Project

General

Profile

Feature #15329

Ensure we benefit from security features introduced in Linux 4.15

Added by intrigeri over 1 year ago. Updated over 1 year ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
-
Target version:
Start date:
02/19/2018
Due date:
% Done:

100%

Feature Branch:
feature/15309-linux-4.15
Type of work:
Research
Blueprint:
Starter:
Affected tool:


Related issues

Blocked by Tails - Feature #15309: Upgrade to Linux 4.15 Resolved 02/13/2018

History

#1 Updated by intrigeri over 1 year ago

  • Status changed from Confirmed to In Progress
  • Assignee changed from intrigeri to bertagaz
  • % Done changed from 0 to 100
  • QA Check set to Ready for QA
  • Feature Branch set to feature/15309-linux-4.15

The new stuff is enabled for everyone (without config settings) so there's nothing to be done here.

#2 Updated by intrigeri over 1 year ago

#3 Updated by bertagaz over 1 year ago

intrigeri wrote:

https://outflux.net/blog/archives/2018/02/05/security-things-in-linux-v4-15/

In this above link I see PTI entered 4.15. Did you consider it? Other than that #15329#note-1 seems true for #15000 feature, so I see no reasons not to close this ticket.

#4 Updated by bertagaz over 1 year ago

  • Assignee changed from bertagaz to intrigeri
  • QA Check changed from Ready for QA to Info Needed

#5 Updated by intrigeri over 1 year ago

  • Assignee changed from intrigeri to bertagaz
  • QA Check changed from Info Needed to Ready for QA

Sorry for not making this explicit. Adding KPTI support was the reason why we released the Tails 3.4 emergency release so we've had it for a while already:

$ grep '^CONFIG_PAGE_TABLE_ISOLATION=' /boot/config-4.14.0-3-amd64 
CONFIG_PAGE_TABLE_ISOLATION=y

#6 Updated by bertagaz over 1 year ago

  • Status changed from In Progress to Fix committed
  • Assignee deleted (bertagaz)
  • QA Check changed from Ready for QA to Pass

Did not think to look if it was already activated or not, sorry. So #15309 has been merged into devel, let say we're good here.

#7 Updated by bertagaz over 1 year ago

  • Status changed from Fix committed to Resolved

Also available in: Atom PDF