5.5.1.arch1-1: Enable INTEL_IOMMU_DEFAULT_ON

IOMMU is important for security in systems using PCI bridges (e.g.
Thunderbolt, USB4) or other means of DMA from potentially untrusted
devices (e.g. FireWire). It's also used to safely pass devices into VMs.

Enable it by default. It can still be disabled at boot using
intel_iommu=off. intel_iommu=igfx_off is also available to exclude just
the iGPU.
This commit is contained in:
Jan Alexander Steffens
2020-02-01 17:53:24 +00:00
parent 727d1e1d47
commit 5c532afbaa
2 changed files with 4 additions and 4 deletions

4
config
View File

@@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
# Linux/x86 5.5.0-arch1 Kernel Configuration
# Linux/x86 5.5.1-arch1 Kernel Configuration
#
#
@@ -8693,7 +8693,7 @@ CONFIG_AMD_IOMMU_V2=y
CONFIG_DMAR_TABLE=y
CONFIG_INTEL_IOMMU=y
CONFIG_INTEL_IOMMU_SVM=y
# CONFIG_INTEL_IOMMU_DEFAULT_ON is not set
CONFIG_INTEL_IOMMU_DEFAULT_ON=y
CONFIG_INTEL_IOMMU_FLOPPY_WA=y
CONFIG_IRQ_REMAP=y
CONFIG_HYPERV_IOMMU=y