lkml.org 
[lkml]   [2018]   [Nov]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [Patch v6 12/16] x86/speculation: Add 'seccomp' Spectre v2 app to app protection mode
    On Tue, 20 Nov 2018, Tim Chen wrote:

    > diff --git a/Documentation/admin-guide/kernel-parameters.txt b/Documentation/admin-guide/kernel-parameters.txt
    > index d2255f7..89b193c 100644
    > --- a/Documentation/admin-guide/kernel-parameters.txt
    > +++ b/Documentation/admin-guide/kernel-parameters.txt
    > @@ -4227,12 +4227,17 @@
    > and STIBP mitigations against Spectre V2 attacks.
    > If the CPU is not vulnerable, "off" is selected.
    > If the CPU is vulnerable, the default mitigation
    > - is "prctl".
    > + is architecture and Kconfig dependent. See below.
    > prctl - Enable mitigations per thread by restricting
    > indirect branch speculation via prctl.
    > Mitigation for a thread is not enabled by default to
    > avoid mitigation overhead. The state of
    > of the control is inherited on fork.
    > + seccomp - Same as "prctl" above, but all seccomp threads
    > + will disable SSB unless they explicitly opt out.

    As Dave already pointed out elsewhere -- the "SSB" here is probably a
    copy/paste error. It should read something along the lines of "... will
    restrict indirect branch speculation ..."

    Thanks,

    --
    Jiri Kosina
    SUSE Labs

    \
     
     \ /
      Last update: 2018-11-21 01:45    [W:4.735 / U:0.744 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site