Imho we must enabled it, especially for Oracle, since compute nodes may be shared between multiple tenants.
It would be also interesting to check if the hardware used with this kernel does not have errata / issues discussed in https://www.spinics.net/lists/arm-kernel/msg788470.html i.e. that it disables this protection anyway. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux-oracle in Ubuntu. https://bugs.launchpad.net/bugs/1938748 Title: test_320_config_arm_pan from ubuntu_qrt_kernel_security failed on F-oracle-5.4 / H-oracle-5.11 ARM64 Status in QA Regression Testing: New Status in ubuntu-kernel-tests: New Status in linux-oracle package in Ubuntu: New Status in linux-oracle source package in Focal: New Status in linux-oracle source package in Hirsute: New Bug description: Issue found on 5.11.0-1015.16~20.04.1 with instance VM.Standard.A1.Flex-4c.8m ====================================================================== FAIL: test_320_config_arm_pan (__main__.KernelSecurityConfigTest) Ensure PAN for arm processors is set ---------------------------------------------------------------------- Traceback (most recent call last): File "./test-kernel-security.py", line 2756, in test_320_config_arm_pan self.assertKernelConfig(config_name, expected) File "./test-kernel-security.py", line 214, in assertKernelConfig self.assertKernelConfigSet(name) File "./test-kernel-security.py", line 201, in assertKernelConfigSet '%s option was expected to be set in the kernel config' % name) AssertionError: ARM64_SW_TTBR0_PAN option was expected to be set in the kernel config ---------------------------------------------------------------------- Ran 125 tests in 26.030s FAILED (failures=1) To manage notifications about this bug go to: https://bugs.launchpad.net/qa-regression-testing/+bug/1938748/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
