On Thu, 2018-08-30 at 22:39 +0200, Pavel Machek wrote: > Hi! > > > > > diff --git a/Documentation/admin-guide/kernel-parameters.txt > > b/Documentation/admin-guide/kernel-parameters.txt > > index 9871e649ffef..b090787188b4 100644 > > --- a/Documentation/admin-guide/kernel-parameters.txt > > +++ b/Documentation/admin-guide/kernel-parameters.txt > > @@ -2764,6 +2764,12 @@ > > noexec=on: enable non-executable mappings (default) > > noexec=off: disable non-executable mappings > > > > + no_cet_ibt [X86-64] Disable indirect branch tracking for > > user-mode > > + applications > > + > > + no_cet_shstk [X86-64] Disable shadow stack support for user- > > mode > > + applications > Hmm, not too consistent with "nosmap" below. Would it make sense to > have cet=on/off/ibt/shstk instead? We also have noxsave, noxsaveopt, noxsaves, etc. This style is more decisive? If "cet=" is preferred, we can change it later? Yu-cheng