On Thu, Jan 4, 2018 at 3:08 PM, Subsentient <subsentient(a)universe2.us>
wrote:
Hi, I'm surprised you haven't done so already, but you need
to enable
kernel/page table isolation in the i686 kernel immediately!
config PAGE_TABLE_ISOLATION
bool "Remove the kernel mapping in user
mode"
default y
depends on X86_64 && !UML
The code to do so doesn't exist. I am sure upstream would be happy to take
the code if it did.
i686 is also vulnerable to the Meltdown and Spectre flaws in Intel
CPUs,
all Intel CPUs past 1995 are!
It is, but there is still a lot of work upstream happening. If and when
32bit i686 patches are merged, we will turn it on.
Justin