1 1.11 maxv # $NetBSD: CUBOX,v 1.11 2018/08/01 20:04:11 maxv Exp $ 2 1.1 kiyohara # 3 1.1 kiyohara # CUBOX -- SolidRun Ltd. Cubox kernel 4 1.1 kiyohara # 5 1.1 kiyohara 6 1.1 kiyohara include "arch/evbarm/conf/std.marvell" 7 1.1 kiyohara 8 1.1 kiyohara #options INCLUDE_CONFIG_FILE # embed config file in kernel binary 9 1.1 kiyohara 10 1.1 kiyohara # estimated number of users 11 1.1 kiyohara 12 1.1 kiyohara maxusers 32 13 1.1 kiyohara 14 1.1 kiyohara # Board Type 15 1.1 kiyohara makeoptions BOARDTYPE="cubox" 16 1.1 kiyohara options EVBARM_BOARDTYPE=cubox 17 1.1 kiyohara 18 1.1 kiyohara # CPU options 19 1.1 kiyohara options CPU_PJ4B # XXXX: CPU is PJ4 20 1.1 kiyohara options ARM_HAS_VBAR 21 1.1 kiyohara options FPU_VFP 22 1.1 kiyohara makeoptions CPUFLAGS="-march=armv7-a -mfpu=vfpv3" 23 1.1 kiyohara 24 1.1 kiyohara # Marvell SoC options 25 1.1 kiyohara options DOVE 26 1.1 kiyohara 27 1.1 kiyohara # Standard system options 28 1.1 kiyohara 29 1.1 kiyohara options INSECURE # disable kernel security levels - X needs this 30 1.1 kiyohara 31 1.1 kiyohara options RTC_OFFSET=0 # hardware clock is this many mins. west of GMT 32 1.1 kiyohara #options NTP # NTP phase/frequency locked loop 33 1.1 kiyohara options KTRACE # system call tracing via ktrace(1) 34 1.1 kiyohara 35 1.1 kiyohara # Note: SysV IPC parameters can be changed dynamically; see sysctl(8). 36 1.1 kiyohara options SYSVMSG # System V-like message queues 37 1.1 kiyohara options SYSVSEM # System V-like semaphores 38 1.1 kiyohara options SYSVSHM # System V-like memory sharing 39 1.1 kiyohara 40 1.1 kiyohara #options USERCONF # userconf(4) support 41 1.1 kiyohara #options PIPE_SOCKETPAIR # smaller, but slower pipe(2) 42 1.1 kiyohara options SYSCTL_INCLUDE_DESCR # Include sysctl descriptions in kernel 43 1.1 kiyohara 44 1.1 kiyohara # Alternate buffer queue strategies for better responsiveness under high 45 1.1 kiyohara # disk I/O load. 46 1.1 kiyohara #options BUFQ_READPRIO 47 1.1 kiyohara options BUFQ_PRIOCSCAN 48 1.1 kiyohara 49 1.1 kiyohara # Diagnostic/debugging support options 50 1.1 kiyohara #options VERBOSE_INIT_ARM # verbose bootstraping messages 51 1.1 kiyohara options DIAGNOSTIC # internally consistency checks 52 1.1 kiyohara 53 1.1 kiyohara #options DEBUG 54 1.1 kiyohara #options PMAP_DEBUG # Enable pmap_debug_level code 55 1.1 kiyohara options LOCKDEBUG # expensive locking checks/support 56 1.1 kiyohara options IRQSTATS # manage IRQ statistics 57 1.1 kiyohara #options NO_POWERSAVE # uncomment this to run under ICE 58 1.1 kiyohara 59 1.1 kiyohara #makeoptions COPTS="-O2" 60 1.1 kiyohara options DDB # in-kernel debugger 61 1.1 kiyohara #options DDB_KEYCODE=0x1d # ^] 62 1.1 kiyohara #options DDB_COMMANDONENTER="bt" # execute command when ddb is entered 63 1.1 kiyohara options DDB_ONPANIC=1 # see also sysctl(7): `ddb.onpanic' 64 1.1 kiyohara options DDB_HISTORY_SIZE=100 # Enable history editing in DDB 65 1.1 kiyohara options DDB_VERBOSE_HELP 66 1.1 kiyohara #options KGDB 67 1.1 kiyohara #options KGDB_DEVRATE=115200 68 1.1 kiyohara makeoptions DEBUG="-g" # compile full symbol table 69 1.1 kiyohara makeoptions COPY_SYMTAB=1 70 1.1 kiyohara #options SYSCALL_STATS # per syscall counts 71 1.1 kiyohara #options SYSCALL_TIMES # per syscall times 72 1.1 kiyohara #options SYSCALL_TIMES_HASCOUNTER # use 'broken' rdtsc (soekris) 73 1.1 kiyohara 74 1.1 kiyohara 75 1.1 kiyohara # Compatibility options 76 1.5 mrg 77 1.5 mrg include "conf/compat_netbsd60.config" 78 1.5 mrg options COMPAT_NETBSD32 # allow running arm (e.g. non-earm) binaries 79 1.1 kiyohara 80 1.1 kiyohara options COMPAT_OSSAUDIO # OSS (Voxware) audio driver compatibility 81 1.1 kiyohara #options COMPAT_NDIS # NDIS network driver 82 1.1 kiyohara 83 1.1 kiyohara # Wedge support 84 1.1 kiyohara options DKWEDGE_AUTODISCOVER # Automatically add dk(4) instances 85 1.1 kiyohara options DKWEDGE_METHOD_GPT # Supports GPT partitions as wedges 86 1.1 kiyohara 87 1.1 kiyohara # File systems 88 1.1 kiyohara file-system FFS # UFS 89 1.1 kiyohara file-system MFS # memory file system 90 1.1 kiyohara file-system NFS # Network File System client 91 1.1 kiyohara file-system TMPFS # Efficient memory file-system 92 1.1 kiyohara file-system EXT2FS # second extended file system (linux) 93 1.1 kiyohara file-system LFS # log-structured file system 94 1.1 kiyohara file-system NTFS # Windows/NT file system (experimental) 95 1.1 kiyohara file-system CD9660 # ISO 9660 + Rock Ridge file system 96 1.1 kiyohara file-system MSDOSFS # MS-DOS file system 97 1.1 kiyohara file-system FDESC # /dev/fd 98 1.1 kiyohara file-system KERNFS # /kern 99 1.1 kiyohara file-system NULLFS # loopback file system 100 1.1 kiyohara file-system OVERLAY # overlay file system 101 1.1 kiyohara file-system PROCFS # /proc 102 1.1 kiyohara file-system PUFFS # Userspace file systems (e.g. ntfs-3g & sshfs) 103 1.1 kiyohara file-system SMBFS # experimental - CIFS; also needs nsmb (below) 104 1.1 kiyohara file-system UMAPFS # NULLFS + uid and gid remapping 105 1.1 kiyohara file-system UNION # union file system 106 1.1 kiyohara file-system CODA # Coda File System; also needs vcoda (below) 107 1.1 kiyohara file-system PTYFS # /dev/ptm support 108 1.1 kiyohara #file-system UDF # experimental - OSTA UDF CD/DVD file-system 109 1.1 kiyohara #file-system HFS # experimental - Apple HFS+ (read-only) 110 1.1 kiyohara #file-system NILFS # experimental - NTT's NiLFS(2) 111 1.1 kiyohara 112 1.1 kiyohara # File system options 113 1.1 kiyohara options QUOTA # legacy UFS quotas 114 1.1 kiyohara options QUOTA2 # new, in-filesystem UFS quotas 115 1.2 rin #options DISKLABEL_EI # disklabel Endian Independent support 116 1.1 kiyohara options FFS_EI # FFS Endian Independent support 117 1.1 kiyohara options WAPBL # File system journaling support 118 1.1 kiyohara # Note that UFS_DIRHASH is suspected of causing kernel memory corruption. 119 1.1 kiyohara # It is not recommended for general use. 120 1.1 kiyohara #options UFS_DIRHASH # UFS Large Directory Hashing - Experimental 121 1.1 kiyohara options NFSSERVER # Network File System server 122 1.1 kiyohara #options EXT2FS_SYSTEM_FLAGS # makes ext2fs file flags (append and 123 1.1 kiyohara # immutable) behave as system flags. 124 1.1 kiyohara #options FFS_NO_SNAPSHOT # No FFS snapshot support 125 1.1 kiyohara 126 1.1 kiyohara # Networking options 127 1.1 kiyohara #options GATEWAY # packet forwarding 128 1.1 kiyohara options INET # IP + ICMP + TCP + UDP 129 1.1 kiyohara options INET6 # IPv6 130 1.1 kiyohara options IPSEC # IP security 131 1.1 kiyohara #options IPSEC_DEBUG # debug for IP security 132 1.1 kiyohara #options MPLS # MultiProtocol Label Switching (needs ifmpls) 133 1.1 kiyohara #options MROUTING # IP multicast routing 134 1.1 kiyohara #options PIM # Protocol Independent Multicast 135 1.1 kiyohara options NETATALK # AppleTalk networking protocols 136 1.1 kiyohara options PPP_BSDCOMP # BSD-Compress compression support for PPP 137 1.1 kiyohara options PPP_DEFLATE # Deflate compression support for PPP 138 1.1 kiyohara options PPP_FILTER # Active filter support for PPP (requires bpf) 139 1.1 kiyohara #options TCP_DEBUG # Record last TCP_NDEBUG packets with SO_DEBUG 140 1.1 kiyohara 141 1.1 kiyohara #options ALTQ # Manipulate network interfaces' output queues 142 1.1 kiyohara #options ALTQ_BLUE # Stochastic Fair Blue 143 1.1 kiyohara #options ALTQ_CBQ # Class-Based Queueing 144 1.1 kiyohara #options ALTQ_CDNR # Diffserv Traffic Conditioner 145 1.1 kiyohara #options ALTQ_FIFOQ # First-In First-Out Queue 146 1.1 kiyohara #options ALTQ_FLOWVALVE # RED/flow-valve (red-penalty-box) 147 1.1 kiyohara #options ALTQ_HFSC # Hierarchical Fair Service Curve 148 1.1 kiyohara #options ALTQ_LOCALQ # Local queueing discipline 149 1.1 kiyohara #options ALTQ_PRIQ # Priority Queueing 150 1.1 kiyohara #options ALTQ_RED # Random Early Detection 151 1.1 kiyohara #options ALTQ_RIO # RED with IN/OUT 152 1.1 kiyohara #options ALTQ_WFQ # Weighted Fair Queueing 153 1.1 kiyohara 154 1.1 kiyohara # Device options 155 1.1 kiyohara 156 1.1 kiyohara # These options enable verbose messages for several subsystems. 157 1.1 kiyohara # Warning, these may compile large string tables into the kernel! 158 1.1 kiyohara options MIIVERBOSE # verbose PHY autoconfig messages 159 1.1 kiyohara #options PCIVERBOSE # verbose PCI device autoconfig messages 160 1.1 kiyohara #options PCI_CONFIG_DUMP # verbosely dump PCI config space 161 1.1 kiyohara #options PCMCIAVERBOSE # verbose PCMCIA configuration messages 162 1.1 kiyohara #options SCSIVERBOSE # Verbose SCSI errors 163 1.1 kiyohara #options USBVERBOSE # verbose USB device autoconfig messages 164 1.1 kiyohara 165 1.1 kiyohara # Kernel root file system and dump configuration. 166 1.1 kiyohara config netbsd root on ? type ? 167 1.1 kiyohara 168 1.1 kiyohara options NFS_BOOT_BOOTP 169 1.1 kiyohara options NFS_BOOT_DHCP 170 1.1 kiyohara #options NFS_BOOT_BOOTPARAM 171 1.1 kiyohara #options NFS_BOOT_BOOTSTATIC 172 1.1 kiyohara #options NFS_BOOTSTATIC_MYIP="\"192.168.0.2\"" 173 1.1 kiyohara #options NFS_BOOTSTATIC_GWIP="\"192.168.0.1\"" 174 1.1 kiyohara #options NFS_BOOTSTATIC_MASK="\"255.255.255.0\"" 175 1.1 kiyohara #options NFS_BOOTSTATIC_SERVADDR="\"192.168.0.3\"" 176 1.1 kiyohara #options NFS_BOOTSTATIC_SERVER="\"192.168.0.3:/nfs/cubox\"" 177 1.1 kiyohara 178 1.1 kiyohara 179 1.1 kiyohara # 180 1.1 kiyohara # Device configuration 181 1.1 kiyohara # 182 1.1 kiyohara 183 1.1 kiyohara mainbus0 at root 184 1.1 kiyohara 185 1.1 kiyohara cpu* at mainbus? 186 1.1 kiyohara 187 1.1 kiyohara # Marvell 88AP510 Dove System-on-chip 188 1.1 kiyohara mvsoc0 at mainbus? 189 1.1 kiyohara #options MVSOC_CONSOLE_EARLY 190 1.1 kiyohara 191 1.1 kiyohara # On-chip Power Management Unit 192 1.1 kiyohara mvsocpmu* at mvsoc? offset ? irq ? 193 1.1 kiyohara 194 1.1 kiyohara # On-chip Gigabit Ethernet Controller 195 1.1 kiyohara mvgbec* at mvsoc? offset ? 196 1.1 kiyohara mvgbe* at mvgbec? port ? irq ? 197 1.1 kiyohara 198 1.1 kiyohara # MII/PHY support 199 1.1 kiyohara makphy* at mii? phy ? 200 1.1 kiyohara 201 1.1 kiyohara # On-chip Cryptographic Engines and Security Accelerator (CESA) 202 1.1 kiyohara mvcesa* at mvsoc? offset ? irq ? 203 1.1 kiyohara 204 1.1 kiyohara # On-chip XOR DMA Engine 205 1.1 kiyohara gtidmac* at mvsoc? offset ? irq ? 206 1.1 kiyohara 207 1.1 kiyohara # On-chip PCI Express Interface 208 1.1 kiyohara mvpex* at mvsoc? offset ? irq ? 209 1.1 kiyohara pci* at mvpex? 210 1.1 kiyohara 211 1.1 kiyohara # PCI bus support 212 1.1 kiyohara options PCI_NETBSD_CONFIGURE 213 1.1 kiyohara #options PCI_CONFIG_DUMP # verbosely dump PCI config space 214 1.1 kiyohara 215 1.1 kiyohara pchb* at pci? dev ? function ? # PCI-Host bridges 216 1.1 kiyohara 217 1.1 kiyohara # On-chip Serial-ATA (SATA) II Interface 218 1.1 kiyohara mvsata* at mvsoc? offset ? irq ? 219 1.1 kiyohara 220 1.1 kiyohara # ATA (IDE) bus support 221 1.1 kiyohara atabus* at ata? 222 1.1 kiyohara #options ATADEBUG 223 1.1 kiyohara 224 1.1 kiyohara # IDE drives 225 1.1 kiyohara wd* at atabus? drive ? flags 0x0000 226 1.1 kiyohara 227 1.1 kiyohara # On-chip USB 2.0 Interface 228 1.1 kiyohara ehci* at mvsoc? offset ? irq ? 229 1.1 kiyohara 230 1.1 kiyohara # On-chip Secure Digital Input/Output Host Controller 231 1.1 kiyohara sdhc* at mvsoc? offset ? irq ? 232 1.1 kiyohara sdmmc* at sdhc? 233 1.1 kiyohara 234 1.1 kiyohara ld* at sdmmc? 235 1.1 kiyohara 236 1.1 kiyohara # On-chip Serial Peripheral Interface (SPI) 237 1.1 kiyohara mvspi* at mvsoc? offset ? irq ? 238 1.1 kiyohara spi* at mvspi? 239 1.1 kiyohara 240 1.1 kiyohara m25p0 at spi? slave 0 241 1.1 kiyohara spiflash0 at spiflashbus? 242 1.1 kiyohara 243 1.1 kiyohara # On-chip Two-Wire Serial Interface (TWSI) 244 1.1 kiyohara gttwsi* at mvsoc? offset ? irq ? 245 1.1 kiyohara iic* at gttwsi? 246 1.1 kiyohara 247 1.7 thorpej #TDA998x at iic? addr 0x34 # HDMI transmitters 248 1.7 thorpej #Si5351A at iic? addr 0x60 # Programmable Any-Frequency CMOS Clock Generator 249 1.7 thorpej #lcdc at iic? addr 0x70 250 1.1 kiyohara 251 1.1 kiyohara # On-chip UART Interface 252 1.1 kiyohara com* at mvsoc? offset ? irq ? 253 1.1 kiyohara 254 1.1 kiyohara # On-chip Real Time Clock (RTC) 255 1.1 kiyohara mvsocrtc* at mvsoc? offset ? irq ? 256 1.1 kiyohara 257 1.1 kiyohara # On-chip Timers 258 1.1 kiyohara mvsoctmr* at mvsoc? offset ? irq ? 259 1.1 kiyohara 260 1.1 kiyohara 261 1.1 kiyohara # USB bus support 262 1.1 kiyohara usb* at ehci? 263 1.1 kiyohara 264 1.1 kiyohara # USB Hubs 265 1.1 kiyohara uhub* at usb? 266 1.1 kiyohara uhub* at uhub? port ? 267 1.1 kiyohara 268 1.1 kiyohara # USB HID device 269 1.1 kiyohara uhidev* at uhub? port ? configuration ? interface ? 270 1.1 kiyohara 271 1.1 kiyohara # USB Mice 272 1.1 kiyohara ums* at uhidev? reportid ? 273 1.1 kiyohara wsmouse* at ums? mux 0 274 1.1 kiyohara 275 1.1 kiyohara # USB Keyboards 276 1.1 kiyohara ukbd* at uhidev? reportid ? 277 1.1 kiyohara wskbd* at ukbd? console ? mux 1 278 1.1 kiyohara 279 1.1 kiyohara # USB Mass Storage 280 1.1 kiyohara umass* at uhub? port ? configuration ? interface ? 281 1.1 kiyohara wd* at umass? 282 1.1 kiyohara scsibus* at scsi? 283 1.1 kiyohara sd* at scsibus? target ? lun ? # SCSI disk drives 284 1.1 kiyohara cd* at scsibus? target ? lun ? # SCSI CD-ROM drives 285 1.1 kiyohara 286 1.1 kiyohara # Serial adapters 287 1.1 kiyohara uftdi* at uhub? port ? # FTDI FT8U100AX serial adapter 288 1.1 kiyohara ucom* at uftdi? portno ? 289 1.1 kiyohara 290 1.1 kiyohara uplcom* at uhub? port ? # I/O DATA USB-RSAQ2 serial adapter 291 1.1 kiyohara ucom* at uplcom? portno ? 292 1.1 kiyohara 293 1.1 kiyohara # USB Generic driver 294 1.1 kiyohara ugen* at uhub? port ? 295 1.1 kiyohara 296 1.1 kiyohara 297 1.1 kiyohara # Pseudo-Devices 298 1.1 kiyohara 299 1.1 kiyohara pseudo-device crypto # /dev/crypto device 300 1.1 kiyohara pseudo-device swcrypto # software crypto implementation 301 1.1 kiyohara 302 1.1 kiyohara # disk/mass storage pseudo-devices 303 1.1 kiyohara pseudo-device bio # RAID control device driver 304 1.1 kiyohara pseudo-device ccd # concatenated/striped disk devices 305 1.1 kiyohara pseudo-device cgd # cryptographic disk devices 306 1.1 kiyohara pseudo-device raid # RAIDframe disk driver 307 1.1 kiyohara #options RAID_AUTOCONFIG # auto-configuration of RAID components 308 1.1 kiyohara #Options to enable various other RAIDframe RAID types. 309 1.1 kiyohara #options RF_INCLUDE_EVENODD=1 310 1.1 kiyohara #options RF_INCLUDE_RAID5_RS=1 311 1.1 kiyohara #options RF_INCLUDE_PARITYLOGGING=1 312 1.1 kiyohara #options RF_INCLUDE_CHAINDECLUSTER=1 313 1.1 kiyohara #options RF_INCLUDE_INTERDECLUSTER=1 314 1.1 kiyohara #options RF_INCLUDE_PARITY_DECLUSTERING=1 315 1.1 kiyohara #options RF_INCLUDE_PARITY_DECLUSTERING_DS=1 316 1.1 kiyohara pseudo-device fss # file system snapshot device 317 1.1 kiyohara pseudo-device putter # for puffs and pud 318 1.1 kiyohara 319 1.1 kiyohara pseudo-device vnd # disk-like interface to files 320 1.1 kiyohara options VND_COMPRESSION # compressed vnd(4) 321 1.1 kiyohara 322 1.1 kiyohara 323 1.1 kiyohara # network pseudo-devices 324 1.1 kiyohara pseudo-device bpfilter # Berkeley packet filter 325 1.1 kiyohara #pseudo-device carp # Common Address Redundancy Protocol 326 1.11 maxv #pseudo-device npf # NPF packet filter 327 1.1 kiyohara pseudo-device loop # network loopback 328 1.1 kiyohara #pseudo-device ifmpls # MPLS pseudo-interface 329 1.1 kiyohara pseudo-device ppp # Point-to-Point Protocol 330 1.1 kiyohara pseudo-device pppoe # PPP over Ethernet (RFC 2516) 331 1.1 kiyohara pseudo-device sl # Serial Line IP 332 1.1 kiyohara pseudo-device strip # Starmode Radio IP (Metricom) 333 1.1 kiyohara pseudo-device irframetty # IrDA frame line discipline 334 1.1 kiyohara pseudo-device tun # network tunneling over tty 335 1.1 kiyohara pseudo-device tap # virtual Ethernet 336 1.1 kiyohara pseudo-device gre # generic L3 over IP tunnel 337 1.1 kiyohara pseudo-device gif # IPv[46] over IPv[46] tunnel (RFC1933) 338 1.1 kiyohara #pseudo-device faith # IPv[46] tcp relay translation i/f 339 1.1 kiyohara pseudo-device stf # 6to4 IPv6 over IPv4 encapsulation 340 1.1 kiyohara pseudo-device vlan # IEEE 802.1q encapsulation 341 1.1 kiyohara pseudo-device bridge # simple inter-network bridging 342 1.1 kiyohara #options BRIDGE_IPF # bridge uses IP/IPv6 pfil hooks too 343 1.1 kiyohara pseudo-device agr # IEEE 802.3ad link aggregation 344 1.1 kiyohara #pseudo-device npf # NPF packet filter 345 1.1 kiyohara 346 1.1 kiyohara # 347 1.1 kiyohara # accept filters 348 1.1 kiyohara pseudo-device accf_data # "dataready" accept filter 349 1.1 kiyohara pseudo-device accf_http # "httpready" accept filter 350 1.1 kiyohara 351 1.1 kiyohara # miscellaneous pseudo-devices 352 1.1 kiyohara pseudo-device pty # pseudo-terminals 353 1.1 kiyohara pseudo-device sequencer # MIDI sequencer 354 1.1 kiyohara #options RND_COM # use "com" randomness as well (BROKEN) 355 1.1 kiyohara pseudo-device clockctl # user control of clock subsystem 356 1.1 kiyohara pseudo-device ksyms # /dev/ksyms 357 1.1 kiyohara 358 1.1 kiyohara # a pseudo device needed for Coda # also needs CODA (above) 359 1.1 kiyohara pseudo-device vcoda # coda minicache <-> venus comm. 360 1.1 kiyohara 361 1.1 kiyohara # a pseudo device needed for SMBFS 362 1.1 kiyohara pseudo-device nsmb # experimental - SMB requester 363 1.1 kiyohara 364 1.1 kiyohara # wscons pseudo-devices 365 1.1 kiyohara pseudo-device wsmux # mouse & keyboard multiplexor 366 1.1 kiyohara pseudo-device wsfont 367 1.1 kiyohara 368 1.1 kiyohara # pseudo audio device driver 369 1.1 kiyohara #pseudo-device pad 370 1.1 kiyohara 371 1.1 kiyohara # userland interface to drivers, including autoconf and properties retrieval 372 1.1 kiyohara pseudo-device drvctl 373 1.1 kiyohara 374 1.1 kiyohara options FILEASSOC # fileassoc(9) - required for Veriexec 375 1.1 kiyohara 376 1.1 kiyohara # Veriexec 377 1.1 kiyohara # 378 1.1 kiyohara # a pseudo device needed for veriexec 379 1.1 kiyohara pseudo-device veriexec 380 1.1 kiyohara # 381 1.1 kiyohara # Uncomment the fingerprint methods below that are desired. Note that 382 1.1 kiyohara # removing fingerprint methods will have almost no impact on the kernel 383 1.1 kiyohara # code size. 384 1.1 kiyohara # 385 1.1 kiyohara options VERIFIED_EXEC_FP_SHA256 386 1.1 kiyohara options VERIFIED_EXEC_FP_SHA384 387 1.1 kiyohara options VERIFIED_EXEC_FP_SHA512 388 1.1 kiyohara 389 1.1 kiyohara options PAX_MPROTECT=0 # PaX mprotect(2) restrictions 390 1.1 kiyohara options PAX_ASLR=0 # PaX Address Space Layout Randomization 391