Re: [PATCH] x86/mm/pkeys: Do not enable them by default

[Dave Hansen]

On 02/19/2016 03:27 AM, Borislav Petkov wrote:
>  config X86_INTEL_MEMORY_PROTECTION_KEYS
> -	prompt "Intel Memory Protection Keys"
> -	def_bool y
> +	bool "Intel Memory Protection Keys"
>  	# Note: only available in 64-bit mode
>  	depends on CPU_SUP_INTEL && X86_64
>  	---help---

Hi Borislav,

I'd really prefer this be left on by default.  This is a feature that I
expect to be widely enabled in distribution kernels.