mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-09-27 12:57:53 +00:00
faed498d0d
Commit 5a0b11a180 ("iommu/amd: Remove iommu_v2 module") removes the
config AMD_IOMMU_V2.
Remove the reference to this config in the x86 architecture-specific
hardening config fragment as well.
Signed-off-by: Lukas Bulwahn <lukas.bulwahn@gmail.com>
Reviewed-by: Vasant Hegde <vasant.hegde@amd.com>
Link: https://lore.kernel.org/r/20231012045040.22088-1-lukas.bulwahn@gmail.com
Signed-off-by: Kees Cook <keescook@chromium.org>
14 lines
394 B
Text
14 lines
394 B
Text
# Basic kernel hardening options (specific to x86)
|
|
|
|
# Modern libc no longer needs a fixed-position mapping in userspace, remove
|
|
# it as a possible target.
|
|
CONFIG_LEGACY_VSYSCALL_NONE=y
|
|
|
|
# Enable chip-specific IOMMU support.
|
|
CONFIG_INTEL_IOMMU=y
|
|
CONFIG_INTEL_IOMMU_DEFAULT_ON=y
|
|
CONFIG_INTEL_IOMMU_SVM=y
|
|
CONFIG_AMD_IOMMU=y
|
|
|
|
# Enable CET Shadow Stack for userspace.
|
|
CONFIG_X86_USER_SHADOW_STACK=y
|