enable KPTI

This commit is contained in:
Fabian Grünbichler 2018-01-06 00:48:46 +01:00
parent e414beae5f
commit 6ecf746bac

View File

@ -223,7 +223,8 @@ PVE_CONFIG_OPTS= \
--set-str CONFIG_DEFAULT_SECURITY apparmor \ --set-str CONFIG_DEFAULT_SECURITY apparmor \
-d CONFIG_UNWINDER_ORC \ -d CONFIG_UNWINDER_ORC \
-d CONFIG_UNWINDER_GUESS \ -d CONFIG_UNWINDER_GUESS \
-e CONFIG_UNWINDER_FRAME_POINTER -e CONFIG_UNWINDER_FRAME_POINTER \
-e CONFIG_PAGE_TABLE_ISOLATION
.compile_mark: ${KERNEL_SRC}/README ${KERNEL_CFG_ORG} .compile_mark: ${KERNEL_SRC}/README ${KERNEL_CFG_ORG}
[ ! -e /lib/modules/${KVNAME}/build ] || (echo "please remove /lib/modules/${KVNAME}/build" && false) [ ! -e /lib/modules/${KVNAME}/build ] || (echo "please remove /lib/modules/${KVNAME}/build" && false)