| From: Borislav Petkov <bp@suse.de> |
| Date: Tue, 2 Jan 2018 14:19:49 +0100 |
| Subject: x86/kaiser: Reenable PARAVIRT |
| |
| Now that the required bits have been addressed, reenable |
| PARAVIRT. |
| |
| Signed-off-by: Borislav Petkov <bp@suse.de> |
| Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
| Signed-off-by: Ben Hutchings <ben@decadent.org.uk> |
| --- |
| security/Kconfig | 2 +- |
| 1 file changed, 1 insertion(+), 1 deletion(-) |
| |
| diff --git a/security/Kconfig b/security/Kconfig |
| index 19f83193e7ab..4b05ddcce22c 100644 |
| --- a/security/Kconfig |
| +++ b/security/Kconfig |
| @@ -99,7 +99,7 @@ config SECURITY |
| config KAISER |
| bool "Remove the kernel mapping in user mode" |
| default y |
| - depends on X86_64 && SMP && !PARAVIRT |
| + depends on X86_64 && SMP |
| help |
| This enforces a strict kernel and user space isolation, in order |
| to close hardware side channels on kernel address information. |
| |
