From 2f2943e99c601f59290e3d1c8bc5a43065d83f93 Mon Sep 17 00:00:00 2001
From: Michael Ellerman <mpe@ellerman.id.au>
Date: Tue, 16 Jan 2018 13:53:25 +0530
Subject: [PATCH 19/26] UBUNTU: SAUCE: rfi-flush: Mark DEBUG_RFI as BROKEN

CVE-2017-5754

This is debug code, not fit for distros to enabled, so make that
clearer.

Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
---
 arch/powerpc/Kconfig.debug | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/arch/powerpc/Kconfig.debug b/arch/powerpc/Kconfig.debug
index 418c38d..b3fd0f9 100644
--- a/arch/powerpc/Kconfig.debug
+++ b/arch/powerpc/Kconfig.debug
@@ -365,7 +365,7 @@ config FAIL_IOMMU
 
 config PPC_DEBUG_RFI
 	bool "Debug RFIs (Return From Interrupt)"
-	depends on PPC_BOOK3S_64
+	depends on PPC_BOOK3S_64 && BROKEN
 	help
 	  The enables extra debug code in some RFI (Return From Interrupt)
 	  sequences, to detect that we are returning to the correct context
-- 
2.7.4

