summaryrefslogtreecommitdiffstats
path: root/security/Kconfig
diff options
context:
space:
mode:
authorThomas Gleixner <tglx@linutronix.de>2018-01-03 15:18:44 +0100
committerThomas Gleixner <tglx@linutronix.de>2018-01-03 15:57:58 +0100
commit87faa0d9b43b4755ff6963a22d1fd1bee1aa3b39 (patch)
tree786a98c0039da78e572e95ff02fef682bc04c889 /security/Kconfig
parentx86/ldt: Make LDT pgtable free conditional (diff)
downloadlinux-87faa0d9b43b4755ff6963a22d1fd1bee1aa3b39.tar.xz
linux-87faa0d9b43b4755ff6963a22d1fd1bee1aa3b39.zip
x86/pti: Enable PTI by default
This really want's to be enabled by default. Users who know what they are doing can disable it either in the config or on the kernel command line. Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Cc: stable@vger.kernel.org
Diffstat (limited to 'security/Kconfig')
-rw-r--r--security/Kconfig1
1 files changed, 1 insertions, 0 deletions
diff --git a/security/Kconfig b/security/Kconfig
index a623d13bf288..3d4debd0257e 100644
--- a/security/Kconfig
+++ b/security/Kconfig
@@ -56,6 +56,7 @@ config SECURITY_NETWORK
config PAGE_TABLE_ISOLATION
bool "Remove the kernel mapping in user mode"
+ default y
depends on X86_64 && !UML
help
This feature reduces the number of hardware side channels by