Changeset 83b8644

Timestamp:

08/24/2022 08:42:48 AM (20 months ago)

Author:

Xi Ruoyao <xry111@…>

Branches:

11.2, 11.3, 11.3-rc1, 12.0, 12.0-rc1, 12.1, 12.1-rc1, bdubbs/gcc13, multilib, renodr/libudev-from-systemd, trunk, xry111/arm64, xry111/arm64-12.0, xry111/clfs-ng, xry111/loongarch, xry111/loongarch-12.0, xry111/loongarch-12.1, xry111/mips64el, xry111/pip3, xry111/rust-wip-20221008, xry111/update-glibc

Children:

098f4de

Parents:

20007e5

git-author:

Xi Ruoyao <xry111@…> (08/24/2022 08:25:19 AM)

git-committer:

Xi Ruoyao <xry111@…> (08/24/2022 08:42:48 AM)

Message:

linux kernel: enable CONFIG_X86_X2APIC

It's recommended for CVE-2022-21233 mitigation. And, if the BIOS has
enabled x2APIC but CONFIG_X86_X2APIC=n, the kernel will panic on boot.

If x2APIC is disabled or not available, the kernel with
CONFIG_X86_X2APIC=y can still boot normally.

No need to tag anything again because interrupt handling cannot affect
userspace.

File:

• chapter10/kernel.xml (modified) (2 diffs)

chapter10/kernel.xml

@@ -150 +150 @@
        Pseudo filesystems  --->
         [*] Tmpfs POSIX Access Control Lists [CONFIG_TMPFS_POSIX_ACL]</screen>
+
+      <para>Enable some additional features if you are building a 64-bit
+      system.  If you are using menuconfig, enable them in the order of
+      <parameter>CONFIG_PCI_MSI</parameter> first, then
+      <parameter>CONFIG_IRQ_REMAP</parameter>, at last
+      <parameter>CONFIG_X86_X2APIC</parameter> because an option only
+      shows up after its dependencies are selected.</para>
+
+      <screen role="nodump">Processor type and features ---&gt;
+  [*] Support x2apic [CONFIG_X86_X2APIC]
+Device Drivers ---&gt;
+  [*] PCI Support ---&gt; [CONFIG_PCI]
+    [*] Message Signaled Interrupts (MSI and MSI-X) [CONFIG_PCI_MSI]
+  [*] IOMMU Hardware Support ---&gt; [CONFIG_IOMMU_SUPPORT]
+    [*] Support for Interrupt Remapping [CONFIG_IRQ_REMAP]</screen>
     </note>
 
@@ -223 +238 @@
           upon switching to root filesystem just before starting
           init.</para>
+        </listitem>
+      </varlistentry>
+
+      <varlistentry>
+        <term><parameter>Support x2apic</parameter></term>
+        <listitem>
+          <para>Avoid a kernel panic booting on a system with x2APIC enabled
+          by the BIOS.  This option does no harm if x2APIC is not enabled
+          or not available, but it's recommended to enable x2APIC in the
+          BIOS setting for a modern 64-bit x86 system.</para>
         </listitem>
       </varlistentry>