To enable Kernel page-table isolation,
add the argument pti=on
to the default
GRUB 2 command line for the Linux operating system.
To ensure that pti=on
is added as a kernel command line
argument to newly installed kernels, add pti=on
to the
default Grub2 command line for Linux operating systems. Modify the line within
/etc/default/grub
as shown below:
GRUB_CMDLINE_LINUX="... pti=on ..."
Run the following command to update command line for already installed kernels:# grubby --update-kernel=ALL --args="pti=on"