From: Borislav Petkov <bp@suse.de>
Date: Tue, 2 Jan 2018 13:19:49 +0000 (+0100)
Subject: x86/kaiser: Reenable PARAVIRT
X-Git-Tag: archive/raspbian/4.9.80-2+rpi1~8^2^2~15
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=5a33db6149a5b46cb5bbe9abb18a3451283435ca;p=linux-4.9.git

x86/kaiser: Reenable PARAVIRT

Now that the required bits have been addressed, reenable
PARAVIRT.

Signed-off-by: Borislav Petkov <bp@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

Gbp-Pq: Topic features/all/kpti
Gbp-Pq: Name x86-kaiser-reenable-paravirt.patch
---

diff --git a/security/Kconfig b/security/Kconfig
index 93b4e24f142d..e9526e757647 100644
--- a/security/Kconfig
+++ b/security/Kconfig
@@ -43,7 +43,7 @@ config SECURITY
 config KAISER
 	bool "Remove the kernel mapping in user mode"
 	default y
-	depends on X86_64 && SMP && !PARAVIRT
+	depends on X86_64 && SMP
 	help
 	  This enforces a strict kernel and user space isolation, in order
 	  to close hardware side channels on kernel address information.