blob: 57baff5bdb806b3b725bdc7859c385fbdc1cac54 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001Documentation for /proc/sys/kernel/* kernel version 2.2.10
2 (c) 1998, 1999, Rik van Riel <riel@nl.linux.org>
Shen Feng760df932009-04-02 16:57:20 -07003 (c) 2009, Shen Feng<shen@cn.fujitsu.com>
Linus Torvalds1da177e2005-04-16 15:20:36 -07004
5For general info and legal blurb, please look in README.
6
7==============================================================
8
9This file contains documentation for the sysctl files in
10/proc/sys/kernel/ and is valid for Linux kernel version 2.2.
11
12The files in this directory can be used to tune and monitor
13miscellaneous and general things in the operation of the Linux
14kernel. Since some of the files _can_ be used to screw up your
15system, it is advisable to read both documentation and source
16before actually making adjustments.
17
18Currently, these files might (depending on your configuration)
19show up in /proc/sys/kernel:
Borislav Petkov807094c2011-07-23 10:39:29 -070020
Linus Torvalds1da177e2005-04-16 15:20:36 -070021- acct
Borislav Petkov807094c2011-07-23 10:39:29 -070022- acpi_video_flags
23- auto_msgmni
H. Peter Anvind75757a2009-12-11 14:23:44 -080024- bootloader_type [ X86 only ]
25- bootloader_version [ X86 only ]
Hans-Joachim Pichtc114728a2009-09-11 10:28:47 +020026- callhome [ S390 only ]
Dan Ballard73efc032011-10-31 17:11:20 -070027- cap_last_cap
Linus Torvalds1da177e2005-04-16 15:20:36 -070028- core_pattern
Neil Hormana2939802009-09-23 15:56:56 -070029- core_pipe_limit
Linus Torvalds1da177e2005-04-16 15:20:36 -070030- core_uses_pid
31- ctrl-alt-del
Dan Rosenbergeaf06b22010-11-11 14:05:18 -080032- dmesg_restrict
Linus Torvalds1da177e2005-04-16 15:20:36 -070033- domainname
34- hostname
35- hotplug
Aaron Tomlin270750db2014-01-20 17:34:13 +000036- hung_task_panic
37- hung_task_check_count
38- hung_task_timeout_secs
39- hung_task_warnings
Kees Cook79847542014-01-23 15:55:59 -080040- kexec_load_disabled
Dan Rosenberg455cd5a2011-01-12 16:59:41 -080041- kptr_restrict
Chuck Ebbert0741f4d2006-12-07 02:14:11 +010042- kstack_depth_to_print [ X86 only ]
Linus Torvalds1da177e2005-04-16 15:20:36 -070043- l2cr [ PPC only ]
Michael Opdenackerac76cff2008-02-13 15:03:32 -080044- modprobe ==> Documentation/debugging-modules.txt
Kees Cook3d433212009-04-02 15:49:29 -070045- modules_disabled
Stanislav Kinsbursky03f59562013-01-04 15:34:50 -080046- msg_next_id [ sysv ipc ]
Linus Torvalds1da177e2005-04-16 15:20:36 -070047- msgmax
48- msgmnb
49- msgmni
Shen Feng760df932009-04-02 16:57:20 -070050- nmi_watchdog
Linus Torvalds1da177e2005-04-16 15:20:36 -070051- osrelease
52- ostype
53- overflowgid
54- overflowuid
55- panic
Borislav Petkov807094c2011-07-23 10:39:29 -070056- panic_on_oops
57- panic_on_unrecovered_nmi
Mitsuo Hayasaka55af7792011-11-29 15:08:36 +090058- panic_on_stackoverflow
Linus Torvalds1da177e2005-04-16 15:20:36 -070059- pid_max
60- powersave-nap [ PPC only ]
61- printk
Borislav Petkov807094c2011-07-23 10:39:29 -070062- printk_delay
63- printk_ratelimit
64- printk_ratelimit_burst
Jiri Kosina1ec7fd52008-02-09 23:24:08 +010065- randomize_va_space
Linus Torvalds1da177e2005-04-16 15:20:36 -070066- real-root-dev ==> Documentation/initrd.txt
67- reboot-cmd [ SPARC only ]
68- rtsig-max
69- rtsig-nr
70- sem
Stanislav Kinsbursky03f59562013-01-04 15:34:50 -080071- sem_next_id [ sysv ipc ]
Linus Torvalds1da177e2005-04-16 15:20:36 -070072- sg-big-buff [ generic SCSI device (sg) ]
Stanislav Kinsbursky03f59562013-01-04 15:34:50 -080073- shm_next_id [ sysv ipc ]
Vasiliy Kulikovb34a6b12011-07-26 16:08:48 -070074- shm_rmid_forced
Linus Torvalds1da177e2005-04-16 15:20:36 -070075- shmall
76- shmmax [ sysv ipc ]
77- shmmni
Aaron Tomlined235872014-06-23 13:22:05 -070078- softlockup_all_cpu_backtrace
Linus Torvalds1da177e2005-04-16 15:20:36 -070079- stop-a [ SPARC only ]
80- sysrq ==> Documentation/sysrq.txt
Kees Cookf4aacea2014-06-06 14:37:19 -070081- sysctl_writes_strict
Linus Torvalds1da177e2005-04-16 15:20:36 -070082- tainted
83- threads-max
Shen Feng760df932009-04-02 16:57:20 -070084- unknown_nmi_panic
Li Zefan08825c92013-05-17 10:31:20 +080085- watchdog_thresh
Linus Torvalds1da177e2005-04-16 15:20:36 -070086- version
87
88==============================================================
89
90acct:
91
92highwater lowwater frequency
93
94If BSD-style process accounting is enabled these values control
95its behaviour. If free space on filesystem where the log lives
96goes below <lowwater>% accounting suspends. If free space gets
97above <highwater>% accounting resumes. <Frequency> determines
98how often do we check the amount of free space (value is in
99seconds). Default:
1004 2 30
101That is, suspend accounting if there left <= 2% free; resume it
102if we got >=4%; consider information about amount of free space
103valid for 30 seconds.
104
105==============================================================
106
Borislav Petkov807094c2011-07-23 10:39:29 -0700107acpi_video_flags:
108
109flags
110
111See Doc*/kernel/power/video.txt, it allows mode of video boot to be
112set during run time.
113
114==============================================================
115
116auto_msgmni:
117
118Enables/Disables automatic recomputing of msgmni upon memory add/remove
119or upon ipc namespace creation/removal (see the msgmni description
120above). Echoing "1" into this file enables msgmni automatic recomputing.
121Echoing "0" turns it off. auto_msgmni default value is 1.
122
123
124==============================================================
125
H. Peter Anvind75757a2009-12-11 14:23:44 -0800126bootloader_type:
127
128x86 bootloader identification
129
130This gives the bootloader type number as indicated by the bootloader,
131shifted left by 4, and OR'd with the low four bits of the bootloader
132version. The reason for this encoding is that this used to match the
133type_of_loader field in the kernel header; the encoding is kept for
134backwards compatibility. That is, if the full bootloader type number
135is 0x15 and the full version number is 0x234, this file will contain
136the value 340 = 0x154.
137
138See the type_of_loader and ext_loader_type fields in
139Documentation/x86/boot.txt for additional information.
140
141==============================================================
142
143bootloader_version:
144
145x86 bootloader version
146
147The complete bootloader version number. In the example above, this
148file will contain the value 564 = 0x234.
149
150See the type_of_loader and ext_loader_ver fields in
151Documentation/x86/boot.txt for additional information.
152
153==============================================================
154
Hans-Joachim Pichtc114728a2009-09-11 10:28:47 +0200155callhome:
156
157Controls the kernel's callhome behavior in case of a kernel panic.
158
159The s390 hardware allows an operating system to send a notification
160to a service organization (callhome) in case of an operating system panic.
161
162When the value in this file is 0 (which is the default behavior)
163nothing happens in case of a kernel panic. If this value is set to "1"
164the complete kernel oops message is send to the IBM customer service
165organization in case the mainframe the Linux operating system is running
166on has a service contract with IBM.
167
168==============================================================
169
Dan Ballard73efc032011-10-31 17:11:20 -0700170cap_last_cap
171
172Highest valid capability of the running kernel. Exports
173CAP_LAST_CAP from the kernel.
174
175==============================================================
176
Linus Torvalds1da177e2005-04-16 15:20:36 -0700177core_pattern:
178
179core_pattern is used to specify a core dumpfile pattern name.
Matthias Urlichscd081042006-10-11 01:21:57 -0700180. max length 128 characters; default value is "core"
Linus Torvalds1da177e2005-04-16 15:20:36 -0700181. core_pattern is used as a pattern template for the output filename;
182 certain string patterns (beginning with '%') are substituted with
183 their actual values.
184. backward compatibility with core_uses_pid:
185 If core_pattern does not include "%p" (default does not)
186 and core_uses_pid is set, then .PID will be appended to
187 the filename.
188. corename format specifiers:
189 %<NUL> '%' is dropped
190 %% output one '%'
191 %p pid
Stéphane Graber65aafb12013-09-11 14:24:32 -0700192 %P global pid (init PID namespace)
Oleg Nesterovb03023e2014-10-13 15:53:35 -0700193 %i tid
194 %I global tid (init PID namespace)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700195 %u uid
196 %g gid
Oleg Nesterov12a2b4b2012-10-04 17:15:25 -0700197 %d dump mode, matches PR_SET_DUMPABLE and
198 /proc/sys/fs/suid_dumpable
Linus Torvalds1da177e2005-04-16 15:20:36 -0700199 %s signal number
200 %t UNIX time of dump
201 %h hostname
Jiri Slaby57cc0832011-05-26 16:25:46 -0700202 %e executable filename (may be shortened)
203 %E executable path
Linus Torvalds1da177e2005-04-16 15:20:36 -0700204 %<OTHER> both are dropped
Matthias Urlichscd081042006-10-11 01:21:57 -0700205. If the first character of the pattern is a '|', the kernel will treat
206 the rest of the pattern as a command to run. The core dump will be
207 written to the standard input of that program instead of to a file.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700208
209==============================================================
210
Neil Hormana2939802009-09-23 15:56:56 -0700211core_pipe_limit:
212
Borislav Petkov807094c2011-07-23 10:39:29 -0700213This sysctl is only applicable when core_pattern is configured to pipe
214core files to a user space helper (when the first character of
215core_pattern is a '|', see above). When collecting cores via a pipe
216to an application, it is occasionally useful for the collecting
217application to gather data about the crashing process from its
218/proc/pid directory. In order to do this safely, the kernel must wait
219for the collecting process to exit, so as not to remove the crashing
220processes proc files prematurely. This in turn creates the
221possibility that a misbehaving userspace collecting process can block
222the reaping of a crashed process simply by never exiting. This sysctl
223defends against that. It defines how many concurrent crashing
224processes may be piped to user space applications in parallel. If
225this value is exceeded, then those crashing processes above that value
226are noted via the kernel log and their cores are skipped. 0 is a
227special value, indicating that unlimited processes may be captured in
228parallel, but that no waiting will take place (i.e. the collecting
229process is not guaranteed access to /proc/<crashing pid>/). This
230value defaults to 0.
Neil Hormana2939802009-09-23 15:56:56 -0700231
232==============================================================
233
Linus Torvalds1da177e2005-04-16 15:20:36 -0700234core_uses_pid:
235
236The default coredump filename is "core". By setting
237core_uses_pid to 1, the coredump filename becomes core.PID.
238If core_pattern does not include "%p" (default does not)
239and core_uses_pid is set, then .PID will be appended to
240the filename.
241
242==============================================================
243
244ctrl-alt-del:
245
246When the value in this file is 0, ctrl-alt-del is trapped and
247sent to the init(1) program to handle a graceful restart.
248When, however, the value is > 0, Linux's reaction to a Vulcan
249Nerve Pinch (tm) will be an immediate reboot, without even
250syncing its dirty buffers.
251
252Note: when a program (like dosemu) has the keyboard in 'raw'
253mode, the ctrl-alt-del is intercepted by the program before it
254ever reaches the kernel tty layer, and it's up to the program
255to decide what to do with it.
256
257==============================================================
258
Dan Rosenbergeaf06b22010-11-11 14:05:18 -0800259dmesg_restrict:
260
Borislav Petkov807094c2011-07-23 10:39:29 -0700261This toggle indicates whether unprivileged users are prevented
262from using dmesg(8) to view messages from the kernel's log buffer.
263When dmesg_restrict is set to (0) there are no restrictions. When
Serge E. Hallyn38ef4c22010-12-08 15:19:01 +0000264dmesg_restrict is set set to (1), users must have CAP_SYSLOG to use
Dan Rosenbergeaf06b22010-11-11 14:05:18 -0800265dmesg(8).
266
Borislav Petkov807094c2011-07-23 10:39:29 -0700267The kernel config option CONFIG_SECURITY_DMESG_RESTRICT sets the
268default value of dmesg_restrict.
Dan Rosenbergeaf06b22010-11-11 14:05:18 -0800269
270==============================================================
271
Linus Torvalds1da177e2005-04-16 15:20:36 -0700272domainname & hostname:
273
274These files can be used to set the NIS/YP domainname and the
275hostname of your box in exactly the same way as the commands
276domainname and hostname, i.e.:
277# echo "darkstar" > /proc/sys/kernel/hostname
278# echo "mydomain" > /proc/sys/kernel/domainname
279has the same effect as
280# hostname "darkstar"
281# domainname "mydomain"
282
283Note, however, that the classic darkstar.frop.org has the
284hostname "darkstar" and DNS (Internet Domain Name Server)
285domainname "frop.org", not to be confused with the NIS (Network
286Information Service) or YP (Yellow Pages) domainname. These two
287domain names are in general different. For a detailed discussion
288see the hostname(1) man page.
289
290==============================================================
291
292hotplug:
293
294Path for the hotplug policy agent.
295Default value is "/sbin/hotplug".
296
297==============================================================
298
Aaron Tomlin270750db2014-01-20 17:34:13 +0000299hung_task_panic:
300
301Controls the kernel's behavior when a hung task is detected.
302This file shows up if CONFIG_DETECT_HUNG_TASK is enabled.
303
3040: continue operation. This is the default behavior.
305
3061: panic immediately.
307
308==============================================================
309
310hung_task_check_count:
311
312The upper bound on the number of tasks that are checked.
313This file shows up if CONFIG_DETECT_HUNG_TASK is enabled.
314
315==============================================================
316
317hung_task_timeout_secs:
318
319Check interval. When a task in D state did not get scheduled
320for more than this value report a warning.
321This file shows up if CONFIG_DETECT_HUNG_TASK is enabled.
322
3230: means infinite timeout - no checking done.
Liu Hua80df2842014-04-07 15:38:57 -0700324Possible values to set are in range {0..LONG_MAX/HZ}.
Aaron Tomlin270750db2014-01-20 17:34:13 +0000325
326==============================================================
327
Aaron Tomlin70e0ac52014-01-27 09:00:57 +0000328hung_task_warnings:
Aaron Tomlin270750db2014-01-20 17:34:13 +0000329
330The maximum number of warnings to report. During a check interval
Aaron Tomlin70e0ac52014-01-27 09:00:57 +0000331if a hung task is detected, this value is decreased by 1.
332When this value reaches 0, no more warnings will be reported.
Aaron Tomlin270750db2014-01-20 17:34:13 +0000333This file shows up if CONFIG_DETECT_HUNG_TASK is enabled.
334
335-1: report an infinite number of warnings.
336
337==============================================================
338
Kees Cook79847542014-01-23 15:55:59 -0800339kexec_load_disabled:
340
341A toggle indicating if the kexec_load syscall has been disabled. This
342value defaults to 0 (false: kexec_load enabled), but can be set to 1
343(true: kexec_load disabled). Once true, kexec can no longer be used, and
344the toggle cannot be set back to false. This allows a kexec image to be
345loaded before disabling the syscall, allowing a system to set up (and
346later use) an image without it being altered. Generally used together
347with the "modules_disabled" sysctl.
348
349==============================================================
350
Dan Rosenberg455cd5a2011-01-12 16:59:41 -0800351kptr_restrict:
352
353This toggle indicates whether restrictions are placed on
Ryan Mallon312b4e22013-11-12 15:08:51 -0800354exposing kernel addresses via /proc and other interfaces.
355
356When kptr_restrict is set to (0), the default, there are no restrictions.
357
358When kptr_restrict is set to (1), kernel pointers printed using the %pK
359format specifier will be replaced with 0's unless the user has CAP_SYSLOG
360and effective user and group ids are equal to the real ids. This is
361because %pK checks are done at read() time rather than open() time, so
362if permissions are elevated between the open() and the read() (e.g via
363a setuid binary) then %pK will not leak kernel pointers to unprivileged
364users. Note, this is a temporary solution only. The correct long-term
365solution is to do the permission checks at open() time. Consider removing
366world read permissions from files that use %pK, and using dmesg_restrict
367to protect against uses of %pK in dmesg(8) if leaking kernel pointer
368values to unprivileged users is a concern.
369
370When kptr_restrict is set to (2), kernel pointers printed using
371%pK will be replaced with 0's regardless of privileges.
Dan Rosenberg455cd5a2011-01-12 16:59:41 -0800372
373==============================================================
374
Chuck Ebbert0741f4d2006-12-07 02:14:11 +0100375kstack_depth_to_print: (X86 only)
376
377Controls the number of words to print when dumping the raw
378kernel stack.
379
380==============================================================
381
Borislav Petkov807094c2011-07-23 10:39:29 -0700382l2cr: (PPC only)
383
384This flag controls the L2 cache of G3 processor boards. If
3850, the cache is disabled. Enabled if nonzero.
386
387==============================================================
388
Kees Cook3d433212009-04-02 15:49:29 -0700389modules_disabled:
390
391A toggle value indicating if modules are allowed to be loaded
392in an otherwise modular kernel. This toggle defaults to off
393(0), but can be set true (1). Once true, modules can be
394neither loaded nor unloaded, and the toggle cannot be set back
Kees Cook79847542014-01-23 15:55:59 -0800395to false. Generally used with the "kexec_load_disabled" toggle.
Kees Cook3d433212009-04-02 15:49:29 -0700396
397==============================================================
398
Stanislav Kinsbursky03f59562013-01-04 15:34:50 -0800399msg_next_id, sem_next_id, and shm_next_id:
400
401These three toggles allows to specify desired id for next allocated IPC
402object: message, semaphore or shared memory respectively.
403
404By default they are equal to -1, which means generic allocation logic.
405Possible values to set are in range {0..INT_MAX}.
406
407Notes:
4081) kernel doesn't guarantee, that new object will have desired id. So,
409it's up to userspace, how to handle an object with "wrong" id.
4102) Toggle with non-default value will be set back to -1 by kernel after
411successful IPC object allocation.
412
413==============================================================
414
Borislav Petkov807094c2011-07-23 10:39:29 -0700415nmi_watchdog:
416
417Enables/Disables the NMI watchdog on x86 systems. When the value is
418non-zero the NMI watchdog is enabled and will continuously test all
419online cpus to determine whether or not they are still functioning
420properly. Currently, passing "nmi_watchdog=" parameter at boot time is
421required for this function to work.
422
423If LAPIC NMI watchdog method is in use (nmi_watchdog=2 kernel
424parameter), the NMI watchdog shares registers with oprofile. By
425disabling the NMI watchdog, oprofile may have more registers to
426utilize.
427
428==============================================================
429
Mel Gorman10fc05d2013-10-07 11:28:40 +0100430numa_balancing
431
432Enables/disables automatic page fault based NUMA memory
433balancing. Memory is moved automatically to nodes
434that access it often.
435
436Enables/disables automatic NUMA memory balancing. On NUMA machines, there
437is a performance penalty if remote memory is accessed by a CPU. When this
438feature is enabled the kernel samples what task thread is accessing memory
439by periodically unmapping pages and later trapping a page fault. At the
440time of the page fault, it is determined if the data being accessed should
441be migrated to a local memory node.
442
443The unmapping of pages and trapping faults incur additional overhead that
444ideally is offset by improved memory locality but there is no universal
445guarantee. If the target workload is already bound to NUMA nodes then this
446feature should be disabled. Otherwise, if the system overhead from the
447feature is too high then the rate the kernel samples for NUMA hinting
448faults may be controlled by the numa_balancing_scan_period_min_ms,
Mel Gorman930aa172013-10-07 11:29:37 +0100449numa_balancing_scan_delay_ms, numa_balancing_scan_period_max_ms,
Rik van Riel52bf84a2014-01-27 17:03:40 -0500450numa_balancing_scan_size_mb, and numa_balancing_settle_count sysctls.
Mel Gorman10fc05d2013-10-07 11:28:40 +0100451
452==============================================================
453
454numa_balancing_scan_period_min_ms, numa_balancing_scan_delay_ms,
Mel Gorman930aa172013-10-07 11:29:37 +0100455numa_balancing_scan_period_max_ms, numa_balancing_scan_size_mb
Mel Gorman10fc05d2013-10-07 11:28:40 +0100456
457Automatic NUMA balancing scans tasks address space and unmaps pages to
458detect if pages are properly placed or if the data should be migrated to a
459memory node local to where the task is running. Every "scan delay" the task
460scans the next "scan size" number of pages in its address space. When the
461end of the address space is reached the scanner restarts from the beginning.
462
463In combination, the "scan delay" and "scan size" determine the scan rate.
464When "scan delay" decreases, the scan rate increases. The scan delay and
465hence the scan rate of every task is adaptive and depends on historical
466behaviour. If pages are properly placed then the scan delay increases,
467otherwise the scan delay decreases. The "scan size" is not adaptive but
468the higher the "scan size", the higher the scan rate.
469
470Higher scan rates incur higher system overhead as page faults must be
471trapped and potentially data must be migrated. However, the higher the scan
472rate, the more quickly a tasks memory is migrated to a local node if the
473workload pattern changes and minimises performance impact due to remote
474memory accesses. These sysctls control the thresholds for scan delays and
475the number of pages scanned.
476
Mel Gorman598f0ec2013-10-07 11:28:55 +0100477numa_balancing_scan_period_min_ms is the minimum time in milliseconds to
478scan a tasks virtual memory. It effectively controls the maximum scanning
479rate for each task.
Mel Gorman10fc05d2013-10-07 11:28:40 +0100480
481numa_balancing_scan_delay_ms is the starting "scan delay" used for a task
482when it initially forks.
483
Mel Gorman598f0ec2013-10-07 11:28:55 +0100484numa_balancing_scan_period_max_ms is the maximum time in milliseconds to
485scan a tasks virtual memory. It effectively controls the minimum scanning
486rate for each task.
Mel Gorman10fc05d2013-10-07 11:28:40 +0100487
488numa_balancing_scan_size_mb is how many megabytes worth of pages are
489scanned for a given scan.
490
Mel Gorman10fc05d2013-10-07 11:28:40 +0100491==============================================================
492
Linus Torvalds1da177e2005-04-16 15:20:36 -0700493osrelease, ostype & version:
494
495# cat osrelease
4962.1.88
497# cat ostype
498Linux
499# cat version
500#5 Wed Feb 25 21:49:24 MET 1998
501
502The files osrelease and ostype should be clear enough. Version
503needs a little more clarification however. The '#5' means that
504this is the fifth kernel built from this source base and the
505date behind it indicates the time the kernel was built.
506The only way to tune these values is to rebuild the kernel :-)
507
508==============================================================
509
510overflowgid & overflowuid:
511
Borislav Petkov807094c2011-07-23 10:39:29 -0700512if your architecture did not always support 32-bit UIDs (i.e. arm,
513i386, m68k, sh, and sparc32), a fixed UID and GID will be returned to
514applications that use the old 16-bit UID/GID system calls, if the
515actual UID or GID would exceed 65535.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700516
517These sysctls allow you to change the value of the fixed UID and GID.
518The default is 65534.
519
520==============================================================
521
522panic:
523
Borislav Petkov807094c2011-07-23 10:39:29 -0700524The value in this file represents the number of seconds the kernel
525waits before rebooting on a panic. When you use the software watchdog,
526the recommended setting is 60.
527
528==============================================================
529
530panic_on_unrecovered_nmi:
531
532The default Linux behaviour on an NMI of either memory or unknown is
533to continue operation. For many environments such as scientific
534computing it is preferable that the box is taken out and the error
535dealt with than an uncorrected parity/ECC error get propagated.
536
537A small number of systems do generate NMI's for bizarre random reasons
538such as power management so the default is off. That sysctl works like
539the existing panic controls already in that directory.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700540
541==============================================================
542
543panic_on_oops:
544
545Controls the kernel's behaviour when an oops or BUG is encountered.
546
5470: try to continue operation
548
Matt LaPlantea982ac02007-05-09 07:35:06 +02005491: panic immediately. If the `panic' sysctl is also non-zero then the
Maxime Bizon8b23d04d2006-08-05 12:14:32 -0700550 machine will be rebooted.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700551
552==============================================================
553
Mitsuo Hayasaka55af7792011-11-29 15:08:36 +0900554panic_on_stackoverflow:
555
556Controls the kernel's behavior when detecting the overflows of
557kernel, IRQ and exception stacks except a user stack.
558This file shows up if CONFIG_DEBUG_STACKOVERFLOW is enabled.
559
5600: try to continue operation.
561
5621: panic immediately.
563
564==============================================================
565
Dave Hansen14c63f12013-06-21 08:51:36 -0700566perf_cpu_time_max_percent:
567
568Hints to the kernel how much CPU time it should be allowed to
569use to handle perf sampling events. If the perf subsystem
570is informed that its samples are exceeding this limit, it
571will drop its sampling frequency to attempt to reduce its CPU
572usage.
573
574Some perf sampling happens in NMIs. If these samples
575unexpectedly take too long to execute, the NMIs can become
576stacked up next to each other so much that nothing else is
577allowed to execute.
578
5790: disable the mechanism. Do not monitor or correct perf's
580 sampling rate no matter how CPU time it takes.
581
5821-100: attempt to throttle perf's sample rate to this
583 percentage of CPU. Note: the kernel calculates an
584 "expected" length of each sample event. 100 here means
585 100% of that expected length. Even if this is set to
586 100, you may still see sample throttling if this
587 length is exceeded. Set to 0 if you truly do not care
588 how much CPU is consumed.
589
590==============================================================
591
Mitsuo Hayasaka55af7792011-11-29 15:08:36 +0900592
Linus Torvalds1da177e2005-04-16 15:20:36 -0700593pid_max:
594
Robert P. J. Daybeb7dd82007-05-09 07:14:03 +0200595PID allocation wrap value. When the kernel's next PID value
Linus Torvalds1da177e2005-04-16 15:20:36 -0700596reaches this value, it wraps back to a minimum PID value.
597PIDs of value pid_max or larger are not allocated.
598
599==============================================================
600
Pavel Emelyanovb8f566b2012-01-12 17:20:27 -0800601ns_last_pid:
602
603The last pid allocated in the current (the one task using this sysctl
604lives in) pid namespace. When selecting a pid for a next task on fork
605kernel tries to allocate a number starting from this one.
606
607==============================================================
608
Linus Torvalds1da177e2005-04-16 15:20:36 -0700609powersave-nap: (PPC only)
610
611If set, Linux-PPC will use the 'nap' mode of powersaving,
612otherwise the 'doze' mode will be used.
613
614==============================================================
615
616printk:
617
618The four values in printk denote: console_loglevel,
619default_message_loglevel, minimum_console_loglevel and
620default_console_loglevel respectively.
621
622These values influence printk() behavior when printing or
623logging error messages. See 'man 2 syslog' for more info on
624the different loglevels.
625
626- console_loglevel: messages with a higher priority than
627 this will be printed to the console
Paul Bolle87889e12011-02-06 21:00:41 +0100628- default_message_loglevel: messages without an explicit priority
Linus Torvalds1da177e2005-04-16 15:20:36 -0700629 will be printed with this priority
630- minimum_console_loglevel: minimum (highest) value to which
631 console_loglevel can be set
632- default_console_loglevel: default value for console_loglevel
633
634==============================================================
635
Borislav Petkov807094c2011-07-23 10:39:29 -0700636printk_delay:
637
638Delay each printk message in printk_delay milliseconds
639
640Value from 0 - 10000 is allowed.
641
642==============================================================
643
Linus Torvalds1da177e2005-04-16 15:20:36 -0700644printk_ratelimit:
645
646Some warning messages are rate limited. printk_ratelimit specifies
647the minimum length of time between these messages (in jiffies), by
648default we allow one every 5 seconds.
649
650A value of 0 will disable rate limiting.
651
652==============================================================
653
654printk_ratelimit_burst:
655
656While long term we enforce one message per printk_ratelimit
657seconds, we do allow a burst of messages to pass through.
658printk_ratelimit_burst specifies the number of messages we can
659send before ratelimiting kicks in.
660
661==============================================================
662
Borislav Petkov807094c2011-07-23 10:39:29 -0700663randomize_va_space:
Jiri Kosina1ec7fd52008-02-09 23:24:08 +0100664
665This option can be used to select the type of process address
666space randomization that is used in the system, for architectures
667that support this feature.
668
Horst Schirmeierb7f5ab62009-07-03 14:20:17 +02006690 - Turn the process address space randomization off. This is the
670 default for architectures that do not support this feature anyways,
671 and kernels that are booted with the "norandmaps" parameter.
Jiri Kosina1ec7fd52008-02-09 23:24:08 +0100672
6731 - Make the addresses of mmap base, stack and VDSO page randomized.
674 This, among other things, implies that shared libraries will be
Horst Schirmeierb7f5ab62009-07-03 14:20:17 +0200675 loaded to random addresses. Also for PIE-linked binaries, the
676 location of code start is randomized. This is the default if the
677 CONFIG_COMPAT_BRK option is enabled.
Jiri Kosina1ec7fd52008-02-09 23:24:08 +0100678
Horst Schirmeierb7f5ab62009-07-03 14:20:17 +02006792 - Additionally enable heap randomization. This is the default if
680 CONFIG_COMPAT_BRK is disabled.
681
682 There are a few legacy applications out there (such as some ancient
Jiri Kosina1ec7fd52008-02-09 23:24:08 +0100683 versions of libc.so.5 from 1996) that assume that brk area starts
Horst Schirmeierb7f5ab62009-07-03 14:20:17 +0200684 just after the end of the code+bss. These applications break when
685 start of the brk area is randomized. There are however no known
Jiri Kosina1ec7fd52008-02-09 23:24:08 +0100686 non-legacy applications that would be broken this way, so for most
Horst Schirmeierb7f5ab62009-07-03 14:20:17 +0200687 systems it is safe to choose full randomization.
688
689 Systems with ancient and/or broken binaries should be configured
690 with CONFIG_COMPAT_BRK enabled, which excludes the heap from process
691 address space randomization.
Jiri Kosina1ec7fd52008-02-09 23:24:08 +0100692
693==============================================================
694
Linus Torvalds1da177e2005-04-16 15:20:36 -0700695reboot-cmd: (Sparc only)
696
697??? This seems to be a way to give an argument to the Sparc
698ROM/Flash boot loader. Maybe to tell it what to do after
699rebooting. ???
700
701==============================================================
702
703rtsig-max & rtsig-nr:
704
705The file rtsig-max can be used to tune the maximum number
706of POSIX realtime (queued) signals that can be outstanding
707in the system.
708
709rtsig-nr shows the number of RT signals currently queued.
710
711==============================================================
712
713sg-big-buff:
714
715This file shows the size of the generic SCSI (sg) buffer.
716You can't tune it just yet, but you could change it on
717compile time by editing include/scsi/sg.h and changing
718the value of SG_BIG_BUFF.
719
720There shouldn't be any reason to change this value. If
721you can come up with one, you probably know what you
722are doing anyway :)
723
724==============================================================
725
Carlos Alberto Lopez Perez358e4192013-01-04 15:35:05 -0800726shmall:
727
728This parameter sets the total amount of shared memory pages that
729can be used system wide. Hence, SHMALL should always be at least
730ceil(shmmax/PAGE_SIZE).
731
732If you are not sure what the default PAGE_SIZE is on your Linux
733system, you can run the following command:
734
735# getconf PAGE_SIZE
736
737==============================================================
738
Borislav Petkov807094c2011-07-23 10:39:29 -0700739shmmax:
Linus Torvalds1da177e2005-04-16 15:20:36 -0700740
741This value can be used to query and set the run time limit
742on the maximum shared memory segment size that can be created.
Borislav Petkov807094c2011-07-23 10:39:29 -0700743Shared memory segments up to 1Gb are now supported in the
Linus Torvalds1da177e2005-04-16 15:20:36 -0700744kernel. This value defaults to SHMMAX.
745
746==============================================================
747
Vasiliy Kulikovb34a6b12011-07-26 16:08:48 -0700748shm_rmid_forced:
749
750Linux lets you set resource limits, including how much memory one
751process can consume, via setrlimit(2). Unfortunately, shared memory
752segments are allowed to exist without association with any process, and
753thus might not be counted against any resource limits. If enabled,
754shared memory segments are automatically destroyed when their attach
755count becomes zero after a detach or a process termination. It will
756also destroy segments that were created, but never attached to, on exit
757from the process. The only use left for IPC_RMID is to immediately
758destroy an unattached segment. Of course, this breaks the way things are
759defined, so some applications might stop working. Note that this
760feature will do you no good unless you also configure your resource
761limits (in particular, RLIMIT_AS and RLIMIT_NPROC). Most systems don't
762need this.
763
764Note that if you change this from 0 to 1, already created segments
765without users and with a dead originative process will be destroyed.
766
767==============================================================
768
Kees Cookf4aacea2014-06-06 14:37:19 -0700769sysctl_writes_strict:
770
771Control how file position affects the behavior of updating sysctl values
772via the /proc/sys interface:
773
774 -1 - Legacy per-write sysctl value handling, with no printk warnings.
775 Each write syscall must fully contain the sysctl value to be
776 written, and multiple writes on the same sysctl file descriptor
777 will rewrite the sysctl value, regardless of file position.
778 0 - (default) Same behavior as above, but warn about processes that
779 perform writes to a sysctl file descriptor when the file position
780 is not 0.
781 1 - Respect file position when writing sysctl strings. Multiple writes
782 will append to the sysctl value buffer. Anything past the max length
783 of the sysctl value buffer will be ignored. Writes to numeric sysctl
784 entries must always be at file position 0 and the value must be
785 fully contained in the buffer sent in the write syscall.
786
787==============================================================
788
Aaron Tomlined235872014-06-23 13:22:05 -0700789softlockup_all_cpu_backtrace:
790
791This value controls the soft lockup detector thread's behavior
792when a soft lockup condition is detected as to whether or not
793to gather further debug information. If enabled, each cpu will
794be issued an NMI and instructed to capture stack trace.
795
796This feature is only applicable for architectures which support
797NMI.
798
7990: do nothing. This is the default behavior.
800
8011: on detection capture more debug information.
802
803==============================================================
804
Borislav Petkov807094c2011-07-23 10:39:29 -0700805tainted:
Linus Torvalds1da177e2005-04-16 15:20:36 -0700806
807Non-zero if the kernel has been tainted. Numeric values, which
808can be ORed together:
809
Greg Kroah-Hartmanbb206982008-10-17 15:01:07 -0700810 1 - A module with a non-GPL license has been loaded, this
811 includes modules with no license.
812 Set by modutils >= 2.4.9 and module-init-tools.
813 2 - A module was force loaded by insmod -f.
814 Set by modutils >= 2.4.9 and module-init-tools.
815 4 - Unsafe SMP processors: SMP with CPUs not designed for SMP.
816 8 - A module was forcibly unloaded from the system by rmmod -f.
817 16 - A hardware machine check error occurred on the system.
818 32 - A bad page was discovered on the system.
819 64 - The user has asked that the system be marked "tainted". This
820 could be because they are running software that directly modifies
821 the hardware, or for other reasons.
822 128 - The system has died.
823 256 - The ACPI DSDT has been overridden with one supplied by the user
824 instead of using the one provided by the hardware.
825 512 - A kernel warning has occurred.
8261024 - A module from drivers/staging was loaded.
Larry Fingerf5fe1842012-02-06 09:49:50 -08008272048 - The system is working around a severe firmware bug.
8284096 - An out-of-tree module has been loaded.
Mathieu Desnoyers66cc69e2014-03-13 12:11:30 +10308298192 - An unsigned module has been loaded in a kernel supporting module
830 signature.
Josh Hunt69361ee2014-08-08 14:22:31 -070083116384 - A soft lockup has previously occurred on the system.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700832
Shen Feng760df932009-04-02 16:57:20 -0700833==============================================================
834
Shen Feng760df932009-04-02 16:57:20 -0700835unknown_nmi_panic:
836
Borislav Petkov807094c2011-07-23 10:39:29 -0700837The value in this file affects behavior of handling NMI. When the
838value is non-zero, unknown NMI is trapped and then panic occurs. At
839that time, kernel debugging information is displayed on console.
Shen Feng760df932009-04-02 16:57:20 -0700840
Borislav Petkov807094c2011-07-23 10:39:29 -0700841NMI switch that most IA32 servers have fires unknown NMI up, for
842example. If a system hangs up, try pressing the NMI switch.
Li Zefan08825c92013-05-17 10:31:20 +0800843
844==============================================================
845
846watchdog_thresh:
847
848This value can be used to control the frequency of hrtimer and NMI
849events and the soft and hard lockup thresholds. The default threshold
850is 10 seconds.
851
852The softlockup threshold is (2 * watchdog_thresh). Setting this
853tunable to zero will disable lockup detection altogether.
854
855==============================================================