On Fri, 15 Jun 2018, Juergen Gross wrote: > >> wrong for 64-bit, too, in case the mitigation is disabled at hypervisor > >> level. > > > > If that is indeed possible (is it?), then the check we have in > > pti_check_boottime_disable() is wrong as well. > > No, it isn't. PTI for 32-bit kernels isn't paravirtualized, so it has to > be disabled.
I was talking about this "mitigation disabled at Xen hypervisor level for 64-bit" situation though. -- Jiri Kosina SUSE Labs