[SOLVED] Liquorix kernels don't enable page table isolation?
stevenpusser
Status: Contributor
Joined: 14 Jan 2017
Posts: 89
Reply Quote
Is this on purpose? I thought this was supposed to make Linux resistant to the Meltdown vunerability, and is simple to turn off at boot with the "nopti" flag if the user thought they were not vunerable and wanted to avoid any possible slowdown.
Back to top
damentz
Status: Assistant
Joined: 09 Sep 2008
Posts: 1122
Reply Quote
Yes, this was a deliberate configuration choice. Liquorix is a performance kernel that's typically run on single user systems (laptops, desktops, etc), where you choose the software you're running.

However, it's probably best if the user decides to turn off PTI for performance reasons. If I don't, I'll need to put a large disclaimer on the homepage that PTI is disabled so users know to enable to PTI on devices with sensitive material.

Thanks for bringing this up, I'll enable it on the next update.

[EDIT]
Also, just looking at the latest stable update, there's already some bugs they've patched, so maybe not turning it on for the first release with PTI was the correct choice anyway: git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/log/?h=linux-4.14.y

[EDIT 2]
Link from LWN regarding 4.14.12: lwn.net/Articles/743246/
Back to top
danboyd
Status: New User - Welcome
Joined: 09 Jan 2018
Posts: 1
Reply Quote
What do I need to do to enable PTI?

I added 'pti=on' to my boot parameters in GRUB, but:

:: Code ::
$ dmesg | grep iso


returns nothing.

I"m running 4.14.0-12.1-liquorix-amd64
Back to top
damentz
Status: Assistant
Joined: 09 Sep 2008
Posts: 1122
Reply Quote
It's enabled:

:: Code ::
damentz@primus:~$ journalctl -k | grep isolation
Jan 06 14:50:09 primus kernel: Kernel/User page tables isolation: enabled
damentz@primus:~$ uname -r
4.14.0-12.1-liquorix-amd64


Maybe your cpu doesn't need it, or didn't update grub?
Back to top
stevenpusser
Status: Contributor
Joined: 14 Jan 2017
Posts: 89
Reply Quote
You also don't need to add any kernel flag to turn it on, only off.
Back to top
damentz
Status: Assistant
Joined: 09 Sep 2008
Posts: 1122
Reply Quote
KPTI enabled by default since 4.14-15, marking thread as SOLVED.
Back to top
Display posts from previous:   

All times are GMT - 8 Hours