Kconfig (5fa31af31e726c7f5a8f84800153054ca499338a) | Kconfig (ea4654e0885348f0faa47f6d7b44a08d75ad16e9) |
---|---|
1# SPDX-License-Identifier: GPL-2.0 2# Select 32 or 64 bit 3config 64BIT 4 bool "64-bit kernel" if "$(ARCH)" = "x86" 5 default "$(ARCH)" != "i386" 6 help 7 Say yes to build a 64-bit kernel - formerly known as x86_64 8 Say no to build a 32-bit kernel - formerly known as i386 --- 2470 unchanged lines hidden (view full) --- 2479 Say Y here to enable options which enable mitigations for 2480 speculative execution hardware vulnerabilities. 2481 2482 If you say N, all mitigations will be disabled. You really 2483 should know what you are doing to say so. 2484 2485if SPECULATION_MITIGATIONS 2486 | 1# SPDX-License-Identifier: GPL-2.0 2# Select 32 or 64 bit 3config 64BIT 4 bool "64-bit kernel" if "$(ARCH)" = "x86" 5 default "$(ARCH)" != "i386" 6 help 7 Say yes to build a 64-bit kernel - formerly known as x86_64 8 Say no to build a 32-bit kernel - formerly known as i386 --- 2470 unchanged lines hidden (view full) --- 2479 Say Y here to enable options which enable mitigations for 2480 speculative execution hardware vulnerabilities. 2481 2482 If you say N, all mitigations will be disabled. You really 2483 should know what you are doing to say so. 2484 2485if SPECULATION_MITIGATIONS 2486 |
2487config PAGE_TABLE_ISOLATION | 2487config MITIGATION_PAGE_TABLE_ISOLATION |
2488 bool "Remove the kernel mapping in user mode" 2489 default y 2490 depends on (X86_64 || X86_PAE) 2491 help 2492 This feature reduces the number of hardware side channels by 2493 ensuring that the majority of kernel addresses are not mapped 2494 into userspace. 2495 --- 545 unchanged lines hidden --- | 2488 bool "Remove the kernel mapping in user mode" 2489 default y 2490 depends on (X86_64 || X86_PAE) 2491 help 2492 This feature reduces the number of hardware side channels by 2493 ensuring that the majority of kernel addresses are not mapped 2494 into userspace. 2495 --- 545 unchanged lines hidden --- |