]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c5a34ee) | patch
x86/speculation: Make "seccomp" the default mode for Speculative Store Bypass
authorKees Cook <keescook@chromium.org>
Thu, 3 May 2018 21:37:54 +0000 (14:37 -0700)
committerThomas Gleixner <tglx@linutronix.de>
Fri, 4 May 2018 22:51:45 +0000 (00:51 +0200)
commit8c8a1746837aab241d659b656f4124c6dc43d9ec
tree56c873b4f7dc9b7561858f8e7e4a6bfc2ba8eeebtree | snapshot
parentc5a34eebd861543846f856e05d7cd19e8dde9eedcommit | diff
x86/speculation: Make "seccomp" the default mode for Speculative Store Bypass

Unless explicitly opted out of, anything running under seccomp will have
SSB mitigations enabled. Choosing the "prctl" mode will disable this.

[ tglx: Adjusted it to the new arch_seccomp_spec_mitigate() mechanism ]

Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Documentation/admin-guide/kernel-parameters.txt diff | blob | history
arch/x86/include/asm/nospec-branch.h diff | blob | history
arch/x86/kernel/cpu/bugs.c diff | blob | history
Linux Kernel Source Tree.