Commit 40d95299 authored by Borislav Petkov's avatar Borislav Petkov Committed by Kleber Sacilotto de Souza

x86/kaiser: Reenable PARAVIRT

Now that the required bits have been addressed, reenable
PARAVIRT.
Signed-off-by: default avatarBorislav Petkov <bp@suse.de>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>

CVE-2017-5754
Signed-off-by: default avatarColin Ian King <colin.king@canonical.com>
Signed-off-by: default avatarKleber Sacilotto de Souza <kleber.souza@canonical.com>
parent dc4a0c2b
...@@ -34,7 +34,7 @@ config SECURITY ...@@ -34,7 +34,7 @@ config SECURITY
config KAISER config KAISER
bool "Remove the kernel mapping in user mode" bool "Remove the kernel mapping in user mode"
default y default y
depends on X86_64 && SMP && !PARAVIRT depends on X86_64 && SMP
help help
This enforces a strict kernel and user space isolation, in order This enforces a strict kernel and user space isolation, in order
to close hardware side channels on kernel address information. to close hardware side channels on kernel address information.
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment