X-Git-Url: https://git.openpandora.org/cgi-bin/gitweb.cgi?p=pandora-kernel.git;a=blobdiff_plain;f=security%2FKconfig;h=b9bc07d97b152965e3d1332316bd0676a928d471;hp=51bd5a0b69ae80440470b9aa9ed6eca0e38f66a6;hb=7aa2c8a3d19e27d8913b66e4f0e09ee86d56095e;hpb=d6748066ad0e8b2514545998f8367ebb3906f299 diff --git a/security/Kconfig b/security/Kconfig index 51bd5a0b69ae..b9bc07d97b15 100644 --- a/security/Kconfig +++ b/security/Kconfig @@ -96,6 +96,16 @@ config SECURITY If you are unsure how to answer this question, answer N. +config PAGE_TABLE_ISOLATION + bool "Remove the kernel mapping in user mode" + default y + depends on X86_64 && SMP + help + This enforces a strict kernel and user space isolation, in order + to close hardware side channels on kernel address information. + + If you are unsure how to answer this question, answer Y. + config SECURITYFS bool "Enable the securityfs filesystem" help