridge uses IP/IPv6 pfil hooks too
pseudo-device agr # IEEE 802.3ad link aggregation
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
#pseudo-device faith # IPv[46] tcp relay translation i/f
#pseudo-device gre # generic L3 over IP tunnel
pseudo-device gif # IPv[46] over IPv[46] tunnel (RFC1933)
@ -322,15 +322,4 @@ pseudo-device ksyms # /dev/ksyms
pseudo-device wsmux # mouse & keyboard multiplexor
pseudo-device wsfont
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

10
sys/arch/hpcarm/conf/IPAQ
View File

@ -1,4 +1,4 @@
# $NetBSD: IPAQ,v 1.81 2018/08/01 20:04:11 maxv Exp $
# $NetBSD: IPAQ,v 1.82 2019/04/26 21:40:30 sevan Exp $
#
# iPAQ H3600 -- Windows-CE based PDA
#
@ -91,6 +91,11 @@ options USERCONF # userconf(4) support
#options PIPE_SOCKETPAIR # smaller, but slower pipe(2)
#options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Development and Debugging options
#options BOOT_DUMP # Enable memorydump at boot
@ -171,6 +176,7 @@ wi* at pcmcia? function ? # Lucent WaveLan IEEE (802.11)
pseudo-device loop # network loopback
pseudo-device bpfilter # packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device sl # CSLIP
pseudo-device ppp # PPP
pseudo-device tun # network tunneling over tty
@ -195,3 +201,5 @@ pseudo-device biconsdev 1 # build-in console device
pseudo-device md # Ramdisk driver
pseudo-device clockctl # user control of clock subsystem
pseudo-device ksyms # /dev/ksyms
include "dev/veriexec.config"

12
sys/arch/hpcarm/conf/JORNADA720
View File

@ -1,4 +1,4 @@
# $NetBSD: JORNADA720,v 1.102 2018/08/01 20:04:11 maxv Exp $
# $NetBSD: JORNADA720,v 1.103 2019/04/26 21:40:30 sevan Exp $
#
# JORNADA -- Windows-CE based jornada 720
#
@ -7,7 +7,7 @@ include "arch/hpcarm/conf/std.sa11x0"
#options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.102 $"
#ident "GENERIC-$Revision: 1.103 $"
# estimated number of users
maxusers 32
@ -96,6 +96,11 @@ options USERCONF # userconf(4) support
options NFS_BOOT_DHCP
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Development and Debugging options
#options BOOT_DUMP # Enable memorydump at boot
@ -255,6 +260,7 @@ apmdev0 at hpcapm0 # APM
# Pseudo-devices
pseudo-device loop # network loopback
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device bpfilter # packet filter
pseudo-device sl # CSLIP
pseudo-device ppp # PPP
@ -283,3 +289,5 @@ pseudo-device clockctl # user control of clock subsystem
pseudo-device ksyms # /dev/ksyms
pseudo-device bcsp # BlueCore Serial Protocol
pseudo-device btuart # Bluetooth HCI UART (H4)
include "dev/veriexec.config"

12
sys/arch/hpcarm/conf/WZERO3
View File

@ -1,4 +1,4 @@
# $NetBSD: WZERO3,v 1.48 2019/02/06 11:58:31 rin Exp $
# $NetBSD: WZERO3,v 1.49 2019/04/26 21:40:30 sevan Exp $
#
# WZERO3 -- Sharp Windows Mobile 5 based PDA
#
@ -8,7 +8,7 @@ include "arch/hpcarm/conf/files.wzero3"
#options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.48 $"
#ident "GENERIC-$Revision: 1.49 $"
# estimated number of users
maxusers 32
@ -122,6 +122,11 @@ options WS_KERNEL_FG=WSCOL_GREEN
options FONT_VT220L8x16
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Development and Debugging options
#options VERBOSE_INIT_ARM
@ -273,6 +278,7 @@ ugen* at uhub? port ?
# Pseudo-devices
pseudo-device loop # network loopback
pseudo-device bpfilter # packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device sl # CSLIP
pseudo-device ppp # PPP
pseudo-device tun # network tunneling over tty
@ -305,3 +311,5 @@ pseudo-device putter # for puffs and pud
# wscons pseudo-devices
pseudo-device wsmux # mouse & keyboard multiplexor
pseudo-device wsfont
include "dev/veriexec.config"

24
sys/arch/hpcmips/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.239 2019/04/13 08:22:59 isaki Exp $
# $NetBSD: GENERIC,v 1.240 2019/04/26 21:40:30 sevan Exp $
#
# GENERIC machine description file
#
@ -24,7 +24,7 @@ include "arch/hpcmips/conf/std.hpcmips.tx39"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.239 $"
#ident "GENERIC-$Revision: 1.240 $"
maxusers 16
@ -37,6 +37,11 @@ options VR4131 # NEC VR4131
options TX392X # Toshiba TX3922
options KLOADER
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Standard system options
options DDB # in-kernel debugger
#options DDB_ONPANIC=0 # don't enter debugger on panic
@ -660,7 +665,7 @@ pseudo-device ppp # serial-line IP ports
pseudo-device pppoe # PPP over Ethernet (RFC 2516)
pseudo-device pty # pseudo-terminals
pseudo-device bpfilter # packet filter ports
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device vnd # virtual disk ick
@ -700,15 +705,4 @@ pseudo-device bridge
pseudo-device agr # IEEE 802.3ad link aggregation
pseudo-device ksyms # /dev/ksyms
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

22
sys/arch/hpcsh/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.111 2018/08/01 20:04:11 maxv Exp $
# $NetBSD: GENERIC,v 1.112 2019/04/26 21:40:30 sevan Exp $
#
# GENERIC machine description file
#
@ -84,6 +84,11 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
#options DIAGNOSTIC # expensive kernel consistency checks
#options DEBUG # expensive debugging checks/support
@ -341,7 +346,7 @@ pseudo-device fss # file system snapshot device
pseudo-device loop # network loopback
pseudo-device ppp # serial-line IP ports
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
#pseudo-device npf # NPF packet filter
#
@ -369,15 +374,4 @@ pseudo-device wsmux # mouse & keyboard multiplexor
#pseudo-device hpf1275a # HP F1275A external keyboard
#wskbd* at hpf1275a? mux 1
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

21
sys/arch/hppa/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.26 2019/04/15 20:38:18 skrll Exp $
# $NetBSD: GENERIC,v 1.27 2019/04/26 21:40:30 sevan Exp $
#
# GENERIC machine description file
#
@ -23,7 +23,7 @@ include "arch/hppa/conf/std.hppa"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
#ident "GENERIC-$Revision: 1.26 $"
#ident "GENERIC-$Revision: 1.27 $"
maxusers 32 # estimated number of users
@ -62,7 +62,7 @@ options USERCONF # userconf(4) support
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
#options DIAGNOSTIC # expensive kernel consistency checks
@ -722,7 +722,7 @@ pseudo-device putter # for puffs and pud
# network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
pseudo-device ppp # Point-to-Point Protocol
@ -764,15 +764,4 @@ pseudo-device ksyms # /dev/ksyms
# userland interface to drivers, including autoconf and properties retrieval
pseudo-device drvctl
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

20
sys/arch/i386/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.1204 2019/03/01 12:23:10 nonaka Exp $
# $NetBSD: GENERIC,v 1.1205 2019/04/26 21:40:30 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/i386/conf/std.i386"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.1204 $"
#ident "GENERIC-$Revision: 1.1205 $"
maxusers 64 # estimated number of users
@ -1471,7 +1471,7 @@ options VND_COMPRESSION # compressed vnd(4)
# network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device loop # network loopback
#pseudo-device mpls # MPLS pseudo-interface
pseudo-device ppp # Point-to-Point Protocol
@ -1530,19 +1530,7 @@ pseudo-device cmos
# userland interface to drivers, including autoconf and properties retrieval
pseudo-device drvctl
options FILEASSOC # fileassoc(9) - required for Veriexec
# and PAX_SEGVGUARD
# Veriexec
pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
options VERIFIED_EXEC_FP_SHA256
options VERIFIED_EXEC_FP_SHA384
options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"
options PAX_ASLR_DEBUG=1 # PaX ASLR debug
options PAX_SEGVGUARD=0 # PaX Segmentation fault guard

22
sys/arch/ibmnws/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.53 2019/04/13 08:23:00 isaki Exp $
# $NetBSD: GENERIC,v 1.54 2019/04/26 21:40:30 sevan Exp $
#
#
@ -20,6 +20,11 @@ options MEMORY_DISK_RBFLAGS=RB_SINGLE # boot in single-user mode
maxusers 8
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
options DDB
# Compatibility options
@ -279,7 +284,7 @@ pseudo-device md # memory disk device (ramdisk)
# network pseudo-devices
pseudo-device bpfilter # network tap
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device loop # network loopback
#
@ -294,15 +299,4 @@ pseudo-device ksyms
pseudo-device clockctl
pseudo-device drvctl # user control of drive subsystem
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

22
sys/arch/iyonix/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.106 2019/04/13 08:23:00 isaki Exp $
# $NetBSD: GENERIC,v 1.107 2019/04/26 21:40:30 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/iyonix/conf/std.iyonix"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.106 $"
#ident "GENERIC-$Revision: 1.107 $"
maxusers 32 # estimated number of users
@ -72,7 +72,7 @@ options USERCONF # userconf(4) support
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
#options DIAGNOSTIC # expensive kernel consistency checks
@ -370,7 +370,7 @@ pseudo-device fss # file system snapshot device
# network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
#pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
#pseudo-device ppp # Point-to-Point Protocol
@ -407,18 +407,6 @@ pseudo-device ksyms # /dev/ksyms
pseudo-device wsmux # mouse & keyboard multiplexor
pseudo-device wsfont
#options FILEASSOC # fileassoc(9) - required for Veriexec
# and PAX_SEGVGUARD
# Veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"
#options PAX_MPROTECT=0 # PaX mprotect(2) restrictions

21
sys/arch/landisk/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.62 2019/02/06 11:58:31 rin Exp $
# $NetBSD: GENERIC,v 1.63 2019/04/26 21:40:30 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/landisk/conf/std.landisk"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.62 $"
#ident "GENERIC-$Revision: 1.63 $"
maxusers 16 # estimated number of users
@ -68,7 +68,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
#options DIAGNOSTIC # cheap kernel consistency checks
@ -431,6 +431,7 @@ options VND_COMPRESSION # compressed vnd(4)
# network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
pseudo-device ppp # Point-to-Point Protocol
@ -467,19 +468,7 @@ pseudo-device nsmb # experimental - SMB requester
pseudo-device wsmux # mouse & keyboard multiplexor
#pseudo-device wsfont
options FILEASSOC # fileassoc(9) - required for Veriexec
# and PAX_SEGVGUARD
# Veriexec
pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
options VERIFIED_EXEC_FP_SHA256
options VERIFIED_EXEC_FP_SHA384
options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"
options PAX_ASLR_DEBUG=1 # PaX ASLR debug
options PAX_SEGVGUARD=0 # PaX Segmentation fault guard

21
sys/arch/mac68k/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.227 2018/12/19 13:57:48 maxv Exp $
# $NetBSD: GENERIC,v 1.228 2019/04/26 21:40:31 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/mac68k/conf/std.mac68k"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.227 $"
#ident "GENERIC-$Revision: 1.228 $"
makeoptions COPTS="-O2 -fno-reorder-blocks" # see share/mk/sys.mk
@ -61,7 +61,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
#options DIAGNOSTIC # cheap kernel consistency checks
@ -303,7 +303,7 @@ pseudo-device vnd # disk-like interface to files
# network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
pseudo-device ppp # Point-to-Point Protocol
@ -338,15 +338,4 @@ pseudo-device swwdog # software watchdog driver
#options RND_COM # use "com" randomness as well (BROKEN)
pseudo-device ksyms # /dev/ksyms
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

19
sys/arch/macppc/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.353 2019/04/10 00:49:49 sevan Exp $
# $NetBSD: GENERIC,v 1.354 2019/04/26 21:40:31 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/macppc/conf/std.macppc"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.353 $"
#ident "GENERIC-$Revision: 1.354 $"
maxusers 32
@ -674,19 +674,6 @@ pseudo-device btuart # Bluetooth HCI UART (H4)
# userland interface to drivers, including autoconf and properties retrieval
pseudo-device drvctl
options FILEASSOC # fileassoc(9) - needed by Veriexec
# Veriexec
#
# a pseudo device needed for veriexec
pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
options VERIFIED_EXEC_FP_SHA256
options VERIFIED_EXEC_FP_SHA384
options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"
#options PAX_MPROTECT=0 # PaX mprotect(2) restrictions

19
sys/arch/mipsco/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.93 2018/08/01 20:04:12 maxv Exp $
# $NetBSD: GENERIC,v 1.94 2019/04/26 21:40:31 sevan Exp $
#
# GENERIC machine description file
#
@ -40,7 +40,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Debugging options
options DDB # kernel dynamic debugger
@ -154,7 +154,7 @@ pseudo-device tun # Network "tunnel" device
pseudo-device tap # virtual Ethernet
#pseudo-device gre # generic L3 over IP tunnel
pseudo-device bpfilter # Berkeley Packet Filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
#pseudo-device vnd # disk-like interface to files
#options VND_COMPRESSION # compressed vnd(4)
#pseudo-device ccd # concatenated and striped disks
@ -181,15 +181,4 @@ pseudo-device clockctl # user control of clock subsystem
#options RND_COM # use "com" randomness as well (BROKEN)
pseudo-device ksyms # /dev/ksyms
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

24
sys/arch/mmeye/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.125 2018/08/01 20:04:12 maxv Exp $
# $NetBSD: GENERIC,v 1.126 2019/04/26 21:40:31 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/mmeye/conf/std.mmeye"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.125 $"
#ident "GENERIC-$Revision: 1.126 $"
maxusers 16 # estimated number of users
@ -54,6 +54,11 @@ options USERCONF # userconf(4) support
#options PIPE_SOCKETPAIR # smaller, but slower pipe(2)
options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
#options DIAGNOSTIC # cheap kernel consistency checks
#options DEBUG # expensive debugging checks/support
@ -192,7 +197,7 @@ pseudo-device fss # file system snapshot device
pseudo-device vnd # disk-like interface to files
#options VND_COMPRESSION # compressed vnd(4)
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
pseudo-device ppp # Point-to-Point Protocol
@ -222,15 +227,4 @@ pseudo-device putter # for puffs and pud
#options MEMORY_DISK_SERVER=0 # no userspace memory disk support
#options MEMORY_DISK_ROOT_SIZE=3074 # size of memory disk, in blocks
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

19
sys/arch/netwinder/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.136 2019/04/13 08:23:00 isaki Exp $
# $NetBSD: GENERIC,v 1.137 2019/04/26 21:40:31 sevan Exp $
#
# GENERIC machine description file
#
@ -34,7 +34,7 @@ options RTC_OFFSET=0 # hardware clock is this many mins. west of GMT
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# CPU options
@ -274,7 +274,7 @@ pseudo-device fss # file system snapshot device
# network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device pppoe # PPP over Ethernet (RFC 2516)
pseudo-device bridge # simple inter-network bridging
#options BRIDGE_IPF # bridge uses IP/IPv6 pfil hooks too
@ -296,15 +296,4 @@ pseudo-device ksyms # /dev/ksyms
pseudo-device wsmux # mouse & keyboard multiplexor
#pseudo-device wsfont
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

21
sys/arch/news68k/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.132 2018/12/19 13:57:49 maxv Exp $
# $NetBSD: GENERIC,v 1.133 2019/04/26 21:40:31 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/news68k/conf/std.news68k"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.132 $"
#ident "GENERIC-$Revision: 1.133 $"
makeoptions COPTS="-O2 -fno-reorder-blocks" # see share/mk/sys.mk
@ -50,7 +50,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Debugging options
#options DIAGNOSTIC # extra kernel sanity checking
@ -235,7 +235,7 @@ pseudo-device tun # Network "tunnel" device
pseudo-device tap # virtual Ethernet
pseudo-device gre # generic L3 over IP tunnel
pseudo-device bpfilter # Berkeley Packet Filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device strip # Starmode Radio IP (Metricom)
pseudo-device gif # IPv[46] over IPv[46] tunnel (RFC1933)
@ -250,15 +250,4 @@ pseudo-device clockctl # user control of clock subsystem
pseudo-device ksyms # /dev/ksyms
pseudo-device putter # for puffs and pud
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

21
sys/arch/newsmips/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.136 2018/10/14 00:10:11 tsutsui Exp $
# $NetBSD: GENERIC,v 1.137 2019/04/26 21:40:31 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/newsmips/conf/std.newsmips"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.136 $"
#ident "GENERIC-$Revision: 1.137 $"
maxusers 16
@ -46,7 +46,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Debugging options
options DDB # kernel dynamic debugger
@ -196,7 +196,7 @@ pseudo-device tun # Network "tunnel" device
pseudo-device tap # virtual Ethernet
#pseudo-device gre # generic L3 over IP tunnel
pseudo-device bpfilter # Berkeley Packet Filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device gif # IPv[46] over IPv[46] tunnel (RFC1933)
#pseudo-device faith # IPv[46] tcp relay translation i/f
pseudo-device stf # 6to4 IPv6 over IPv4 encapsulation
@ -224,15 +224,4 @@ pseudo-device clockctl # user control of clock subsystem
pseudo-device ksyms # /dev/ksyms
pseudo-device putter # for puffs and pud
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

21
sys/arch/next68k/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.147 2018/12/19 13:57:49 maxv Exp $
# $NetBSD: GENERIC,v 1.148 2019/04/26 21:40:31 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/next68k/conf/std.next68k"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.147 $"
#ident "GENERIC-$Revision: 1.148 $"
makeoptions COPTS="-O2 -fno-reorder-blocks" # see share/mk/sys.mk
@ -47,7 +47,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
#options DEBUG # kernel debugging code
#options DIAGNOSTIC # extra kernel sanity checking
@ -218,7 +218,7 @@ pseudo-device accf_http # "httpready" accept filter
# Misc.
pseudo-device loop # network loopback
pseudo-device bpfilter # packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device sl # CSLIP
pseudo-device ppp # PPP
pseudo-device pppoe # PPP over Ethernet (RFC 2516)
@ -254,15 +254,4 @@ pseudo-device clockctl # user control of clock subsystem
pseudo-device ksyms # /dev/ksyms
pseudo-device putter # for puffs and pud
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

24
sys/arch/ofppc/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.169 2019/02/06 11:58:31 rin Exp $
# $NetBSD: GENERIC,v 1.170 2019/04/26 21:40:31 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/ofppc/conf/std.ofppc"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.169 $"
#ident "GENERIC-$Revision: 1.170 $"
maxusers 32
@ -48,6 +48,11 @@ options USERCONF # userconf(4) support
options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
options RDB_PART # Rigid Disk Block partition support
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
#options DIAGNOSTIC # cheap kernel consistency checks
#options DEBUG # expensive debugging checks/support
@ -413,7 +418,7 @@ pseudo-device fss # file system snapshot device
pseudo-device md # memory disk device
pseudo-device loop # network loopback
pseudo-device bpfilter # packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device ppp # Point-to-Point Protocol
pseudo-device pppoe # PPP over Ethernet (RFC 2516)
@ -438,15 +443,4 @@ pseudo-device putter # for puffs and pud
# userland interface to drivers, including autoconf and properties retrieval
pseudo-device drvctl
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

22
sys/arch/pmax/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.198 2019/04/13 08:23:00 isaki Exp $
# $NetBSD: GENERIC,v 1.199 2019/04/26 21:40:31 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/pmax/conf/std.pmax"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.198 $"
#ident "GENERIC-$Revision: 1.199 $"
maxusers 64
@ -65,7 +65,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
#options SCSIVERBOSE # Verbose SCSI errors
#options TCVERBOSE # recognize "unknown" TC devices
@ -272,7 +272,7 @@ pseudo-device ppp # serial-line IP ports
pseudo-device pppoe # PPP over Ethernet (RFC 2516)
pseudo-device pty # pseudo-terminals
pseudo-device bpfilter # packet filter ports
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
#pseudo-device gre # generic L3 over IP tunnel
pseudo-device gif # IPv[46] over IPv[46] tunnel (RFC1933)
@ -306,19 +306,7 @@ pseudo-device ksyms # /dev/ksyms
pseudo-device wsfont # wsfont control device
pseudo-device wsmux # wsmux control device
options FILEASSOC # fileassoc(9) - required for Veriexec
# and PAX_SEGVGUARD
# Veriexec
pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
options VERIFIED_EXEC_FP_SHA256
options VERIFIED_EXEC_FP_SHA384
options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"
options PAX_ASLR_DEBUG=1 # PaX ASLR debug
options PAX_SEGVGUARD=0 # PaX Segmentation fault guard

24
sys/arch/prep/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.188 2019/02/06 11:58:32 rin Exp $
# $NetBSD: GENERIC,v 1.189 2019/04/26 21:40:32 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/prep/conf/std.prep"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.188 $"
#ident "GENERIC-$Revision: 1.189 $"
maxusers 32
@ -49,7 +49,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
#options DIAGNOSTIC # cheap kernel consistency checks
@ -536,7 +536,7 @@ pseudo-device vnd # disk-like interface to files
# network pseudo-devices
pseudo-device loop # network loopback
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device ppp # Point-to-Point Protocol
pseudo-device pppoe # PPP over Ethernet (RFC 2516)
@ -572,18 +572,4 @@ pseudo-device ksyms # /dev/ksyms
pseudo-device wsmux # mouse & keyboard multiplexor
pseudo-device wsfont
options FILEASSOC # fileassoc(9) - required for Veriexec
# and PAX_SEGVGUARD
# Veriexec
#
# a pseudo device needed for veriexec
pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
options VERIFIED_EXEC_FP_SHA256
options VERIFIED_EXEC_FP_SHA384
options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

22
sys/arch/rs6000/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.40 2018/08/01 20:04:13 maxv Exp $
# $NetBSD: GENERIC,v 1.41 2019/04/26 21:40:32 sevan Exp $
#
# GENERIC machine description file
#
@ -24,7 +24,7 @@ options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#makeoptions COPTS="-O2 -mno-powerpc -mno-power" # wheeee
#ident "GENERIC-$Revision: 1.40 $"
#ident "GENERIC-$Revision: 1.41 $"
maxusers 32
@ -54,7 +54,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
#options DIAGNOSTIC # cheap kernel consistency checks
@ -217,7 +217,7 @@ pseudo-device vnd # disk-like interface to files
# network pseudo-devices
pseudo-device loop # network loopback
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device ppp # Point-to-Point Protocol
pseudo-device pppoe # PPP over Ethernet (RFC 2516)
@ -252,16 +252,4 @@ pseudo-device ksyms # /dev/ksyms
pseudo-device wsmux # mouse & keyboard multiplexor
pseudo-device wsfont
# Veriexec
#options VERIFIED_EXEC
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

21
sys/arch/sandpoint/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.101 2018/10/23 19:58:52 jdolecek Exp $
# $NetBSD: GENERIC,v 1.102 2019/04/26 21:40:32 sevan Exp $
#
# machine description file for GENERIC NAS
#
@ -22,7 +22,7 @@ include "arch/sandpoint/conf/std.sandpoint"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.101 $"
#ident "GENERIC-$Revision: 1.102 $"
maxusers 32
@ -48,7 +48,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
#options DIAGNOSTIC # cheap kernel consistency checks
@ -298,7 +298,7 @@ pseudo-device vnd
# network pseudo-devices
pseudo-device loop
pseudo-device bpfilter # packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
#pseudo-device ppp # Point-to-Point Protocol
#pseudo-device pppoe # PPP over Ethernet (RFC 2516)
#pseudo-device npf # NPF packet filter
@ -334,18 +334,7 @@ pseudo-device ksyms # /dev/ksyms
# userland interface to drivers, including autoconf and properties retrieval
pseudo-device drvctl
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"
#options PAX_MPROTECT=0 # PaX mprotect(2) restrictions
#options PAX_ASLR=0 # PaX Address Space Layout Randomization

24
sys/arch/sbmips/conf/GENERIC
View File

@ -1,10 +1,10 @@
# $NetBSD: GENERIC,v 1.107 2018/10/23 19:58:53 jdolecek Exp $
# $NetBSD: GENERIC,v 1.108 2019/04/26 21:40:32 sevan Exp $
include "arch/sbmips/conf/std.sbmips"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.107 $"
#ident "GENERIC-$Revision: 1.108 $"
#options LOCKDEBUG # XXX XXX XXX XXX
#options DEBUG # extra kernel debugging support
@ -23,6 +23,11 @@ options SYSVSEM # System V semaphores
options SYSVSHM # System V shared memory
#options NTP # network time protocol
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Debugging options
#options DIAGNOSTIC # extra kernel sanity checking
#options DEBUG # extra kernel debugging support
@ -166,7 +171,7 @@ pseudo-device vnd # disk-like interface to files
# Network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
#pseudo-device ppp # Point-to-Point Protocol
@ -200,15 +205,4 @@ pseudo-device ksyms # /dev/ksyms
# A pseudo device needed for Coda # also needs CODA (above)
#pseudo-device vcoda # coda minicache <-> venus comm.
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

21
sys/arch/sgimips/conf/GENERIC32_IP12
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC32_IP12,v 1.34 2018/08/01 20:04:14 maxv Exp $
# $NetBSD: GENERIC32_IP12,v 1.35 2019/04/26 21:40:32 sevan Exp $
#
# GENERIC32_IP12 machine description file
#
@ -32,7 +32,7 @@ makeoptions TEXTADDR=0x80002000 # entry point
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC32-IP2x-$Revision: 1.34 $"
#ident "GENERIC32-IP2x-$Revision: 1.35 $"
maxusers 32
@ -62,7 +62,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
#options DIAGNOSTIC # expensive kernel consistency checks
@ -237,7 +237,7 @@ pseudo-device vnd # disk-like interface to files
# network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
#pseudo-device ppp # Point-to-Point Protocol
@ -267,15 +267,4 @@ pseudo-device wsfont
# a pseudo device needed for Coda # also needs CODA (above)
#pseudo-device vcoda # coda minicache <-> venus comm.
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

21
sys/arch/sgimips/conf/GENERIC32_IP2x
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC32_IP2x,v 1.115 2019/04/13 08:23:00 isaki Exp $
# $NetBSD: GENERIC32_IP2x,v 1.116 2019/04/26 21:40:32 sevan Exp $
#
# GENERIC32_IP2x machine description file
#
@ -29,7 +29,7 @@ makeoptions TEXTADDR=0x88069000 # entry point
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC32-IP2x-$Revision: 1.115 $"
#ident "GENERIC32-IP2x-$Revision: 1.116 $"
maxusers 32
@ -62,7 +62,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
#options DIAGNOSTIC # expensive kernel consistency checks
@ -284,7 +284,7 @@ pseudo-device vnd # disk-like interface to files
# network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
pseudo-device ppp # Point-to-Point Protocol
@ -316,15 +316,4 @@ pseudo-device putter # for puffs and pud
# a pseudo device needed for Coda # also needs CODA (above)
pseudo-device vcoda # coda minicache <-> venus comm.
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

19
sys/arch/sgimips/conf/GENERIC32_IP3x
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC32_IP3x,v 1.124 2019/03/23 17:44:49 sevan Exp $
# $NetBSD: GENERIC32_IP3x,v 1.125 2019/04/26 21:40:32 sevan Exp $
#
# GENERIC32_IP3x machine description file
#
@ -28,7 +28,7 @@ makeoptions TEXTADDR="0x80069000" # entry point
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC32_IP3x-$Revision: 1.124 $"
#ident "GENERIC32_IP3x-$Revision: 1.125 $"
maxusers 32
@ -324,7 +324,7 @@ pseudo-device vnd # disk-like interface to files
# network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device loop # network loopback
pseudo-device ppp # Point-to-Point Protocol
@ -360,15 +360,4 @@ pseudo-device drvctl
# a pseudo device needed for Coda # also needs CODA (above)
pseudo-device vcoda # coda minicache <-> venus comm.
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"

24
sys/arch/shark/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.132 2019/04/13 08:23:00 isaki Exp $
# $NetBSD: GENERIC,v 1.133 2019/04/26 21:40:32 sevan Exp $
#
# Generic Shark configuration.
#
@ -7,7 +7,7 @@ include "arch/shark/conf/std.shark"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.132 $"
#ident "GENERIC-$Revision: 1.133 $"
# estimated number of users
maxusers 32
@ -134,6 +134,11 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
options MODULAR # new style module(7) framework
options MODULAR_DEFAULT_AUTOLOAD
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
options BUFQ_PRIOCSCAN
# Development and Debugging options
#options ARM700BUGTRACK # track the ARM700 swi bug
@ -275,7 +280,7 @@ pseudo-device accf_http # "httpready" accept filter
pseudo-device loop # network loopback
pseudo-device bpfilter # packet filter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
#pseudo-device sl # CSLIP
#pseudo-device ppp # PPP
#pseudo-device tun # network tunneling over tty
@ -303,18 +308,7 @@ pseudo-device wsfont
pseudo-device ksyms # /dev/ksyms
pseudo-device putter # for puffs and pud
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"
options PAX_MPROTECT=0 # PaX mprotect(2) restrictions
options PAX_ASLR=0 # PaX Address Space Layout Randomization

24
sys/arch/sparc/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.265 2019/04/13 08:23:00 isaki Exp $
# $NetBSD: GENERIC,v 1.266 2019/04/26 21:40:32 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/sparc/conf/std.sparc"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.265 $"
#ident "GENERIC-$Revision: 1.266 $"
maxusers 32
@ -88,7 +88,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
## NFS boot options; tries DHCP/BOOTP then BOOTPARAM
options NFS_BOOT_BOOTPARAM
@ -577,7 +577,7 @@ pseudo-device tap # virtual Ethernet
## interface that allows selective examining of incoming packets.
pseudo-device bpfilter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
@ -714,21 +714,7 @@ pseudo-device wsmux # mouse and keyboard multiplexor
pseudo-device wsfont
pseudo-device putter # for puffs and pud
#options FILEASSOC # fileassoc(9) - required for Veriexec
# and PAX_SEGVGUARD
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"
#options PAX_MPROTECT=0 # PaX mprotect(2) restrictions
# (for static binaries only for now)

27
sys/arch/sparc64/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.214 2019/02/06 11:58:32 rin Exp $
# $NetBSD: GENERIC,v 1.215 2019/04/26 21:40:32 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/sparc64/conf/std.sparc64"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.214 $"
#ident "GENERIC-$Revision: 1.215 $"
maxusers 64
@ -66,7 +66,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
## NFS boot options; tries DHCP/BOOTP then BOOTPARAM
options NFS_BOOT_BOOTPARAM
@ -716,8 +716,7 @@ pseudo-device gre # generic L3 over IP tunnel
## interface that allows selective examining of incoming packets.
pseudo-device bpfilter
# Common Address Redundancy Protocol
#pseudo-device carp
pseudo-device carp # Common Address Redundancy Protocol
## IEEE 802.1q encapsulation
pseudo-device vlan
@ -978,28 +977,14 @@ pseudo-device fss # file system snapshot device
pseudo-device lockstat # lock profiling
pseudo-device putter # for puffs and pud
options FILEASSOC # fileassoc(9) - required for Veriexec
# and PAX_SEGVGUARD
# Veriexec
#
# a pseudo device needed for veriexec
pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
options VERIFIED_EXEC_FP_SHA256
options VERIFIED_EXEC_FP_SHA384
options VERIFIED_EXEC_FP_SHA512
# a pseudo device needed for SMBFS
pseudo-device nsmb # experimental - SMB requester
# drvctl - needed to show device dictionary via drvctl(8)
pseudo-device drvctl
include "dev/veriexec.config"
options PAX_ASLR_DEBUG=1 # PaX ASLR debug
options PAX_SEGVGUARD=0 # PaX Segmentation fault guard
# XXX: there is no PLT format for sparc64 that cooperates with

21
sys/arch/vax/conf/GENERIC
View File

@ -1,4 +1,4 @@
# $NetBSD: GENERIC,v 1.209 2019/04/13 08:23:01 isaki Exp $
# $NetBSD: GENERIC,v 1.210 2019/04/26 21:40:32 sevan Exp $
#
# GENERIC machine description file
#
@ -22,7 +22,7 @@ include "arch/vax/conf/std.vax"
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
#ident "GENERIC-$Revision: 1.209 $"
#ident "GENERIC-$Revision: 1.210 $"
# Here are all different supported CPU types listed.
#options VAX8800 # VAX 8500, 8530, 8550, 8700, 8800
@ -142,7 +142,7 @@ options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
#options BUFQ_PRIOCSCAN
options BUFQ_PRIOCSCAN
# Kernel(s) to compile
config netbsd root on ? type ?
@ -287,7 +287,7 @@ pseudo-device accf_http # "httpready" accept filter
pseudo-device loop
pseudo-device pty # pseudo-terminals
pseudo-device bpfilter
#pseudo-device carp # Common Address Redundancy Protocol
pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
#pseudo-device sl
pseudo-device ppp
@ -323,15 +323,4 @@ pseudo-device drvctl # user control of drive subsystem
pseudo-device ksyms # /dev/ksyms
pseudo-device wsmux # mouse & keyboard multiplexor
# Veriexec
#
# a pseudo device needed for veriexec
#pseudo-device veriexec
#
# Uncomment the fingerprint methods below that are desired. Note that
# removing fingerprint methods will have almost no impact on the kernel
# code size.
#
#options VERIFIED_EXEC_FP_SHA256
#options VERIFIED_EXEC_FP_SHA384
#options VERIFIED_EXEC_FP_SHA512
include "dev/veriexec.config"