Visitar URL original
fix: disable PAGE_TABLE_CHECK_ENFORCED in kernel config · siderolabs/pkgs@54ec9fc · GitHub
Skip to content

Commit 54ec9fc

Browse files
shanduurshanduur
committed
fix: disable PAGE_TABLE_CHECK_ENFORCED in kernel config
Enforced check panics on kernel BUG at mm/page_table_check.c:143 during process cleanup, causing node reboots. Keep CONFIG_PAGE_TABLE_CHECK=y so it stays off by default but opt-in via page_table_check=on cmdline. Refs siderolabs/talos#13496 Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
1 parent 0d5985a commit 54ec9fc

3 files changed

Lines changed: 3 additions & 2 deletions

File tree

‎kernel/build/config-amd64‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7514,7 +7514,7 @@ CONFIG_SLUB_DEBUG=y
75147514
# CONFIG_SLUB_DEBUG_ON is not set
75157515
# CONFIG_PAGE_OWNER is not set
75167516
CONFIG_PAGE_TABLE_CHECK=y
7517-
CONFIG_PAGE_TABLE_CHECK_ENFORCED=y
7517+
# CONFIG_PAGE_TABLE_CHECK_ENFORCED is not set
75187518
CONFIG_PAGE_POISONING=y
75197519
# CONFIG_DEBUG_PAGE_REF is not set
75207520
# CONFIG_DEBUG_RODATA_TEST is not set

‎kernel/build/config-arm64‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10427,7 +10427,7 @@ CONFIG_SLUB_DEBUG=y
1042710427
# CONFIG_SLUB_DEBUG_ON is not set
1042810428
# CONFIG_PAGE_OWNER is not set
1042910429
CONFIG_PAGE_TABLE_CHECK=y
10430-
CONFIG_PAGE_TABLE_CHECK_ENFORCED=y
10430+
# CONFIG_PAGE_TABLE_CHECK_ENFORCED is not set
1043110431
CONFIG_PAGE_POISONING=y
1043210432
# CONFIG_DEBUG_PAGE_REF is not set
1043310433
# CONFIG_DEBUG_RODATA_TEST is not set

‎kernel/build/scripts/filter-hardened-check.py‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,7 @@
3737
'CONFIG_PROC_MEM_NO_FORCE', # might break some applications, so instead we will enforce in the kernel arg 'proc_mem.force_override=never' (https://github.com/a13xp0p0v/kernel-hardening-checker/pull/201)
3838
'CONFIG_GCC_PLUGIN_LATENT_ENTROPY', # doesn't seem very relevant, entropy is low quality, and not available in Clang, https://github.com/torvalds/linux/blob/37a93dd5c49b5fda807fd204edf2547c3493319c/scripts/gcc-plugins/Kconfig#L25-L33
3939
'CONFIG_MODULE_SIG_FORCE', # see https://github.com/siderolabs/talos/issues/11989
40+
'CONFIG_PAGE_TABLE_CHECK_ENFORCED', # enforced check panics with kernel BUG at mm/page_table_check.c:143, off by default but opt-in via page_table_check=on (https://github.com/siderolabs/talos/issues/13496)
4041
}
4142

4243
"""

0 commit comments

Comments
 (0)