tboot/tboot-disa-ibt.patch
Tony Camuso 29ef403e24 Update to v1.11.10 and bump nvr to tboot-1.11.10-1
Added tboot-disa-ibt.patch (see RHEL-109479)

Resolves: RHEL-99209

Signed-off-by: Tony Camuso <tcamuso@redhat.com>
2025-09-19 14:58:56 -04:00

13 lines
559 B
Diff

diff -r 5220085b54dd tboot/20_linux_tboot
--- a/tboot/20_linux_tboot Thu Apr 17 08:33:41 2025 -0400
+++ b/tboot/20_linux_tboot Thu Aug 21 09:23:08 2025 -0400
@@ -44,7 +44,7 @@
# Command line for tboot itself
: ${GRUB_CMDLINE_TBOOT='logging=serial,memory,vga'}
# Linux kernel parameters to append for tboot
-: ${GRUB_CMDLINE_LINUX_TBOOT='intel_iommu=on'}
+: ${GRUB_CMDLINE_LINUX_TBOOT='intel_iommu=on ibt=off'}
# Base name of LCP policy data file for list policy
: ${GRUB_TBOOT_POLICY_DATA=''}
# List of SINIT modules to use, glob patterns are supported