lkml.org 
[lkml]   [2018]   [Jan]   [3]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH 10/11] retpoline/taint: Taint kernel for missing retpoline in compiler
    On Wed, 3 Jan 2018, Andi Kleen wrote:
    > unwind_init();
    > +
    > +#ifndef RETPOLINE
    > + add_taint(TAINT_NO_RETPOLINE, LOCKDEP_STILL_OK);
    > + pr_warn("No support for retpoline in kernel compiler\n");
    > + pr_warn("Kernel may be vulnerable to data leaks.\n");

    That's blantantly wrong.

    The kernel is not vulnerable to data leaks. The hardware is.

    An that's what the CPU_BUG bit is for. If the mitigation is in place,
    activate the proper feature bit like we did with PTI

    Thanks,

    tglx




    \
     
     \ /
      Last update: 2018-01-04 01:30    [W:2.517 / U:0.572 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site