[PATCH 4.1 58/65] x86/kaiser: Reenable PARAVIRT

From: Pavel Tatashin
Date: Mon Mar 05 2018 - 19:28:34 EST


From: Borislav Petkov <bp@xxxxxxx>

Now that the required bits have been addressed, reenable
PARAVIRT.

Signed-off-by: Borislav Petkov <bp@xxxxxxx>
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
(cherry picked from commit 750fb627d764eb66430c36961b94ab0002694c02)
Signed-off-by: Pavel Tatashin <pasha.tatashin@xxxxxxxxxx>
---
security/Kconfig | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/security/Kconfig b/security/Kconfig
index 9d63046e4794..ae44b94d63b2 100644
--- a/security/Kconfig
+++ b/security/Kconfig
@@ -34,7 +34,7 @@ config SECURITY
config KAISER
bool "Remove the kernel mapping in user mode"
default y
- depends on X86_64 && SMP && !PARAVIRT
+ depends on X86_64 && SMP
help
This enforces a strict kernel and user space isolation, in order
to close hardware side channels on kernel address information.
--
2.16.2