On Mon, Nov 11, 2019 at 02:36:34PM +0000, Suzuki K Poulose wrote: > On 08/11/2019 17:01, Mark Brown wrote: > > + /* > > + * E0PD does a similar job to KPTI so can be used instead > > + * where available. This will only run before the cpufeature > s/This will only run/This will run/ ? Both with and without patch 4 we only check this when cpucaps aren't ready - with just this patch this is done in arm64_kernel_use_ng_mappings() where it has a check for caps being ready prior to checking if KASLR requirs KPTI, or otherwise the checks are from the cpufeature code while it's running. With patch 4 it's only called from the cpufeature code or from the early init check.