On Thu, Nov 19, 2020 at 12:46 AM Mel Gorman <mgorman@xxxxxxx> wrote: > > And not start thinking it as a security hardening option. It's probably the reverse of a hardening option, since it will cause mapping of stuff in known and controllable virtual addresses. Although any kmap'able page is likely to already be something you can read anyway (ie page cache long after security checks have been done). So it probably really doesn't matter either way. The only thing that is certain is that it's going to slow down important code-paths. Linus