Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Message-ID: <95f4416d-854e-c91d-c401-2ef9488d83ba@infradead.org>
Date:   Mon, 19 Jun 2023 14:43:47 -0700
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101
 Thunderbird/102.11.2
Subject: Re: [PATCH v3 1/5] x86: Make IA32_EMULATION boot time configurable
Content-Language: en-US
To:     Nikolay Borisov <nik.borisov@suse.com>, x86@kernel.org
Cc:     linux-kernel@vger.kernel.org, mhocko@suse.com, jslaby@suse.cz
References: <20230616125730.1164989-1-nik.borisov@suse.com>
 <20230616125730.1164989-2-nik.borisov@suse.com>
From:   Randy Dunlap <rdunlap@infradead.org>
In-Reply-To: <20230616125730.1164989-2-nik.borisov@suse.com>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Precedence: bulk


On 6/16/23 05:57, Nikolay Borisov wrote:
> diff --git a/arch/x86/Kconfig b/arch/x86/Kconfig
> index 53bab123a8ee..8bec431c97ce 100644
> --- a/arch/x86/Kconfig
> +++ b/arch/x86/Kconfig
> @@ -3038,6 +3038,15 @@ config IA32_EMULATION
>  	  64-bit kernel. You should likely turn this on, unless you're
>  	  100% sure that you don't have any 32-bit programs left.
>  
> +config IA32_EMULATION_DEFAULT_DISABLED
> +	bool "IA32 emulation disabled by default"
> +	default n
> +	depends on IA32_EMULATION
> +	help
> +	  Make IA32 emulation disabled by default. This prevents loading 32bit

	                                                                 32-bit

> +	  processes and access to 32bit syscalls. If unsure, leave it to its

	                          32-bit

> +	  default value.

-- 
~Randy