1# SPDX-License-Identifier: GPL-2.0-only
2menu "EFI (Extensible Firmware Interface) Support"
3	depends on EFI
4
5config EFI_VARS
6	tristate "EFI Variable Support via sysfs"
7	depends on EFI && (X86 || IA64)
8	default n
9	help
10	  If you say Y here, you are able to get EFI (Extensible Firmware
11	  Interface) variable information via sysfs.  You may read,
12	  write, create, and destroy EFI variables through this interface.
13	  Note that this driver is only retained for compatibility with
14	  legacy users: new users should use the efivarfs filesystem
15	  instead.
16
17config EFI_ESRT
18	bool
19	depends on EFI && !IA64
20	default y
21
22config EFI_VARS_PSTORE
23	tristate "Register efivars backend for pstore"
24	depends on PSTORE
25	default y
26	help
27	  Say Y here to enable use efivars as a backend to pstore. This
28	  will allow writing console messages, crash dumps, or anything
29	  else supported by pstore to EFI variables.
30
31config EFI_VARS_PSTORE_DEFAULT_DISABLE
32	bool "Disable using efivars as a pstore backend by default"
33	depends on EFI_VARS_PSTORE
34	default n
35	help
36	  Saying Y here will disable the use of efivars as a storage
37	  backend for pstore by default. This setting can be overridden
38	  using the efivars module's pstore_disable parameter.
39
40config EFI_RUNTIME_MAP
41	bool "Export efi runtime maps to sysfs"
42	depends on X86 && EFI && KEXEC_CORE
43	default y
44	help
45	  Export efi runtime memory maps to /sys/firmware/efi/runtime-map.
46	  That memory map is used for example by kexec to set up efi virtual
47	  mapping the 2nd kernel, but can also be used for debugging purposes.
48
49	  See also Documentation/ABI/testing/sysfs-firmware-efi-runtime-map.
50
51config EFI_FAKE_MEMMAP
52	bool "Enable EFI fake memory map"
53	depends on EFI && X86
54	default n
55	help
56	  Saying Y here will enable "efi_fake_mem" boot option.
57	  By specifying this parameter, you can add arbitrary attribute
58	  to specific memory range by updating original (firmware provided)
59	  EFI memmap.
60	  This is useful for debugging of EFI memmap related feature.
61	  e.g. Address Range Mirroring feature.
62
63config EFI_MAX_FAKE_MEM
64	int "maximum allowable number of ranges in efi_fake_mem boot option"
65	depends on EFI_FAKE_MEMMAP
66	range 1 128
67	default 8
68	help
69	  Maximum allowable number of ranges in efi_fake_mem boot option.
70	  Ranges can be set up to this value using comma-separated list.
71	  The default value is 8.
72
73config EFI_SOFT_RESERVE
74	bool "Reserve EFI Specific Purpose Memory"
75	depends on EFI && EFI_STUB && ACPI_HMAT
76	default ACPI_HMAT
77	help
78	  On systems that have mixed performance classes of memory EFI
79	  may indicate specific purpose memory with an attribute (See
80	  EFI_MEMORY_SP in UEFI 2.8). A memory range tagged with this
81	  attribute may have unique performance characteristics compared
82	  to the system's general purpose "System RAM" pool. On the
83	  expectation that such memory has application specific usage,
84	  and its base EFI memory type is "conventional" answer Y to
85	  arrange for the kernel to reserve it as a "Soft Reserved"
86	  resource, and set aside for direct-access (device-dax) by
87	  default. The memory range can later be optionally assigned to
88	  the page allocator by system administrator policy via the
89	  device-dax kmem facility. Say N to have the kernel treat this
90	  memory as "System RAM" by default.
91
92	  If unsure, say Y.
93
94config EFI_PARAMS_FROM_FDT
95	bool
96	help
97	  Select this config option from the architecture Kconfig if
98	  the EFI runtime support gets system table address, memory
99          map address, and other parameters from the device tree.
100
101config EFI_RUNTIME_WRAPPERS
102	bool
103
104config EFI_GENERIC_STUB
105	bool
106
107config EFI_ARMSTUB_DTB_LOADER
108	bool "Enable the DTB loader"
109	depends on EFI_GENERIC_STUB && !RISCV && !LOONGARCH
110	default y
111	help
112	  Select this config option to add support for the dtb= command
113	  line parameter, allowing a device tree blob to be loaded into
114	  memory from the EFI System Partition by the stub.
115
116	  If the device tree is provided by the platform or by
117	  the bootloader this option may not be needed.
118	  But, for various development reasons and to maintain existing
119	  functionality for bootloaders that do not have such support
120	  this option is necessary.
121
122config EFI_GENERIC_STUB_INITRD_CMDLINE_LOADER
123	bool "Enable the command line initrd loader" if !X86
124	depends on EFI_STUB && (EFI_GENERIC_STUB || X86)
125	default y
126	help
127	  Select this config option to add support for the initrd= command
128	  line parameter, allowing an initrd to be loaded into memory that
129	  resides on a file system backed by an implementation of
130	  EFI_SIMPLE_FILE_SYSTEM_PROTOCOL.
131
132	  This method has been superseded by the simpler LoadFile2 based
133	  initrd loading method, but the initrd= loader is retained as it
134	  can be used from the UEFI Shell or other generic loaders that
135	  don't implement the Linux specific LoadFile2 method.
136
137config EFI_BOOTLOADER_CONTROL
138	tristate "EFI Bootloader Control"
139	default n
140	help
141	  This module installs a reboot hook, such that if reboot() is
142	  invoked with a string argument NNN, "NNN" is copied to the
143	  "LoaderEntryOneShot" EFI variable, to be read by the
144	  bootloader. If the string matches one of the boot labels
145	  defined in its configuration, the bootloader will boot once
146	  to that label. The "LoaderEntryRebootReason" EFI variable is
147	  set with the reboot reason: "reboot" or "shutdown". The
148	  bootloader reads this reboot reason and takes particular
149	  action according to its policy.
150
151config EFI_CAPSULE_LOADER
152	tristate "EFI capsule loader"
153	depends on EFI
154	help
155	  This option exposes a loader interface "/dev/efi_capsule_loader" for
156	  users to load EFI capsules. This driver requires working runtime
157	  capsule support in the firmware, which many OEMs do not provide.
158
159	  Most users should say N.
160
161config EFI_CAPSULE_QUIRK_QUARK_CSH
162	bool "Add support for Quark capsules with non-standard headers"
163	depends on X86 && !64BIT
164	select EFI_CAPSULE_LOADER
165	default y
166	help
167	  Add support for processing Quark X1000 EFI capsules, whose header
168	  layout deviates from the layout mandated by the UEFI specification.
169
170config EFI_TEST
171	tristate "EFI Runtime Service Tests Support"
172	depends on EFI
173	default n
174	help
175	  This driver uses the efi.<service> function pointers directly instead
176	  of going through the efivar API, because it is not trying to test the
177	  kernel subsystem, just for testing the UEFI runtime service
178	  interfaces which are provided by the firmware. This driver is used
179	  by the Firmware Test Suite (FWTS) for testing the UEFI runtime
180	  interfaces readiness of the firmware.
181	  Details for FWTS are available from:
182	  <https://wiki.ubuntu.com/FirmwareTestSuite>
183
184	  Say Y here to enable the runtime services support via /dev/efi_test.
185	  If unsure, say N.
186
187config APPLE_PROPERTIES
188	bool "Apple Device Properties"
189	depends on EFI_STUB && X86
190	select EFI_DEV_PATH_PARSER
191	select UCS2_STRING
192	help
193	  Retrieve properties from EFI on Apple Macs and assign them to
194	  devices, allowing for improved support of Apple hardware.
195	  Properties that would otherwise be missing include the
196	  Thunderbolt Device ROM and GPU configuration data.
197
198	  If unsure, say Y if you have a Mac.  Otherwise N.
199
200config RESET_ATTACK_MITIGATION
201	bool "Reset memory attack mitigation"
202	depends on EFI_STUB
203	help
204	  Request that the firmware clear the contents of RAM after a reboot
205	  using the TCG Platform Reset Attack Mitigation specification. This
206	  protects against an attacker forcibly rebooting the system while it
207	  still contains secrets in RAM, booting another OS and extracting the
208	  secrets. This should only be enabled when userland is configured to
209	  clear the MemoryOverwriteRequest flag on clean shutdown after secrets
210	  have been evicted, since otherwise it will trigger even on clean
211	  reboots.
212
213config EFI_RCI2_TABLE
214	bool "EFI Runtime Configuration Interface Table Version 2 Support"
215	depends on X86 || COMPILE_TEST
216	help
217	  Displays the content of the Runtime Configuration Interface
218	  Table version 2 on Dell EMC PowerEdge systems as a binary
219	  attribute 'rci2' under /sys/firmware/efi/tables directory.
220
221	  RCI2 table contains BIOS HII in XML format and is used to populate
222	  BIOS setup page in Dell EMC OpenManage Server Administrator tool.
223	  The BIOS setup page contains BIOS tokens which can be configured.
224
225	  Say Y here for Dell EMC PowerEdge systems.
226
227config EFI_DISABLE_PCI_DMA
228       bool "Clear Busmaster bit on PCI bridges during ExitBootServices()"
229       help
230	  Disable the busmaster bit in the control register on all PCI bridges
231	  while calling ExitBootServices() and passing control to the runtime
232	  kernel. System firmware may configure the IOMMU to prevent malicious
233	  PCI devices from being able to attack the OS via DMA. However, since
234	  firmware can't guarantee that the OS is IOMMU-aware, it will tear
235	  down IOMMU configuration when ExitBootServices() is called. This
236	  leaves a window between where a hostile device could still cause
237	  damage before Linux configures the IOMMU again.
238
239	  If you say Y here, the EFI stub will clear the busmaster bit on all
240	  PCI bridges before ExitBootServices() is called. This will prevent
241	  any malicious PCI devices from being able to perform DMA until the
242	  kernel reenables busmastering after configuring the IOMMU.
243
244	  This option will cause failures with some poorly behaved hardware
245	  and should not be enabled without testing. The kernel commandline
246	  options "efi=disable_early_pci_dma" or "efi=no_disable_early_pci_dma"
247	  may be used to override this option.
248
249endmenu
250
251config EFI_EMBEDDED_FIRMWARE
252	bool
253	depends on EFI
254	select CRYPTO_LIB_SHA256
255
256config UEFI_CPER
257	bool
258
259config UEFI_CPER_ARM
260	bool
261	depends on UEFI_CPER && ( ARM || ARM64 )
262	default y
263
264config UEFI_CPER_X86
265	bool
266	depends on UEFI_CPER && X86
267	default y
268
269config EFI_DEV_PATH_PARSER
270	bool
271	depends on ACPI
272	default n
273
274config EFI_EARLYCON
275	def_bool y
276	depends on EFI && SERIAL_EARLYCON && !ARM && !IA64
277	select FONT_SUPPORT
278	select ARCH_USE_MEMREMAP_PROT
279
280config EFI_CUSTOM_SSDT_OVERLAYS
281	bool "Load custom ACPI SSDT overlay from an EFI variable"
282	depends on EFI && ACPI
283	default ACPI_TABLE_UPGRADE
284	help
285	  Allow loading of an ACPI SSDT overlay from an EFI variable specified
286	  by a kernel command line option.
287
288	  See Documentation/admin-guide/acpi/ssdt-overlays.rst for more
289	  information.
290