Per-task PTI

Posted Jan 14, 2018 12:32 UTC (Sun) by nix (subscriber, #2304)
In reply to: Per-task PTI by corbet
Parent article: The current state of kernel page-table isolation

This would presumably also mean we could do the inverse, and turn it off for everything other than network-facing programs and things like web browsers, much like many non-hardened distros do for things like sendmail and chromium now.