This is a note to let you know that I've just added the patch titled KPTI: Report when enabled to the 4.4-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary The filename of the patch is: kpti-report-when-enabled.patch and it can be found in the queue-4.4 subdirectory. If you, or anyone else, feels it should not be added to the stable tree, please let <stable@xxxxxxxxxxxxxxx> know about it. >From keescook@xxxxxxxxxxxx Wed Jan 3 20:49:35 2018 From: Kees Cook <keescook@xxxxxxxxxxxx> Date: Wed, 3 Jan 2018 10:43:32 -0800 Subject: KPTI: Report when enabled To: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx> Message-ID: <20180103184332.GA18888@beast> Content-Disposition: inline From: Kees Cook <keescook@xxxxxxxxxxxx> Make sure dmesg reports when KPTI is enabled. Signed-off-by: Kees Cook <keescook@xxxxxxxxxxxx> Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> --- arch/x86/mm/kaiser.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) --- a/arch/x86/mm/kaiser.c +++ b/arch/x86/mm/kaiser.c @@ -11,6 +11,9 @@ #include <linux/uaccess.h> #include <linux/ftrace.h> +#undef pr_fmt +#define pr_fmt(fmt) "Kernel/User page tables isolation: " fmt + #include <asm/kaiser.h> #include <asm/tlbflush.h> /* to verify its kaiser declarations */ #include <asm/pgtable.h> @@ -293,7 +296,7 @@ enable: return; disable: - pr_info("Kernel/User page tables isolation: disabled\n"); + pr_info("disabled\n"); silent_disable: kaiser_enabled = 0; @@ -353,6 +356,8 @@ void __init kaiser_init(void) kaiser_add_user_map_early(&debug_idt_table, sizeof(gate_desc) * NR_VECTORS, __PAGE_KERNEL); + + pr_info("enabled\n"); } /* Add a mapping to the shadow mapping, and synchronize the mappings */ Patches currently in stable-queue which might be from keescook@xxxxxxxxxxxx are queue-4.4/kpti-rename-to-page_table_isolation.patch queue-4.4/kpti-report-when-enabled.patch