Re: [patch 57/60] x86/mm/kpti: Add Kconfig

From: Thomas Gleixner
Date: Tue Dec 05 2017 - 04:34:34 EST


On Mon, 4 Dec 2017, Thomas Gleixner wrote:
> On Mon, 4 Dec 2017, Andy Lutomirski wrote:
> > On Mon, Dec 4, 2017 at 6:08 AM, Thomas Gleixner <tglx@xxxxxxxxxxxxx> wrote:
> > > --- a/security/Kconfig
> > > +++ b/security/Kconfig
> > > @@ -54,6 +54,16 @@ config SECURITY_NETWORK
> > > implement socket and networking access controls.
> > > If you are unsure how to answer this question, answer N.
> > >
> > > +config KERNEL_PAGE_TABLE_ISOLATION
> > > + bool "Remove the kernel mapping in user mode"
> > > + depends on X86_64 && JUMP_LABEL
> >
> > select JUMP_LABEL perhaps?
>
> Silly me. Yes.

Peter just pointed out that we switched everything to cpu_has() which is
using alternatives so jump label is not longer required at all.

Thanks,

tglx