diff options
| author | Alex Shi <alex.shi@linaro.org> | 2018-01-08 12:01:03 +0800 |
|---|---|---|
| committer | Alex Shi <alex.shi@linaro.org> | 2018-01-08 12:01:03 +0800 |
| commit | 9c95ff4010dad00b22cc2cc32cad952059f59bd7 (patch) | |
| tree | 5724c8b4340c675320f7774673619c82a557cc7f /security | |
| parent | 95d4cbea0249e2fe483a981024501cdf7b0de55b (diff) | |
| parent | b3e3db15b45027e3b77ec7f722e2b7210b1bf726 (diff) | |
Merge tag 'v4.4.110' into linux-linaro-lsk-v4.4
This is the 4.4.110 stable release
Diffstat (limited to 'security')
| -rw-r--r-- | security/Kconfig | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/security/Kconfig b/security/Kconfig index ddb3e8a8d9bd..4976e8baf801 100644 --- a/security/Kconfig +++ b/security/Kconfig @@ -31,6 +31,16 @@ config SECURITY If you are unsure how to answer this question, answer N. +config PAGE_TABLE_ISOLATION + bool "Remove the kernel mapping in user mode" + default y + depends on X86_64 && SMP + help + This enforces a strict kernel and user space isolation, in order + to close hardware side channels on kernel address information. + + If you are unsure how to answer this question, answer Y. + config SECURITYFS bool "Enable the securityfs filesystem" help |