[SOLVED] Liquorix kernels don't enable page table isolation?
Is this on purpose? I thought this was supposed to make Linux resistant to the Meltdown vunerability, and is simple to turn off at boot with the "nopti" flag if the user thought they were not vunerable and wanted to avoid any possible slowdown.
Back to top |
|||||
Yes, this was a deliberate configuration choice. Liquorix is a performance kernel that's typically run on single user systems (laptops, desktops, etc), where you choose the software you're running.
However, it's probably best if the user decides to turn off PTI for performance reasons. If I don't, I'll need to put a large disclaimer on the homepage that PTI is disabled so users know to enable to PTI on devices with sensitive material. Thanks for bringing this up, I'll enable it on the next update. [EDIT] Also, just looking at the latest stable update, there's already some bugs they've patched, so maybe not turning it on for the first release with PTI was the correct choice anyway: git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/log/?h=linux-4.14.y [EDIT 2] Link from LWN regarding 4.14.12: lwn.net/Articles/743246/ Back to top |
|||||
What do I need to do to enable PTI?
I added 'pti=on' to my boot parameters in GRUB, but: :: Code :: $ dmesg | grep isoreturns nothing. I"m running 4.14.0-12.1-liquorix-amd64 Back to top |
|||||
It's enabled:
:: Code :: damentz@primus:~$ journalctl -k | grep isolation
Jan 06 14:50:09 primus kernel: Kernel/User page tables isolation: enabled damentz@primus:~$ uname -r 4.14.0-12.1-liquorix-amd64 Maybe your cpu doesn't need it, or didn't update grub? Back to top |
|||||
You also don't need to add any kernel flag to turn it on, only off.
Back to top |
|||||
KPTI enabled by default since 4.14-15, marking thread as SOLVED.
Back to top |
|||||
All times are GMT - 8 Hours
|