do I need Intel User Mode Instruction Prevention (UMIP)

pan64 · 05-24-2021, 05:01 AM

Hi all,
in journalctl I see a lot of lines like this:

Quote:

x86/cpu: Activated the Intel User Mode Instruction Prevention (UMIP) CPU feature

Do I need it on an AMD Ryzen 3900x CPU? Can I disable it somehow?

business_kid · 05-24-2021, 09:14 AM

To judge by this you do if you have an Intel CPU. It's kind of over my head as a hardware geek, but I gather it prevents container-type things with privileges getting out of their boxes and changing settings system-wide. Seems like a good idea. It only seems to apply to Intel cpus, so if you're running AMD, you could disable it. In fact, if you don't have a new Intel cpu, you could disable it.