blob: 43c4c920f30a92ca73e16d8ac3c9249b9a4ae4ca [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001#
2# Makefile for the linux kernel.
3#
4
Joe Perchesb9ee9792013-07-31 13:53:42 -07005obj-y = fork.o exec_domain.o panic.o \
Thomas Gleixner5cee9642014-06-22 12:06:40 +02006 cpu.o exit.o softirq.o resource.o \
7 sysctl.o sysctl_binary.o capability.o ptrace.o user.o \
Oleg Nesterove73f8952012-05-11 10:59:07 +10008 signal.o sys.o kmod.o workqueue.o pid.o task_work.o \
Thomas Gleixner5cee9642014-06-22 12:06:40 +02009 extable.o params.o \
10 kthread.o sys_ni.o nsproxy.o \
Robin Holt15d94b82013-07-08 16:01:32 -070011 notifier.o ksysfs.o cred.o reboot.o \
Iulia Manda28138932015-04-15 16:16:41 -070012 async.o range.o smpboot.o
13
14obj-$(CONFIG_MULTIUSER) += groups.o
Peter Zijlstra029632f2011-10-25 10:00:11 +020015
Steven Rostedt606576c2008-10-06 19:06:12 -040016ifdef CONFIG_FUNCTION_TRACER
Steven Rostedt6ec56232008-05-14 21:30:30 -040017# Do not trace debug files and internal ftrace files
Heiko Carstensc0a80c02015-01-09 13:06:33 +010018CFLAGS_REMOVE_cgroup-debug.o = $(CC_FLAGS_FTRACE)
19CFLAGS_REMOVE_irq_work.o = $(CC_FLAGS_FTRACE)
Steven Rostedt1d09daa2008-05-12 21:20:55 +020020endif
21
Andi Kleen58edae32014-02-08 09:01:10 +010022# cond_syscall is currently not LTO compatible
23CFLAGS_sys_ni.o = $(DISABLE_LTO)
24
Peter Zijlstra391e43d2011-11-15 17:14:39 +010025obj-y += sched/
Peter Zijlstra01768b42013-10-31 18:11:53 +010026obj-y += locking/
Rafael J. Wysockidae5cbc2012-01-14 00:33:03 +010027obj-y += power/
Joe Perchesb9ee9792013-07-31 13:53:42 -070028obj-y += printk/
Martin Schwidefsky0244ad02013-08-30 09:39:53 +020029obj-y += irq/
Paul E. McKenney4102ada2013-10-08 20:23:47 -070030obj-y += rcu/
Seth Jenningsb700e7f2014-12-16 11:58:19 -060031obj-y += livepatch/
Peter Zijlstra391e43d2011-11-15 17:14:39 +010032
Cyrill Gorcunov1e142b22013-02-27 17:05:58 -080033obj-$(CONFIG_CHECKPOINT_RESTORE) += kcmp.o
Matt Helsley8174f152008-10-18 20:27:19 -070034obj-$(CONFIG_FREEZER) += freezer.o
Adrian Bunkb03f6482008-07-25 01:45:35 -070035obj-$(CONFIG_PROFILING) += profile.o
Ingo Molnar8637c092006-07-03 00:24:38 -070036obj-$(CONFIG_STACKTRACE) += stacktrace.o
john stultzad596172006-06-26 00:25:06 -070037obj-y += time/
Linus Torvalds1da177e2005-04-16 15:20:36 -070038obj-$(CONFIG_FUTEX) += futex.o
Ingo Molnar34f192c2006-03-27 01:16:24 -080039ifeq ($(CONFIG_COMPAT),y)
40obj-$(CONFIG_FUTEX) += futex_compat.o
41endif
Linus Torvalds1da177e2005-04-16 15:20:36 -070042obj-$(CONFIG_GENERIC_ISA_DMA) += dma.o
Amerigo Wang351f8f82011-01-12 16:59:39 -080043obj-$(CONFIG_SMP) += smp.o
Andrew Morton9316fca2009-01-14 09:35:44 -080044ifneq ($(CONFIG_SMP),y)
Andrew Morton53ce3d92009-01-09 12:27:08 -080045obj-y += up.o
46endif
Linus Torvalds1da177e2005-04-16 15:20:36 -070047obj-$(CONFIG_UID16) += uid16.o
David Howellsb56e5a12013-08-30 16:07:30 +010048obj-$(CONFIG_SYSTEM_TRUSTED_KEYRING) += system_keyring.o system_certificates.o
Linus Torvalds1da177e2005-04-16 15:20:36 -070049obj-$(CONFIG_MODULES) += module.o
David Howellsb56e5a12013-08-30 16:07:30 +010050obj-$(CONFIG_MODULE_SIG) += module_signing.o
Linus Torvalds1da177e2005-04-16 15:20:36 -070051obj-$(CONFIG_KALLSYMS) += kallsyms.o
Linus Torvalds1da177e2005-04-16 15:20:36 -070052obj-$(CONFIG_BSD_PROCESS_ACCT) += acct.o
Eric W. Biedermandc009d92005-06-25 14:57:52 -070053obj-$(CONFIG_KEXEC) += kexec.o
Arjan van de Ven6dab2772008-01-30 13:33:08 +010054obj-$(CONFIG_BACKTRACE_SELF_TEST) += backtracetest.o
Linus Torvalds1da177e2005-04-16 15:20:36 -070055obj-$(CONFIG_COMPAT) += compat.o
Paul Menageddbcc7e2007-10-18 23:39:30 -070056obj-$(CONFIG_CGROUPS) += cgroup.o
Matt Helsleydc52ddc2008-10-18 20:27:21 -070057obj-$(CONFIG_CGROUP_FREEZER) += cgroup_freezer.o
Linus Torvalds1da177e2005-04-16 15:20:36 -070058obj-$(CONFIG_CPUSETS) += cpuset.o
Pavel Emelyanovaee16ce2008-02-08 04:18:23 -080059obj-$(CONFIG_UTS_NS) += utsname.o
60obj-$(CONFIG_USER_NS) += user_namespace.o
Pavel Emelyanov74bd59b2008-02-08 04:18:24 -080061obj-$(CONFIG_PID_NS) += pid_namespace.o
Linus Torvalds1da177e2005-04-16 15:20:36 -070062obj-$(CONFIG_IKCONFIG) += configs.o
Tejun Heobbf1bb32010-05-08 16:20:53 +020063obj-$(CONFIG_SMP) += stop_machine.o
Ananth N Mavinakayanahalli8c1c9352008-01-30 13:32:53 +010064obj-$(CONFIG_KPROBES_SANITY_TEST) += test_kprobes.o
Eric Paris939a67f2009-12-17 20:12:06 -050065obj-$(CONFIG_AUDIT) += audit.o auditfilter.o
Linus Torvalds1da177e2005-04-16 15:20:36 -070066obj-$(CONFIG_AUDITSYSCALL) += auditsc.o
Eric Paris939a67f2009-12-17 20:12:06 -050067obj-$(CONFIG_AUDIT_WATCH) += audit_watch.o
Al Viro74c3cbe2007-07-22 08:04:18 -040068obj-$(CONFIG_AUDIT_TREE) += audit_tree.o
Eric Paris939a67f2009-12-17 20:12:06 -050069obj-$(CONFIG_GCOV_KERNEL) += gcov/
Linus Torvalds1da177e2005-04-16 15:20:36 -070070obj-$(CONFIG_KPROBES) += kprobes.o
Jason Wesselc4338202009-05-19 07:49:32 -050071obj-$(CONFIG_KGDB) += debug/
Mandeep Singh Bainese162b392009-01-15 11:08:40 -080072obj-$(CONFIG_DETECT_HUNG_TASK) += hung_task.o
Don Zickus58687ac2010-05-07 17:11:44 -040073obj-$(CONFIG_LOCKUP_DETECTOR) += watchdog.o
Linus Torvalds1da177e2005-04-16 15:20:36 -070074obj-$(CONFIG_SECCOMP) += seccomp.o
Jens Axboeb86ff9812006-03-23 19:56:55 +010075obj-$(CONFIG_RELAY) += relay.o
Eric W. Biederman39732ac2007-02-14 00:33:58 -080076obj-$(CONFIG_SYSCTL) += utsname_sysctl.o
Shailabh Nagarca74e922006-07-14 00:24:36 -070077obj-$(CONFIG_TASK_DELAY_ACCT) += delayacct.o
Jay Lanf3cef7a2006-09-30 23:28:55 -070078obj-$(CONFIG_TASKSTATS) += taskstats.o tsacct.o
Mathieu Desnoyers97e1c182008-07-18 12:16:16 -040079obj-$(CONFIG_TRACEPOINTS) += tracepoint.o
Arjan van de Ven97455122008-01-25 21:08:34 +010080obj-$(CONFIG_LATENCYTOP) += latencytop.o
Daisuke HATAYAMA1fcccba2010-03-05 13:44:07 -080081obj-$(CONFIG_BINFMT_ELF) += elfcore.o
82obj-$(CONFIG_COMPAT_BINFMT_ELF) += elfcore.o
83obj-$(CONFIG_BINFMT_ELF_FDPIC) += elfcore.o
Steven Rostedt606576c2008-10-06 19:06:12 -040084obj-$(CONFIG_FUNCTION_TRACER) += trace/
Steven Rostedtbc0c38d2008-05-12 21:20:42 +020085obj-$(CONFIG_TRACING) += trace/
Josh Triplettea632e92012-09-02 19:45:14 -070086obj-$(CONFIG_TRACE_CLOCK) += trace/
Paul Mundt1155de42009-06-25 14:30:12 +090087obj-$(CONFIG_RING_BUFFER) += trace/
Mathieu Desnoyers870915e2010-10-28 11:31:17 -040088obj-$(CONFIG_TRACEPOINTS) += trace/
Peter Zijlstrae360adb2010-10-14 14:01:34 +080089obj-$(CONFIG_IRQ_WORK) += irq_work.o
Colin Crossab100232011-02-10 02:04:45 -080090obj-$(CONFIG_CPU_PM) += cpu_pm.o
Alexei Starovoitovf89b7752014-10-23 18:41:08 -070091obj-$(CONFIG_BPF) += bpf/
Borislav Petkovfae85b72010-10-26 20:24:03 +020092
93obj-$(CONFIG_PERF_EVENTS) += events/
94
Avi Kivity7a041092009-10-25 14:24:45 +020095obj-$(CONFIG_USER_RETURN_NOTIFIER) += user-return-notifier.o
Steffen Klassert16295be2010-01-06 19:47:10 +110096obj-$(CONFIG_PADATA) += padata.o
Olaf Hering93a72052011-03-23 16:43:29 -070097obj-$(CONFIG_CRASH_DUMP) += crash_dump.o
Jason Baronb77f0f32011-08-05 16:40:40 -040098obj-$(CONFIG_JUMP_LABEL) += jump_label.o
Frederic Weisbecker91d1aa432012-11-27 19:33:25 +010099obj-$(CONFIG_CONTEXT_TRACKING) += context_tracking.o
Paul E. McKenney51b11302014-01-27 11:49:39 -0800100obj-$(CONFIG_TORTURE_TEST) += torture.o
Linus Torvalds1da177e2005-04-16 15:20:36 -0700101
Linus Torvalds1da177e2005-04-16 15:20:36 -0700102$(obj)/configs.o: $(obj)/config_data.h
103
104# config_data.h contains the same information as ikconfig.h but gzipped.
105# Info from config_data can be extracted from /proc/config*
106targets += config_data.gz
Ben Gardiner41263fc2010-12-14 11:39:44 -0500107$(obj)/config_data.gz: $(KCONFIG_CONFIG) FORCE
Linus Torvalds1da177e2005-04-16 15:20:36 -0700108 $(call if_changed,gzip)
109
Vivek Goyal8370ede2014-08-08 14:25:38 -0700110 filechk_ikconfiggz = (echo "static const char kernel_config_data[] __used = MAGIC_START"; cat $< | scripts/basic/bin2c; echo "MAGIC_END;")
Linus Torvalds1da177e2005-04-16 15:20:36 -0700111targets += config_data.h
112$(obj)/config_data.h: $(obj)/config_data.gz FORCE
Peter Foleye78e8f22011-07-05 19:42:18 -0400113 $(call filechk,ikconfiggz)
H. Peter Anvinbdc80782008-02-08 04:21:26 -0800114
David Howellsf0e6d222013-08-30 16:07:13 +0100115###############################################################################
David Howells631cc66e2012-09-26 10:09:51 +0100116#
David Howells0fbd39c2013-08-30 17:13:15 +0100117# Roll all the X.509 certificates that we can find together and pull them into
David Howellsb56e5a12013-08-30 16:07:30 +0100118# the kernel so that they get loaded into the system trusted keyring during
119# boot.
David Howells0fbd39c2013-08-30 17:13:15 +0100120#
121# We look in the source root and the build root for all files whose name ends
122# in ".x509". Unfortunately, this will generate duplicate filenames, so we
123# have make canonicalise the pathnames and then sort them to discard the
124# duplicates.
David Howells631cc66e2012-09-26 10:09:51 +0100125#
David Howellsf0e6d222013-08-30 16:07:13 +0100126###############################################################################
David Howellsb56e5a12013-08-30 16:07:30 +0100127ifeq ($(CONFIG_SYSTEM_TRUSTED_KEYRING),y)
David Howellsf0e6d222013-08-30 16:07:13 +0100128X509_CERTIFICATES-y := $(wildcard *.x509) $(wildcard $(srctree)/*.x509)
David Howellsd7ec4352013-12-13 15:20:19 +0000129X509_CERTIFICATES-$(CONFIG_MODULE_SIG) += $(objtree)/signing_key.x509
130X509_CERTIFICATES-raw := $(sort $(foreach CERT,$(X509_CERTIFICATES-y), \
David Howells0fbd39c2013-08-30 17:13:15 +0100131 $(or $(realpath $(CERT)),$(CERT))))
David Howellsd7ec4352013-12-13 15:20:19 +0000132X509_CERTIFICATES := $(subst $(realpath $(objtree))/,,$(X509_CERTIFICATES-raw))
David Howells631cc66e2012-09-26 10:09:51 +0100133
David Howellsf0e6d222013-08-30 16:07:13 +0100134ifeq ($(X509_CERTIFICATES),)
135$(warning *** No X.509 certificates found ***)
136endif
Michal Mareke10e17742012-12-11 12:26:22 +1030137
David Howellsf0e6d222013-08-30 16:07:13 +0100138ifneq ($(wildcard $(obj)/.x509.list),)
139ifneq ($(shell cat $(obj)/.x509.list),$(X509_CERTIFICATES))
Linus Torvalds7df9ab82015-07-02 16:42:13 -0700140$(warning X.509 certificate list changed to "$(X509_CERTIFICATES)" from "$(shell cat $(obj)/.x509.list)")
David Howellsf0e6d222013-08-30 16:07:13 +0100141$(shell rm $(obj)/.x509.list)
142endif
143endif
David Howells631cc66e2012-09-26 10:09:51 +0100144
David Howellsb56e5a12013-08-30 16:07:30 +0100145kernel/system_certificates.o: $(obj)/x509_certificate_list
David Howellsf0e6d222013-08-30 16:07:13 +0100146
147quiet_cmd_x509certs = CERTS $@
Arnd Bergmann89f703f2015-01-13 22:24:00 +0100148 cmd_x509certs = cat $(X509_CERTIFICATES) /dev/null >$@ $(foreach X509,$(X509_CERTIFICATES),; $(kecho) " - Including cert $(X509)")
David Howellsb56e5a12013-08-30 16:07:30 +0100149
David Howellsf0e6d222013-08-30 16:07:13 +0100150targets += $(obj)/x509_certificate_list
151$(obj)/x509_certificate_list: $(X509_CERTIFICATES) $(obj)/.x509.list
152 $(call if_changed,x509certs)
153
154targets += $(obj)/.x509.list
155$(obj)/.x509.list:
156 @echo $(X509_CERTIFICATES) >$@
Kirill Tkhaif46a3cb2013-12-10 22:39:57 +0400157endif
David Howellsf0e6d222013-08-30 16:07:13 +0100158
159clean-files := x509_certificate_list .x509.list
David Howellsd4411082012-09-26 10:09:51 +0100160
H. Peter Anvinbdc80782008-02-08 04:21:26 -0800161ifeq ($(CONFIG_MODULE_SIG),y)
David Howellsd4411082012-09-26 10:09:51 +0100162###############################################################################
163#
164# If module signing is requested, say by allyesconfig, but a key has not been
165# supplied, then one will need to be generated to make sure the build does not
166# fail and that the kernel may be used afterwards.
167#
168###############################################################################
Michal Marek22753672013-01-25 13:41:00 +1030169ifndef CONFIG_MODULE_SIG_HASH
David Howells5e8cb1e2012-09-28 11:16:57 +0100170$(error Could not determine digest type to use from kernel config)
171endif
172
David Howellsd4411082012-09-26 10:09:51 +0100173signing_key.priv signing_key.x509: x509.genkey
174 @echo "###"
175 @echo "### Now generating an X.509 key pair to be used for signing modules."
176 @echo "###"
177 @echo "### If this takes a long time, you might wish to run rngd in the"
178 @echo "### background to keep the supply of entropy topped up. It"
H. Peter Anvin20087132012-10-24 14:11:48 -0700179 @echo "### needs to be run as root, and uses a hardware random"
180 @echo "### number generator if one is available."
David Howellsd4411082012-09-26 10:09:51 +0100181 @echo "###"
Michal Marek22753672013-01-25 13:41:00 +1030182 openssl req -new -nodes -utf8 -$(CONFIG_MODULE_SIG_HASH) -days 36500 \
183 -batch -x509 -config x509.genkey \
David Howellsd4411082012-09-26 10:09:51 +0100184 -outform DER -out signing_key.x509 \
David Cohen07c449b2013-04-11 13:22:14 +0930185 -keyout signing_key.priv 2>&1
David Howellsd4411082012-09-26 10:09:51 +0100186 @echo "###"
187 @echo "### Key pair generated."
188 @echo "###"
189
190x509.genkey:
191 @echo Generating X.509 key generation config
192 @echo >x509.genkey "[ req ]"
193 @echo >>x509.genkey "default_bits = 4096"
194 @echo >>x509.genkey "distinguished_name = req_distinguished_name"
195 @echo >>x509.genkey "prompt = no"
David Howellse7d113b2012-09-28 11:16:57 +0100196 @echo >>x509.genkey "string_mask = utf8only"
David Howellsd4411082012-09-26 10:09:51 +0100197 @echo >>x509.genkey "x509_extensions = myexts"
198 @echo >>x509.genkey
199 @echo >>x509.genkey "[ req_distinguished_name ]"
David Howells9c4249c2015-04-30 14:58:43 +0100200 @echo >>x509.genkey "#O = Unspecified company"
201 @echo >>x509.genkey "CN = Build time autogenerated kernel key"
202 @echo >>x509.genkey "#emailAddress = unspecified.user@unspecified.company"
David Howellsd4411082012-09-26 10:09:51 +0100203 @echo >>x509.genkey
204 @echo >>x509.genkey "[ myexts ]"
205 @echo >>x509.genkey "basicConstraints=critical,CA:FALSE"
206 @echo >>x509.genkey "keyUsage=digitalSignature"
207 @echo >>x509.genkey "subjectKeyIdentifier=hash"
208 @echo >>x509.genkey "authorityKeyIdentifier=keyid"
209endif