X-Git-Url: https://git.openpandora.org/cgi-bin/gitweb.cgi?a=blobdiff_plain;f=security%2FKconfig;h=b9bc07d97b152965e3d1332316bd0676a928d471;hb=19277917a0db893344f247d2ed4ac920c874f0d6;hp=51bd5a0b69ae80440470b9aa9ed6eca0e38f66a6;hpb=a0a4194c943bc64dd7b6e26cccb036cb26b81363;p=pandora-kernel.git diff --git a/security/Kconfig b/security/Kconfig index 51bd5a0b69ae..b9bc07d97b15 100644 --- a/security/Kconfig +++ b/security/Kconfig @@ -96,6 +96,16 @@ config SECURITY If you are unsure how to answer this question, answer N. +config PAGE_TABLE_ISOLATION + bool "Remove the kernel mapping in user mode" + default y + depends on X86_64 && SMP + help + This enforces a strict kernel and user space isolation, in order + to close hardware side channels on kernel address information. + + If you are unsure how to answer this question, answer Y. + config SECURITYFS bool "Enable the securityfs filesystem" help