diff options
| author | Xi Ruoyao <xry111@xry111.site> | 2022-09-11 12:01:31 +0800 |
|---|---|---|
| committer | Xi Ruoyao <xry111@xry111.site> | 2022-09-11 12:01:31 +0800 |
| commit | a710d35e1f64684e29b1a1d627be64f495481e13 (patch) | |
| tree | 8b3ee2abd02d11d242d672082828186dbdb7c0d1 /chapter10 | |
| parent | e502de1ab04336007ecfff9e534abdaa9b0344d9 (diff) | |
Revert "linux kernel: disable CONFIG_USERFAULTFD to avoid CVE-2022-2590 for now"
This reverts commit 098f4de3369ae0fc7d50fc6060b059eb5627de4e.
CVE-2022-2590 is fixed in Linux >= 5.19.6.
Diffstat (limited to 'chapter10')
| -rw-r--r-- | chapter10/kernel.xml | 12 |
1 files changed, 0 insertions, 12 deletions
diff --git a/chapter10/kernel.xml b/chapter10/kernel.xml index 157fb9f64..9042f570b 100644 --- a/chapter10/kernel.xml +++ b/chapter10/kernel.xml @@ -159,8 +159,6 @@ File systems ---> <screen role="nodump">Processor type and features ---> [*] Support x2apic [CONFIG_X86_X2APIC] -Memory Management options ---> - [ ] Enable userfaultfd() system call [CONFIG_USERFAULTFD] Device Drivers ---> [*] PCI Support ---> [CONFIG_PCI] [*] Message Signaled Interrupts (MSI and MSI-X) [CONFIG_PCI_MSI] @@ -254,16 +252,6 @@ Device Drivers ---> </listitem> </varlistentry> - <varlistentry> - <term><parameter>Enable userfaultfd() system call</parameter></term> - <listitem> - <para>If this option is enabled, a security vulnerability not - resolved in Linux-&linux-version; yet will be exploitable. - Disable this option to avoid the vulnerability. This system call - is not used by any part of LFS or BLFS.</para> - </listitem> - </varlistentry> - </variablelist> <para>Alternatively, <command>make oldconfig</command> may be more |