X-Git-Url: http://git.samba.org/samba.git/?a=blobdiff_plain;f=security%2FKconfig;h=a623d13bf2884afdc6fdcdbe656811b7d31b2951;hb=1a2e91e795def04e15fac87b8e16b635691d0b82;hp=e8e449444e658be4a9190c6ea2de14cca8fc4890;hpb=1283c6174d919c6ea42fe5781ed0fb3e41bc568c;p=sfrench%2Fcifs-2.6.git

diff --git a/security/Kconfig b/security/Kconfig
index e8e449444e65..a623d13bf288 100644
--- a/security/Kconfig
+++ b/security/Kconfig
@@ -54,6 +54,16 @@ config SECURITY_NETWORK
 	  implement socket and networking access controls.
 	  If you are unsure how to answer this question, answer N.
 
+config PAGE_TABLE_ISOLATION
+	bool "Remove the kernel mapping in user mode"
+	depends on X86_64 && !UML
+	help
+	  This feature reduces the number of hardware side channels by
+	  ensuring that the majority of kernel addresses are not mapped
+	  into userspace.
+
+	  See Documentation/x86/pagetable-isolation.txt for more details.
+
 config SECURITY_INFINIBAND
 	bool "Infiniband Security Hooks"
 	depends on SECURITY && INFINIBAND