x86/kaiser: Reenable PARAVIRT
authorBorislav Petkov <bp@suse.de>
Tue, 2 Jan 2018 13:19:49 +0000 (14:19 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 5 Jan 2018 14:44:26 +0000 (15:44 +0100)
Now that the required bits have been addressed, reenable
PARAVIRT.

Signed-off-by: Borislav Petkov <bp@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
security/Kconfig

index 8d5d2407be7e146cf9033f08a0cdce8a5e2ee831..89f2d35367b2c4c4dc98bc7c0e77c852a025ddfa 100644 (file)
@@ -34,7 +34,7 @@ config SECURITY
 config KAISER
        bool "Remove the kernel mapping in user mode"
        default y
-       depends on X86_64 && SMP && !PARAVIRT
+       depends on X86_64 && SMP
        help
          This enforces a strict kernel and user space isolation, in order
          to close hardware side channels on kernel address information.