| 1 | # SPDX-License-Identifier: GPL-2.0-only |
| 2 | config HAVE_GCC_PLUGINS |
| 3 | bool |
| 4 | help |
| 5 | An arch should select this symbol if it supports building with |
| 6 | GCC plugins. |
| 7 | |
| 8 | menuconfig GCC_PLUGINS |
| 9 | bool "GCC plugins" |
| 10 | depends on HAVE_GCC_PLUGINS |
| 11 | depends on CC_IS_GCC |
| 12 | depends on $(success,test -e $(shell,$(CC) -print-file-name=plugin)/include/plugin-version.h) |
| 13 | default y |
| 14 | help |
| 15 | GCC plugins are loadable modules that provide extra features to the |
| 16 | compiler. They are useful for runtime instrumentation and static analysis. |
| 17 | |
| 18 | See Documentation/kbuild/gcc-plugins.rst for details. |
| 19 | |
| 20 | if GCC_PLUGINS |
| 21 | |
| 22 | config GCC_PLUGIN_LATENT_ENTROPY |
| 23 | bool "Generate some entropy during boot and runtime" |
| 24 | help |
| 25 | By saying Y here the kernel will instrument some kernel code to |
| 26 | extract some entropy from both original and artificially created |
| 27 | program state. This will help especially embedded systems where |
| 28 | there is little 'natural' source of entropy normally. The cost |
| 29 | is some slowdown of the boot process (about 0.5%) and fork and |
| 30 | irq processing. |
| 31 | |
| 32 | Note that entropy extracted this way is not cryptographically |
| 33 | secure! |
| 34 | |
| 35 | This plugin was ported from grsecurity/PaX. More information at: |
| 36 | * https://grsecurity.net/ |
| 37 | * https://pax.grsecurity.net/ |
| 38 | |
| 39 | endif |