Loading arch/arm64/Kconfig +13 −0 Original line number Diff line number Diff line Loading @@ -781,6 +781,19 @@ config FORCE_MAX_ZONEORDER However for 4K, we choose a higher default value, 11 as opposed to 10, giving us 4M allocations matching the default size used by generic code. config UNMAP_KERNEL_AT_EL0 bool "Unmap kernel when running in userspace (aka \"KAISER\")" default y help Some attacks against KASLR make use of the timing difference between a permission fault which could arise from a page table entry that is present in the TLB, and a translation fault which always requires a page table walk. This option defends against these attacks by unmapping the kernel whilst running in userspace, therefore forcing translation faults for all of kernel space. If unsure, say Y. menuconfig ARMV8_DEPRECATED bool "Emulate deprecated/obsolete ARMv8 instructions" depends on COMPAT Loading Loading
arch/arm64/Kconfig +13 −0 Original line number Diff line number Diff line Loading @@ -781,6 +781,19 @@ config FORCE_MAX_ZONEORDER However for 4K, we choose a higher default value, 11 as opposed to 10, giving us 4M allocations matching the default size used by generic code. config UNMAP_KERNEL_AT_EL0 bool "Unmap kernel when running in userspace (aka \"KAISER\")" default y help Some attacks against KASLR make use of the timing difference between a permission fault which could arise from a page table entry that is present in the TLB, and a translation fault which always requires a page table walk. This option defends against these attacks by unmapping the kernel whilst running in userspace, therefore forcing translation faults for all of kernel space. If unsure, say Y. menuconfig ARMV8_DEPRECATED bool "Emulate deprecated/obsolete ARMv8 instructions" depends on COMPAT Loading
