From: Alexander Popov <alex.popov@linux.com>
Date: Sat, 28 May 2022 17:42:35 +0000 (+0300)
Subject: Check the pti cmdline parameter
X-Git-Tag: v0.6.1~158^2~3
X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=649272d27202a00b42d8220554d20c9d0d120294;p=kconfig-hardened-check.git

Check the pti cmdline parameter
---

diff --git a/kconfig_hardened_check/__init__.py b/kconfig_hardened_check/__init__.py
index fa06f8e..a2fe794 100644
--- a/kconfig_hardened_check/__init__.py
+++ b/kconfig_hardened_check/__init__.py
@@ -26,7 +26,6 @@
 #           mitigations=auto,nosmt (nosmt is slow)
 #       X86:
 #           spectre_v2=on
-#           pti=on
 #           spec_store_bypass_disable=on
 #           l1tf=full,force
 #           l1d_flush=on (a part of the l1tf option)
@@ -661,6 +660,8 @@ def add_cmdline_checks(l, arch):
     # Calling the CmdlineCheck class constructor:
     #     CmdlineCheck(reason, decision, name, expected)
 
+    if arch in ('X86_64', 'X86_32'):
+        l += [CmdlineCheck('self_protection', 'kspp', 'pti', 'on')]
     # TODO: add other