PTI checkbox wording can be confusing, should give a little more detail and show current PTI status
Now that there are Intel CPUs in the wild unaffected by Meltdown, PTI may default to disabled in cases where it is not clear to the user what is happening. The checkbox on system_advanced_misc.php implies that unchecked=on, checked=off, but in reality the option only forces it off, there is no way to force it on.
The wording of the message should also include that it requires a reboot to activate.
#2 Updated by James Dekker over 1 year ago
Tested on 2.4.5.a.20181011.0014, text for Kernel PTI now reads:
Forcefully disable the kernel PTI Meltdown workaround. If disabled the kernel memory can be accessed by unprivileged users on affected CPUs. This option forces the workaround off, and requires a reboot to activate. PTI is active by default only on affected CPUs, if PTI is disabled by default then this option will have no effect. Current PTI status: Enabled
Before it was:
Disable the kernel PTI Meltdown workaround. If disabled the kernel memory can be accessed by unprivileged users on affected CPUs.