]> xenbits.xensource.com Git - xen.git/commit
x86: Make "spec-ctrl=no" a global disable of all mitigations
authorJan Beulich <JBeulich@suse.com>
Mon, 13 Aug 2018 11:07:23 +0000 (05:07 -0600)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Tue, 14 Aug 2018 16:16:28 +0000 (17:16 +0100)
commitfac0731d75a918f7540769b58b5e4f44282b07d2
tree548e07aaa3c8a2a594e813543725d40781b76c95
parented933041a8b36bcab65bb09cb2594215de7ac894
x86: Make "spec-ctrl=no" a global disable of all mitigations

In order to have a simple and easy to remember means to suppress all the
more or less recent workarounds for hardware vulnerabilities, force
settings not controlled by "spec-ctrl=" also to their original defaults,
unless they've been forced to specific values already by earlier command
line options.

This is part of XSA-273.

Signed-off-by: Jan Beulich <jbeulich@suse.com>
Acked-by: Andrew Cooper <andrew.cooper3@citrix.com>
(cherry picked from commit d8800a82c3840b06b17672eddee4878bbfdacc6d)
docs/misc/xen-command-line.markdown
xen/arch/x86/spec_ctrl.c