[C/linux-kvm,D/linux-kvm,SRU,0/1] UBUNTU: [Config]: enable PAGE_POISONING, PAGE_POISONING_NO_SANITY, PAGE_POISONING_ZERO
diff mbox

Message ID 20190220162853.30105-2-po-hsu.lin@canonical.com
State New
Headers show

Commit Message

Po-Hsu Lin Feb. 20, 2019, 4:28 p.m. UTC
BugLink: https://bugs.launchpad.net/bugs/1812624

Enable these options to match config setting in the generic kernels and
the requirement from the security team.

Note that this should not have performance impact as this will need to
be enabled with "page_poison=1" kernel boot option.

Signed-off-by: Po-Hsu Lin <po-hsu.lin@canonical.com>
---
 debian.kvm/config/config.common.ubuntu | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

Comments

Stefan Bader March 1, 2019, 2:33 p.m. UTC | #1
On 20.02.19 17:28, Po-Hsu Lin wrote:
> BugLink: https://bugs.launchpad.net/bugs/1812624
> 
> Enable these options to match config setting in the generic kernels and
> the requirement from the security team.
> 
> Note that this should not have performance impact as this will need to
> be enabled with "page_poison=1" kernel boot option.
> 
> Signed-off-by: Po-Hsu Lin <po-hsu.lin@canonical.com>
> ---

Applied to cosmic/linux-kvm/master-next. Thanks.

-Stefan

>  debian.kvm/config/config.common.ubuntu | 4 +++-
>  1 file changed, 3 insertions(+), 1 deletion(-)
> 
> diff --git a/debian.kvm/config/config.common.ubuntu b/debian.kvm/config/config.common.ubuntu
> index 681f52c..a56ba04 100644
> --- a/debian.kvm/config/config.common.ubuntu
> +++ b/debian.kvm/config/config.common.ubuntu
> @@ -1737,7 +1737,9 @@ CONFIG_PACKET=y
>  CONFIG_PAGE_COUNTER=y
>  # CONFIG_PAGE_EXTENSION is not set
>  # CONFIG_PAGE_OWNER is not set
> -# CONFIG_PAGE_POISONING is not set
> +CONFIG_PAGE_POISONING=y
> +CONFIG_PAGE_POISONING_NO_SANITY=y
> +CONFIG_PAGE_POISONING_ZERO=y
>  CONFIG_PAGE_TABLE_ISOLATION=y
>  # CONFIG_PANIC_ON_OOPS is not set
>  CONFIG_PANIC_ON_OOPS_VALUE=0
>

Patch
diff mbox

diff --git a/debian.kvm/config/config.common.ubuntu b/debian.kvm/config/config.common.ubuntu
index 681f52c..a56ba04 100644
--- a/debian.kvm/config/config.common.ubuntu
+++ b/debian.kvm/config/config.common.ubuntu
@@ -1737,7 +1737,9 @@  CONFIG_PACKET=y
 CONFIG_PAGE_COUNTER=y
 # CONFIG_PAGE_EXTENSION is not set
 # CONFIG_PAGE_OWNER is not set
-# CONFIG_PAGE_POISONING is not set
+CONFIG_PAGE_POISONING=y
+CONFIG_PAGE_POISONING_NO_SANITY=y
+CONFIG_PAGE_POISONING_ZERO=y
 CONFIG_PAGE_TABLE_ISOLATION=y
 # CONFIG_PANIC_ON_OOPS is not set
 CONFIG_PANIC_ON_OOPS_VALUE=0