enable KPTI

diff --git a/Makefile b/Makefile
index bce15b6cbda55cc3647cf204f36d62116c5ae959..7e3e78e67d52e9d5cca72f7d458416bf63d5041e 100644 (file)
--- a/Makefile
+++ b/Makefile
@@ -223,7 +223,8 @@ PVE_CONFIG_OPTS= \
 --set-str CONFIG_DEFAULT_SECURITY apparmor \
 -d CONFIG_UNWINDER_ORC \
 -d CONFIG_UNWINDER_GUESS \
--e CONFIG_UNWINDER_FRAME_POINTER
+-e CONFIG_UNWINDER_FRAME_POINTER \
+-e CONFIG_PAGE_TABLE_ISOLATION
 
 .compile_mark: ${KERNEL_SRC}/README ${KERNEL_CFG_ORG}
        [ ! -e /lib/modules/${KVNAME}/build ] || (echo "please remove /lib/modules/${KVNAME}/build" && false)