From mboxrd@z Thu Jan 1 00:00:00 1970 From: Andrew Cooper Subject: Re: [PATCH v2] x86: re-enable NX if disabled Date: Wed, 9 Dec 2015 15:03:23 +0000 Message-ID: <566842BB.2060805@citrix.com> References: <56684DF402000078000BDB1C@prv-mh.provo.novell.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Received: from mail6.bemta4.messagelabs.com ([85.158.143.247]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1a6gHe-0000TO-El for xen-devel@lists.xenproject.org; Wed, 09 Dec 2015 15:03:58 +0000 In-Reply-To: <56684DF402000078000BDB1C@prv-mh.provo.novell.com> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xen.org Errors-To: xen-devel-bounces@lists.xen.org To: Jan Beulich , xen-devel Cc: Keir Fraser List-Id: xen-devel@lists.xenproject.org On 09/12/15 14:51, Jan Beulich wrote: > I noticed Linux 4.4 doing this universally now, and I think it's a good > idea to override such anti-security BIOS settings (we certainly have no > compatibility problem due to NX being enabled). > > Secondary changes: > - no need to check supported extended CPUID level for leaves 80000000 > and 80000001 (required on x86-64) > - no need to update c->cpuid_level in early_init_intel() (done anyway > in generic_identify()) > - alignment of trampoline data items > > Signed-off-by: Jan Beulich Reviewed-by: Andrew Cooper