This is xnu-11215.1.10. See this file in:
#
# Mach Operating System
# Copyright (c) 1986 Carnegie-Mellon University
# Copyright 2001-2018 Apple Inc.
#
# All rights reserved. The CMU software License Agreement
# specifies the terms and conditions for use and redistribution.
#
#######################################################################
#
# Master machine independent configuration file.
#
# Specific configuration files are created based on this and
# the machine specific master file using the doconf script.
#
# Any changes to the master configuration files will affect all
# other configuration files based upon it.
#
#######################################################################
#
# To build a configuration, execute "doconf <configuration>."
# Configurations are specified in the "Configurations:" section
# of the MASTER and MASTER.* files as follows:
#
# <configuration> = [ <attribute0> <attribute1> ... <attributeN> ]
#
# Lines in the MASTER and MASTER.* files are selected based on
# the attribute selector list, found in a comment at the end of
# the line. This is a list of attributes separated by commas.
# The "!" operator selects the line if none of the attributes are
# specified.
#
# For example:
#
# <foo,bar> selects a line if "foo" or "bar" are specified.
# <!foo,bar> selects a line if neither "foo" nor "bar" is
# specified.
#
# Lines with no attributes specified are selected for all
# configurations.
#
#######################################################################
#
# SYSTEM SIZE CONFIGURATION (select exactly one)
#
# xlarge = extra large scale system configuration
# large = large scale system configuration
# medium = medium scale system configuration
# small = small scale system configuration
# xsmall = extra small scale system configuration
# bsmall = special extra small scale system configuration
#
#######################################################################
#
options INET # # <inet>
options MACH # Standard Mach features # <mach>
options MACH_FLIPC # Fast-Local IPC # <mach_flipc>
options LOOP # loopback support # <loop>
options VLAN # # <vlan>
options BOND # # <bond>
options IF_FAKE # # <if_fake>
options IF_HEADLESS # # <if_headless>
options IF_REDIRECT # # <if_redirect>
options AH_ALL_CRYPTO # AH all crypto algs # <ah_all_crypto>
options PF # Packet Filter # <pf>
options PF_ECN # PF use ECN marking # <pf_ecn>
options PFLOG # PF log interface # <pflog>
options MEASURE_BW # interface bandwidth measurement # <measure_bw>
options DUMMYNET # dummynet support # <dummynet>
options TRAFFIC_MGT # traffic management support # <traffic_mgt>
options MULTICAST # Internet Protocol Class-D $
options IFNET_INPUT_SANITY_CHK # allow dlil/ifnet input sanity check # <ifnet_input_chk>
options MULTIPATH # Multipath domain # <multipath>
options MPTCP # Multipath TCP # <mptcp>
options SYSV_SEM # SVID semaphores # <sysv_sem>
options SYSV_MSG # SVID messages # <sysv_msg>
options SYSV_SHM # SVID shared mem # <sysv_shm>
options PSYNCH # pthread synch # <psynch>
options FLOW_DIVERT # <flow_divert>
options NECP # <necp>
options CONTENT_FILTER # # <content_filter>
options PACKET_MANGLER # # <packet_mangler>
options REMOTE_VIF # # <remote_vif>
options SKYWALK # # <skywalk>
options CONFIG_NEXUS_USER_PIPE # # <config_nexus_user_pipe>
options CONFIG_NEXUS_KERNEL_PIPE # # <config_nexus_kernel_pipe>
options CONFIG_NEXUS_MONITOR # # <config_nexus_monitor>
options CONFIG_NEXUS_FLOWSWITCH # # <config_nexus_flowswitch>
options CONFIG_NEXUS_NETIF # # <config_nexus_netif>
options CONFIG_MBUF_MCACHE # mbufs use mcache # <config_mbuf_mcache>
options KCTL_TEST # kernel control test # <kctl_test>
# secure_kernel - secure kernel from user programs
options SECURE_KERNEL # <secure_kernel>
#
# 4.4 general kernel
#
options SOCKETS # socket support # <inet>
options DIAGNOSTIC # diagnostics # <diagnostic>
options PROFILE # kernel profiling # <profile>
options SENDFILE # sendfile # <sendfile>
options NETWORKING # networking layer # <inet>
options CONFIG_FSE # file system events # <config_fse>
options CONFIG_IMAGEBOOT # local image boot # <config_imageboot>
options CONFIG_MBUF_JUMBO # jumbo cluster pool # <config_mbuf_jumbo>
options CONFIG_IMAGEBOOT_IMG4 # authenticate image with AppleImage4 # <config_imageboot_img4>
options CONFIG_IMAGEBOOT_CHUNKLIST # authenticate image with a chunk list # <config_imageboot_chunklist>
options CONFIG_WORKLOOP_DEBUG # <config_workloop_debug>
#
# 4.4 filesystems
#
options MOCKFS # Boot from an executable # <mockfs>
options FIFO # fifo support # <fifo>
options FDESC # fdesc_fs support # <fdesc>
options DEVFS # devfs support # <devfs>
options ROUTEFS # routefs support # <routefs>
options NULLFS # nullfs support # <nullfs>
options BINDFS # bindfs support # <bindfs>
options FS_COMPRESSION # fs compression # <fs_compression>
options CONFIG_DEV_KMEM # /dev/kmem device for reading KVA # <config_dev_kmem>
#
# file system features
#
options QUOTA # file system quotas # <quota>
options NAMEDSTREAMS # named stream vnop support # <namedstreams>
options CONFIG_APPLEDOUBLE # apple double support # <config_appledouble>
options CONFIG_VOLFS # volfs path support (legacy) # <config_volfs>
options CONFIG_IMGSRC_ACCESS # source of imageboot dmg # <config_imgsrc_access>
options CONFIG_TRIGGERS # trigger vnodes # <config_triggers>
options CONFIG_EXT_RESOLVER # e.g. memberd # <config_ext_resolver>
options CONFIG_SEARCHFS # searchfs syscall support # <config_searchfs>
options CONFIG_MNT_SUID # allow suid binaries # <config_mnt_suid>
options CONFIG_MNT_ROOTSNAP # allow rooting from snapshot # <config_mnt_rootsnap>
options CONFIG_ROSV_STARTUP # allow read-only system volume startup # <config_rosv_startup>
options CONFIG_FIRMLINKS # support "firmlinks" # <config_firmlinks>
options CONFIG_MOUNT_VM # mount VM volume on startup # <config_mount_vm>
options CONFIG_MOUNT_PREBOOTRECOVERY # mount Preboot and/or Recovery volume on startup # <config_mount_prebootrecovery>
options CONFIG_DATALESS_FILES # support dataless file materialization # <config_dataless_files>
options CONFIG_BASESYSTEMROOT # mount BaseSystem as initial root filesystem on some kinds of startup # <config_basesystemroot>
options CONFIG_UNION_MOUNTS # support union mounts # <config_union_mounts>
options CONFIG_FILE_LEASES # local file leasing support # <config_file_leases>
#
# VFS debugging
#
options CONFIG_IOCOUNT_TRACE # enable vnode's iocount tracing # <config_iocount_trace>
# NFS support
#
options NFSSERVER # Be an NFS server # <nfsserver>
options CONFIG_NETBOOT # network booting # <config_netboot>
#
# Machine Independent Apple Features
#
profile # build a profiling kernel # <profile>
#
# IPv6 Support
#
options IPSEC # IP security # <ipsec>
options IPSEC_ESP # IP security # <ipsec>
pseudo-device gif 1 # <gif>
pseudo-device dummy 2 # <dummy>
pseudo-device stf 1 # <stf>
options CRYPTO # <ipsec,crypto>
options CRYPTO_SHA2 # <crypto_sha2>
options ENCRYPTED_SWAP # <encrypted_swap>
options CONFIG_IMG4 # <config_img4>
options ZLIB # inflate/deflate support # <zlib>
options ZLIBC # inflate/deflate support # <zlibc>
options IF_BRIDGE # <if_bridge>
#
# configurable kernel event related resources
#
options CONFIG_KN_HASHSIZE=64 # <medium,large,xlarge>
options CONFIG_KN_HASHSIZE=48 # <small,xsmall>
options CONFIG_KN_HASHSIZE=20 # <bsmall>
#
# configurable vfs related resources
# CONFIG_VNODES - used to pre allocate vnode related resources
# CONFIG_NC_HASH - name cache hash table allocation
# CONFIG_VFS_NAMES - name strings
#
# 263168 magic number for medium CONFIG_VNODES is based on memory
# Number vnodes is (memsize/64k) + 1024
# This is the calculation that is used by launchd in tiger
# we are clipping the max based on 16G
# ie ((16*1024*1024*1024)/(64 *1024)) + 1024 = 263168;
options CONFIG_VNODES=263168 # <large,xlarge>
options CONFIG_VNODES=263168 # <medium>
options CONFIG_VNODES=10240 # <small>
options CONFIG_VNODES=750 # <bsmall>
options CONFIG_NC_HASH=5120 # <large,xlarge>
options CONFIG_NC_HASH=4096 # <medium>
options CONFIG_NC_HASH=2048 # <small,xsmall>
options CONFIG_NC_HASH=1024 # <bsmall>
options CONFIG_VFS_NAMES=5120 # <large,xlarge>
options CONFIG_VFS_NAMES=4096 # <medium>
options CONFIG_VFS_NAMES=3072 # <small,xsmall>
options CONFIG_VFS_NAMES=2048 # <bsmall>
options CONFIG_MAX_CLUSTERS=8 # <xlarge,large,medium>
options CONFIG_MAX_CLUSTERS=4 # <small,xsmall,bsmall>
#
# configurable options for minumum number of buffers for kernel memory
#
options CONFIG_MIN_NBUF=256 # <medium,large,xlarge>
options CONFIG_MIN_NBUF=128 # <small>
options CONFIG_MIN_NBUF=80 # <xsmall>
options CONFIG_MIN_NBUF=64 # <bsmall>
options CONFIG_MIN_NIOBUF=128 # <medium,large,xlarge>
options CONFIG_MIN_NIOBUF=64 # <xsmall,small>
options CONFIG_MIN_NIOBUF=32 # <bsmall>
#
# set maximum space used for packet buffers
#
options CONFIG_NMBCLUSTERS="((1024 * 1024) / MCLBYTES)" # <large,xlarge>
options CONFIG_NMBCLUSTERS="((1024 * 512) / MCLBYTES)" # <medium>
options CONFIG_NMBCLUSTERS="((1024 * 256) / MCLBYTES)" # <bsmall,xsmall,small>
#
# Configure size of TCP hash table
#
options CONFIG_TCBHASHSIZE=4096 # <medium,large,xlarge>
options CONFIG_TCBHASHSIZE=128 # <xsmall,small,bsmall>
#
# configurable async IO options
# CONFIG_AIO_MAX - system wide limit of async IO requests.
# CONFIG_AIO_PROCESS_MAX - process limit of async IO requests.
# CONFIG_AIO_THREAD_COUNT - number of async IO worker threads created.
#
options CONFIG_AIO_MAX=360 # <xlarge>
options CONFIG_AIO_MAX=180 # <large>
options CONFIG_AIO_MAX=90 # <medium>
options CONFIG_AIO_MAX=45 # <small>
options CONFIG_AIO_MAX=20 # <xsmall>
options CONFIG_AIO_MAX=10 # <bsmall>
options CONFIG_AIO_PROCESS_MAX=64 # <xlarge>
options CONFIG_AIO_PROCESS_MAX=32 # <large>
options CONFIG_AIO_PROCESS_MAX=16 # <medium>
options CONFIG_AIO_PROCESS_MAX=12 # <small>
options CONFIG_AIO_PROCESS_MAX=8 # <xsmall>
options CONFIG_AIO_PROCESS_MAX=4 # <bsmall>
options CONFIG_AIO_THREAD_COUNT=16 # <xlarge>
options CONFIG_AIO_THREAD_COUNT=8 # <large>
options CONFIG_AIO_THREAD_COUNT=4 # <medium>
options CONFIG_AIO_THREAD_COUNT=3 # <small>
options CONFIG_AIO_THREAD_COUNT=2 # <xsmall,bsmall>
options CONFIG_MAXVIFS=32 # <medium,large,xlarge>
options CONFIG_MAXVIFS=16 # <small,xsmall>
options CONFIG_MAXVIFS=2 # <bsmall>
options CONFIG_MFCTBLSIZ=256 # <medium,large,xlarge>
options CONFIG_MFCTBLSIZ=128 # <small,xsmall>
options CONFIG_MFCTBLSIZ=16 # <bsmall>
#
# configurable kernel message buffer size
#
options CONFIG_MSG_BSIZE_REL=16384 # <msgb_small>
options CONFIG_MSG_BSIZE_DEV=131072 # <msgb_small>
options CONFIG_MSG_BSIZE_REL=131072 # <msgb_large>
options CONFIG_MSG_BSIZE_DEV=131072 # <msgb_large>
options CONFIG_MSG_BSIZE=CONFIG_MSG_BSIZE_REL # <!development,debug>
options CONFIG_MSG_BSIZE=CONFIG_MSG_BSIZE_DEV # <development,debug>
#
# maximum size of the per-process Mach IPC table
#
options CONFIG_IPC_TABLE_ENTRIES_SIZE_MAX=3145728 # 3M == 131072 entries # <bsmall,small,xsmall>
options CONFIG_IPC_TABLE_ENTRIES_SIZE_MAX=7340032 # 7M == 305834 entries # <medium,large,xlarge>
options CONFIG_IPC_TABLE_REQUEST_SIZE_MAX=1048576 # 1M == 65536 requests # <bsmall,small,xsmall>
options CONFIG_IPC_TABLE_REQUEST_SIZE_MAX=2097152 # 2M == 131072 requests # <medium,large,xlarge>
#
# maximum copyout size for IPC debugging tools
#
options CONFIG_IPC_KERNEL_MAP_SIZE=32 # 32M # <bsmall,small,xsmall>
options CONFIG_IPC_KERNEL_MAP_SIZE=64 # 64M # <medium,large,xlarge>
#
# configurable kernel - use these options to strip strings from panic
# and printf calls.
# no_printf_str - saves around 45K of kernel footprint.
#
options CONFIG_NO_PRINTF_STRINGS # <no_printf_str>
options CONFIG_NO_KPRINTF_STRINGS # <no_kprintf_str>
# support vsprintf (deprecated in favor of vsnprintf)
options CONFIG_VSPRINTF # <vsprintf>
#
# configurable kernel - general switch to say we are building for an
# embedded device
#
options CONFIG_EMBEDDED # <config_embedded>
# Compile XNU with SPTM support. This option should be used mutually exclusively
# with the config_pmap_ppl option
options CONFIG_SPTM # <config_sptm>
# Enable support for commmunication with exclaves. Requires SPTM support.
options CONFIG_EXCLAVES # <config_exclaves>
# Compile XNU with PPL support.
options CONFIG_PMAP_PPL # <config_pmap_ppl>
options NOS_ARM_ASM # <nos_arm_asm>
options NOS_ARM_PMAP # <nos_arm_pmap>
# support dynamic signing of code
#
options CONFIG_DYNAMIC_CODE_SIGNING # <dynamic_codesigning>
# enforce library validation on all processes.
#
options CONFIG_ENFORCE_LIBRARY_VALIDATION # <config_library_validation>
# support loading a second static trust cache
#
options CONFIG_SECOND_STATIC_TRUST_CACHE # <second_static_trust_cache>
# support supplemental signatures
#
options CONFIG_SUPPLEMENTAL_SIGNATURES # <config_supplemental_signatures>
#
# code decryption... used on embedded for app protection, DSMOS on desktop
#
options CONFIG_CODE_DECRYPTION # <config_code_decryption>
#
# User Content Protection, used on embedded
#
options CONFIG_PROTECT # <config_protect>
#allow write-protection of key page
options CONFIG_KEYPAGE_WP # <config_keypage_wp>
#
# allow vm_pageout_scan to dynamically adjust its priority based on priorities of waiters
#
options CONFIG_VPS_DYNAMIC_PRIO # <vps_dynamic_prio>
#
# enable per-process memory priority tracking
#
options CONFIG_MEMORYSTATUS # <memorystatus>
options CONFIG_DEFERRED_RECLAIM # <config_deferred_reclaim>
#
# enable jetsam - used on embedded
#
options CONFIG_JETSAM # <jetsam>
#
# enable new wait queue implementation stats / debugging
#
options CONFIG_WAITQ_STATS # <config_waitq_stats>
#
# enable freezing of suspended processes - used on embedded
#
options CONFIG_FREEZE # <freeze>
options CHECK_CS_VALIDATION_BITMAP # <config_cs_validation_bitmap>
#
# enable physical writes accounting
#
options CONFIG_PHYS_WRITE_ACCT # <phys_write_acct>
#
# enable detection of file cache thrashing - used on platforms with
# dynamic VM compression enabled
#
options CONFIG_PHANTOM_CACHE # <phantom_cache>
#
# enable detection of anonymous pages staying unmodified after first use
# - used on platforms with dynamic VM compression enabled
#
options CONFIG_TRACK_UNMODIFIED_ANON_PAGES # <track_unmodified_anon_pages>
#
# memory pressure event support
#
options VM_PRESSURE_EVENTS # <vm_pressure_events>
options CONFIG_SECLUDED_MEMORY # <config_secluded_memory>
#
# Ledger features
#
options CONFIG_LEDGER_INTERVAL_MAX # <config_ledger_interval_max>
#
# I/O Scheduling
#
options CONFIG_IOSCHED # <config_iosched>
#
# Accounting for I/O usage
#
options CONFIG_IO_ACCOUNTING # <config_io_accounting>
#
# Enable inheritance of importance through specially marked mach ports and for file locks
# For now debug is enabled wherever inheritance is
#
options IMPORTANCE_INHERITANCE # <importance_inheritance>
options IMPORTANCE_TRACE # <importance_trace>
options IMPORTANCE_DEBUG # <importance_debug>
options CONFIG_TELEMETRY # <config_telemetry>
options CONFIG_PROC_UUID_POLICY # <config_proc_uuid_policy>
#
# ECC data logging
#
options CONFIG_ECC_LOGGING # <config_ecc_logging>
#
# Application core dumps
#
options CONFIG_COREDUMP # <config_coredump>
#
# Vnode guards
#
options CONFIG_VNGUARD # <config_vnguard>
#
# Paravirtualization
#
options CONFIG_PV_TICKET # <config_pv_ticket>
#
# Enable extended VM address space and user heap segregation
#
options CONFIG_MAP_RANGES # <config_map_ranges>
#
# Ethernet (ARP)
#
pseudo-device ether # <networking,inet>
#
# Network loopback device
#
pseudo-device loop # <networking,inet>
#
# UCB pseudo terminal service
#
pseudo-device pty 512 init pty_init # <xlarge>
pseudo-device pty 256 init pty_init # <large>
pseudo-device pty 128 init pty_init # <medium>
pseudo-device pty 48 init pty_init # <small>
pseudo-device pty 16 init pty_init # <xsmall>
pseudo-device pty 8 init pty_init # <bsmall>
#
# Cloning pseudo terminal service
#
pseudo-device ptmx 1 init ptmx_init
#
# memory device
pseudo-device mdevdevice 1 init mdevinit
#
#
# packet filter device
#
pseudo-device bpfilter 4 init bpf_init # <networking,inet>
#
# fsevents device
pseudo-device fsevents 1 init fsevents_init # <config_fse>
pseudo-device random 1 init random_init
pseudo-device dtrace 1 init dtrace_init # <config_dtrace>
pseudo-device helper 1 init helper_init # <config_dtrace>
pseudo-device lockstat 1 init lockstat_init # <config_dtrace>
pseudo-device lockprof 1 init lockprof_init # <config_dtrace>
pseudo-device sdt 1 init sdt_init # <config_dtrace>
pseudo-device systrace 1 init systrace_init # <config_dtrace>
pseudo-device fbt 1 init fbt_init # <config_dtrace>
pseudo-device profile_prvd 1 init profile_init # <config_dtrace>
# monotonic devices
pseudo-device monotonic 1 init mt_dev_init # <config_cpu_counters>
#
# IOKit configuration options
#
options HIBERNATION # system hibernation # <hibernation>
options IOKITCPP # C++ implementation # <iokitcpp>
options IOKITSTATS # IOKit statistics # <iokitstats>
options IOTRACKING # IOKit tracking # <iotracking>
options CONFIG_SLEEP # # <config_sleep>
options CONFIG_MAX_THREADS=500 # IOConfigThread threads
options NO_KEXTD # <no_kextd>
options NO_KERNEL_HID # <no_kernel_hid>
#
# Libkern configuration options
#
options LIBKERNCPP # C++ implementation # <libkerncpp>
options CONFIG_BLOCKS # Blocks runtime # <config_blocks>
options CONFIG_KXLD # kxld/runtime linking of kexts # <config_kxld>
options CONFIG_KEC_FIPS # Kernel External Components for FIPS compliance (KEC_FIPS) # <config_kec_fips>
# Note that when adding this config option to an architecture, one MUST
# add the architecture to the preprocessor test at the beginning of
# libkern/kmod/cplus_{start.c,stop.c}.
options CONFIG_STATIC_CPPINIT # Static library initializes kext cpp runtime # <config_static_cppinit>
#
# libsa configuration options
#
# CONFIG_KEXT_BASEMENT - alloc post boot loaded kexts after prelinked kexts
#
options CONFIG_KEXT_BASEMENT # # <config_kext_basement>
#
# Persona Management
#
options CONFIG_PERSONAS # Persona management # <config_personas>
options PERSONA_DEBUG # Persona debugging # <persona_debug>
#
# security configuration options
#
options CONFIG_MACF # Mandatory Access Control Framework # <config_macf>
options CONFIG_MACF_SOCKET_SUBSET # MAC socket subest (no labels) # <config_macf>
#options CONFIG_MACF_DEBUG # debug # <config_macf>
options CONFIG_AUDIT # Kernel auditing # <config_audit>
options CONFIG_ARCADE # Arcade validation support # <config_arcade>
options CONFIG_SETUID # setuid/setgid support # <config_setuid>
options CONFIG_SECURE_BSD_ROOT # secure BSD root # <config_secure_bsd_root>
options CONFIG_KAS_INFO # kas_info support # <config_kas_info>
options CONFIG_PROC_RESOURCE_LIMITS # Per process limits for resources like file descriptors and mach ports # <config_proc_resource_limits>
#
# MACH configuration options.
#
#
# This defines configuration options that are normally used only during
# kernel code development and debugging. They add run-time error checks or
# statistics gathering, which will slow down the system
#
##########################################################
#
# MACH_ASSERT controls the assert() and ASSERT() macros, used to verify the
# consistency of various algorithms in the kernel. The performance impact
# of this option is significant.
#
options MACH_ASSERT # # <mach_assert>
options MACH_VM_DEBUG # # <debug>
options CONFIG_ZLEAKS # Live zone leak debugging # <zleaks>
options CONFIG_VOUCHER_DEPRECATED # Enable deprecated voucher managers # <config_voucher_deprecated>
#
# CONFIG_DEBUGGER_FOR_ZONE_INFO restricts zone info so that it is only
# available when the kernel is being debugged.
#
options CONFIG_DEBUGGER_FOR_ZONE_INFO # <debugger_for_zone_info>
#
# MACH_LDEBUG controls the internal consistency checks and
# data gathering in the locking package. This also enables a debug-only
# version of simple-locks on uniprocessor machines. The code size and
# performance impact of this option is significant.
#
options MACH_LDEBUG # # <debug>
#
# configuration option for full, partial, or no kernel debug event tracing
#
options KDEBUG # kernel tracing # <kdebug>
options IST_KDEBUG # limited tracing # <ist_kdebug>
options NO_KDEBUG # no kernel tracing # <no_kdebug>
#
# CONFIG_DTRACE enables code needed to support DTrace. Currently this is
# only used for delivery of traps/interrupts to DTrace.
#
options CONFIG_DTRACE # # <config_dtrace>
options LOCK_STATS # # <lock_stats>
# kernel performance tracing
options KPERF # <kperf>
options CONFIG_CPU_COUNTERS # <config_cpu_counters>
options CONFIG_PERVASIVE_CPI # <config_pervasive_cpi>
options CONFIG_PERVASIVE_ENERGY # <config_pervasive_energy>
options CONFIG_IOTRACE # Physical IO tracing # <config_iotrace>
options PGO # <pgo>
# DEVELOPMENT define for development builds
options DEVELOPMENT # dev kernel # <development>
# DEBUG kernel
options DEBUG # general debugging code # <debug>
options CONFIG_NONFATAL_ASSERTS # non fatal asserts # <softasserts>
options MACH_BSD # BSD subsystem on top of Mach # <mach_bsd>
options IOKIT # # <iokit>
#
# configurable kernel related resources (CONFIG_THREAD_MAX needs to stay in
# sync with bsd/conf/MASTER until we fix the config system... todo XXX
#
options CONFIG_THREAD_MAX=2560 # <medium,large,xlarge>
options CONFIG_THREAD_MAX=1536 # <small,xsmall>
options CONFIG_THREAD_MAX=1024 # <bsmall>
options CONFIG_TASK_MAX=1024 # <medium,large,xlarge>
options CONFIG_TASK_MAX=768 # <small,>
options CONFIG_TASK_MAX=512 # <xsmall,bsmall>
#
# Minimum zone map size: 115 MB
#
options CONFIG_ZONE_MAP_MIN=120586240 # <xsmall,bsmall,small,medium,large,xlarge>
# vc_progress_white - make the progress gear white instead of black
options CONFIG_VC_PROGRESS_WHITE # <vc_progress_white>
#
# Timeshare scheduler implementations
#
options CONFIG_SCHED_TIMESHARE_CORE # <config_sched_timeshare_core>
options CONFIG_CLUTCH # <config_clutch>
options CONFIG_SCHED_AUTO_JOIN # <config_sched_auto_join>
options CONFIG_SCHED_RT_ALLOW # <config_sched_rt_allow>
options CONFIG_SCHED_IDLE_IN_PLACE # <config_sched_idle_in_place>
options CONFIG_SCHED_SFI # <config_sched_sfi>
options CONFIG_PROB_GZALLOC # <pgzalloc>
options CONFIG_SCHED_DEFERRED_AST # <config_sched_deferred_ast>
options CONFIG_PREADOPT_TG # <config_preadopt_tg>
options CONFIG_PREADOPT_TG_DEBUG # <config_preadopt_tg_debug>
# This is overridden by the board configuration's HAS_FAST_CNTVCT.
options CONFIG_SKIP_PRECISE_USER_KERNEL_TIME # <config_skip_precise_user_kernel_time>
#
# Switch to disable cpu, wakeup and high memory watermark monitors
#
options CONFIG_NOMONITORS # <config_nomonitors>
options MACH_KDP # KDP # <mach_kdp>
options CONFIG_SERIAL_KDP # KDP over serial # <config_serial_kdp>
options CONFIG_KDP_INTERACTIVE_DEBUGGING # <kdp_interactive_debugging>
options CONFIG_KDP_COREDUMP_ENCRYPTION # Support for encrypting kernel coredumps # <config_kdp_coredump_encryption>
options CONFIG_TASKWATCH
options CONFIG_USER_NOTIFICATION # <config_user_notification>
#
# Kernel Power On Self Tests
#
options CONFIG_XNUPOST # <config_xnupost>
#
# Kernel proc reference instrumentation
#
options PROC_REF_DEBUG # <proc_ref_debug>
#
# Kernel Voucher Attr Manager for Activity Trace
#
options CONFIG_ATM # <config_atm>
# Group related tasks together into coalitions
options CONFIG_COALITIONS # <config_coalitions>
# Enable support for sysdiagnose notifications
options CONFIG_SYSDIAGNOSE # <config_sysdiagnose>
# Configurable Security Restrictions
options CONFIG_CSR # <config_csr>
options CONFIG_CSR_FROM_DT # <config_csr_from_dt>
# Enable collection of IO Compression statistics
options CONFIG_IO_COMPRESSION_STATS # <config_io_compression_stats>
#
# Console options
#
options SERIAL_CONSOLE # bi-directional serial over UART
options VIDEO_CONSOLE # uni-directional output over framebuffer
#
# Syscall options
#
options CONFIG_REQUIRES_U32_MUNGING # incoming U32 argument structures must be munged to match U64 # <config_requires_u32_munging>
#
# copyout() instrumentation
#
options COPYOUT_SHIM # Shim for copyout memory analysis via kext #<copyout_shim>
#
# Enable hardware correlation of mach absolute time
# across intel/arm boundary
options CONFIG_MACH_BRIDGE_SEND_TIME # # <config_mach_bridge_send_time>
options CONFIG_MACH_BRIDGE_RECV_TIME # # <config_mach_bridge_recv_time>
options CONFIG_QUIESCE_COUNTER # Support for _COMM_PAGE_CPU_QUIESCENT_COUNTER # <config_quiesce_counter>
options CONFIG_ARM_PFZ # Support for PFZ on ARM # <config_arm_pfz>
#
# Sanitizers
#
options CONFIG_KASAN # <config_kasan>
options CONFIG_UBSAN # <config_ubsan>
options CONFIG_KCOV # <config_kcov>
options CONFIG_KSANCOV # <config_ksancov>
options CONFIG_STKSZ # <config_stksz>
# dark boot support
options CONFIG_DARKBOOT # <config_darkboot>
# support for tracking service port labels for stackshots/debugging
options CONFIG_SERVICE_PORT_INFO # <config_service_port_info>
# support for processes delaying idle sleep for pending IO
options CONFIG_DELAY_IDLE_SLEEP # <config_delay_idle_sleep>
# support for storing a 64-bit user supplied value in the proc structure
options CONFIG_PROC_UDATA_STORAGE # <config_proc_udata_storage>
pseudo-device ksancov 1 init ksancov_init_dev # <config_ksancov>
# Debug instrumentation for statistics and catching of code that
# leaves interrupts masked or preemption disabled for an excessive
# period of time.
options SCHED_HYGIENE_DEBUG # <sched_hygiene_debug>
# support for system call rejection/tracing
options CONFIG_DEBUG_SYSCALL_REJECTION # <config_debug_syscall_rejection>
# Extensible panic log support
options CONFIG_EXT_PANICLOG # <config_ext_paniclog>
# support for collecting statistics on task suspension
options CONFIG_TASK_SUSPEND_STATS # <config_task_suspend_stats>
# Support for non-fatal Branch Target Identification exception reporting and logging
options CONFIG_BTI_TELEMETRY # <config_bti_telemetry>