mirror of
https://github.com/torvalds/linux.git
synced 2026-04-18 06:44:00 -04:00
6801cc4936
Add documentation for the /proc/sys/crypto and /proc/sys/debug directories in the admin-guide. This includes tunables for FIPS mode (fips_enabled, fips_name, fips_version), exception-trace, and kprobes-optimization. The documentation is based on source code analysis and addresses stylistic feedback to keep it direct and concise. Tested-by: Randy Dunlap <rdunlap@infradead.org> Signed-off-by: Shubham Chakraborty <chakrabortyshubham66@gmail.com> Signed-off-by: Jonathan Corbet <corbet@lwn.net> Message-ID: <20260223203724.20874-1-chakrabortyshubham66@gmail.com>
48 lines
1.5 KiB
ReStructuredText
48 lines
1.5 KiB
ReStructuredText
=================
|
|
/proc/sys/crypto/
|
|
=================
|
|
|
|
These files show up in ``/proc/sys/crypto/``, depending on the
|
|
kernel configuration:
|
|
|
|
.. contents:: :local:
|
|
|
|
fips_enabled
|
|
============
|
|
|
|
Read-only flag that indicates whether FIPS mode is enabled.
|
|
|
|
- ``0``: FIPS mode is disabled (default).
|
|
- ``1``: FIPS mode is enabled.
|
|
|
|
This value is set at boot time via the ``fips=1`` kernel command line
|
|
parameter. When enabled, the cryptographic API will restrict the use
|
|
of certain algorithms and perform self-tests to ensure compliance with
|
|
FIPS (Federal Information Processing Standards) requirements, such as
|
|
FIPS 140-2 and the newer FIPS 140-3, depending on the kernel
|
|
configuration and the module in use.
|
|
|
|
fips_name
|
|
=========
|
|
|
|
Read-only file that contains the name of the FIPS module currently in use.
|
|
The value is typically configured via the ``CONFIG_CRYPTO_FIPS_NAME``
|
|
kernel configuration option.
|
|
|
|
fips_version
|
|
============
|
|
|
|
Read-only file that contains the version string of the FIPS module.
|
|
If ``CONFIG_CRYPTO_FIPS_CUSTOM_VERSION`` is set, it uses the value from
|
|
``CONFIG_CRYPTO_FIPS_VERSION``. Otherwise, it defaults to the kernel
|
|
release version (``UTS_RELEASE``).
|
|
|
|
Copyright (c) 2026, Shubham Chakraborty <chakrabortyshubham66@gmail.com>
|
|
|
|
For general info and legal blurb, please look in
|
|
Documentation/admin-guide/sysctl/index.rst.
|
|
|
|
.. See scripts/check-sysctl-docs to keep this up to date:
|
|
.. scripts/check-sysctl-docs -vtable="crypto" \
|
|
.. $(git grep -l register_sysctl_)
|