Date: Saturday, February 1, 2020 @ 17:53:24 Author: heftig Revision: 374458
5.5.1.arch1-1: Enable INTEL_IOMMU_DEFAULT_ON IOMMU is important for security in systems using PCI bridges (e.g. Thunderbolt, USB4) or other means of DMA from potentially untrusted devices (e.g. FireWire). It's also used to safely pass devices into VMs. Enable it by default. It can still be disabled at boot using intel_iommu=off. intel_iommu=igfx_off is also available to exclude just the iGPU. Modified: linux/trunk/PKGBUILD linux/trunk/config ----------+ PKGBUILD | 4 ++-- config | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) Modified: PKGBUILD =================================================================== --- PKGBUILD 2020-02-01 17:52:35 UTC (rev 374457) +++ PKGBUILD 2020-02-01 17:53:24 UTC (rev 374458) @@ -1,7 +1,7 @@ # Maintainer: Jan Alexander Steffens (heftig) <[email protected]> pkgbase=linux -pkgver=5.5.arch1 +pkgver=5.5.1.arch1 pkgrel=1 pkgdesc='Linux' _srctag=v${pkgver%.*}-${pkgver##*.} @@ -25,7 +25,7 @@ '8218F88849AAC522E94CF470A5E9288C4FA415FA' # Jan Alexander Steffens (heftig) ) sha256sums=('SKIP' - 'e967ac8bd663509cc0ca6451a95a9965eb59832e316eec77484960dcedec8c1c') + '63141b88e5ffb583617d51364ebc1378fd3a73b8352e13450e982851d40fbaf2') export KBUILD_BUILD_HOST=archlinux export KBUILD_BUILD_USER=$pkgbase Modified: config =================================================================== --- config 2020-02-01 17:52:35 UTC (rev 374457) +++ config 2020-02-01 17:53:24 UTC (rev 374458) @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 5.5.0-arch1 Kernel Configuration +# Linux/x86 5.5.1-arch1 Kernel Configuration # # @@ -8693,7 +8693,7 @@ CONFIG_DMAR_TABLE=y CONFIG_INTEL_IOMMU=y CONFIG_INTEL_IOMMU_SVM=y -# CONFIG_INTEL_IOMMU_DEFAULT_ON is not set +CONFIG_INTEL_IOMMU_DEFAULT_ON=y CONFIG_INTEL_IOMMU_FLOPPY_WA=y CONFIG_IRQ_REMAP=y CONFIG_HYPERV_IOMMU=y
