From: Alexander Popov <alex.popov@linux.com>
Date: Fri, 20 Mar 2020 19:56:22 +0000 (+0300)
Subject: KSPP now recommends PAGE_TABLE_ISOLATION for X86_32
X-Git-Tag: v0.5.5~6
X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=b66e0ce2796947670b2dc15ad28f5fdc8164e82e;p=kconfig-hardened-check.git

KSPP now recommends PAGE_TABLE_ISOLATION for X86_32
---

diff --git a/kconfig-hardened-check.py b/kconfig-hardened-check.py
index 6056f62..197d82e 100755
--- a/kconfig-hardened-check.py
+++ b/kconfig-hardened-check.py
@@ -310,6 +310,7 @@ def construct_checklist(checklist, arch):
     if arch == 'X86_64' or arch == 'X86_32':
         checklist.append(OptCheck('DEFAULT_MMAP_MIN_ADDR',            '65536', 'kspp', 'self_protection'))
     if arch == 'X86_32':
+        checklist.append(OptCheck('PAGE_TABLE_ISOLATION',             'y', 'kspp', 'self_protection'))
         checklist.append(OptCheck('HIGHMEM64G',                       'y', 'kspp', 'self_protection'))
         checklist.append(OptCheck('X86_PAE',                          'y', 'kspp', 'self_protection'))
     if arch == 'ARM64':
@@ -340,8 +341,6 @@ def construct_checklist(checklist, arch):
     if arch == 'X86_64':
         checklist.append(AND(OptCheck('AMD_IOMMU_V2',                   'y', 'my', 'self_protection'), \
                              iommu_support_is_set))
-    if arch == 'X86_32':
-        checklist.append(OptCheck('PAGE_TABLE_ISOLATION',               'y', 'my', 'self_protection'))
 
     if arch == 'X86_64' or arch == 'ARM64' or arch == 'X86_32':
         checklist.append(OptCheck('SECURITY',                               'y', 'defconfig', 'security_policy')) # and choose your favourite LSM