x86/cet: Remove XEN_SHSTK's dependency on EXPERT

CET-SS hardware is now available from multiple vendors, the feature has
downstream users, and was declared security supported in XSA-398.

Enable it by default.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Reviewed-by: Juergen Gross <jgross@suse.com>
(cherry picked from commit fc90d75c2b71ae15b75128e7d0d4dbe718164ecb)

diff --git a/xen/arch/x86/Kconfig b/xen/arch/x86/Kconfig
index 950deaa0322bc61744afb7ab0e216a696e462e0e..9fe6226a1e24c256fb858cff653e4aa9263d24ad 100644 (file)
--- a/xen/arch/x86/Kconfig
+++ b/xen/arch/x86/Kconfig
@@ -111,7 +111,7 @@ config HVM
 
 config XEN_SHSTK
        bool "Supervisor Shadow Stacks"
-       depends on HAS_AS_CET_SS && EXPERT
+       depends on HAS_AS_CET_SS
        default y
        ---help---
          Control-flow Enforcement Technology (CET) is a set of features in