On Thu, 2018-08-30 at 22:39 +0200, Pavel Machek wrote:

Hi!

quoted

diff --git a/Documentation/admin-guide/kernel-parameters.txt

b/Documentation/admin-guide/kernel-parameters.txt
index 9871e649ffef..b090787188b4 100644

--- a/Documentation/admin-guide/kernel-parameters.txt
+++ b/Documentation/admin-guide/kernel-parameters.txt

@@ -2764,6 +2764,12 @@

 			noexec=on: enable non-executable mappings (default)
 			noexec=off: disable non-executable mappings
 
+	no_cet_ibt	[X86-64] Disable indirect branch tracking for
user-mode
+			applications
+
+	no_cet_shstk	[X86-64] Disable shadow stack support for user-
mode
+			applications

Hmm, not too consistent with "nosmap" below. Would it make sense to
have cet=on/off/ibt/shstk instead?

We also have noxsave, noxsaveopt, noxsaves, etc.  This style is more decisive?
If "cet=" is preferred, we can change it later?

Yu-cheng