Re: [Patch v6 12/16] x86/speculation: Add 'seccomp' Spectre v2 app to app protection mode

2018-11-20 Thread Tim Chen
On 11/20/2018 04:44 PM, Jiri Kosina wrote: > On Tue, 20 Nov 2018, Tim Chen wrote: > >> diff --git a/Documentation/admin-guide/kernel-parameters.txt >> b/Documentation/admin-guide/kernel-parameters.txt >> index d2255f7..89b193c 100644 >> --- a/Documentation/admin-guide/kernel-parameters.txt >>

Re: [Patch v6 12/16] x86/speculation: Add 'seccomp' Spectre v2 app to app protection mode

2018-11-20 Thread Tim Chen
On 11/20/2018 04:44 PM, Jiri Kosina wrote: > On Tue, 20 Nov 2018, Tim Chen wrote: > >> diff --git a/Documentation/admin-guide/kernel-parameters.txt >> b/Documentation/admin-guide/kernel-parameters.txt >> index d2255f7..89b193c 100644 >> --- a/Documentation/admin-guide/kernel-parameters.txt >>

Re: [Patch v6 12/16] x86/speculation: Add 'seccomp' Spectre v2 app to app protection mode

2018-11-20 Thread Jiri Kosina
On Tue, 20 Nov 2018, Tim Chen wrote: > diff --git a/Documentation/admin-guide/kernel-parameters.txt > b/Documentation/admin-guide/kernel-parameters.txt > index d2255f7..89b193c 100644 > --- a/Documentation/admin-guide/kernel-parameters.txt > +++ b/Documentation/admin-guide/kernel-parameters.txt

Re: [Patch v6 12/16] x86/speculation: Add 'seccomp' Spectre v2 app to app protection mode

2018-11-20 Thread Jiri Kosina
On Tue, 20 Nov 2018, Tim Chen wrote: > diff --git a/Documentation/admin-guide/kernel-parameters.txt > b/Documentation/admin-guide/kernel-parameters.txt > index d2255f7..89b193c 100644 > --- a/Documentation/admin-guide/kernel-parameters.txt > +++ b/Documentation/admin-guide/kernel-parameters.txt

[Patch v6 12/16] x86/speculation: Add 'seccomp' Spectre v2 app to app protection mode

2018-11-20 Thread Tim Chen
From: Jiri Kosina From: Jiri Kosina If 'prctl' mode of app2app protection from spectre_v2 is selected on kernel command-line, we are currently applying STIBP protection to tasks that restrict their indirect branch speculation via prctl(PR_SET_SPECULATION_CTRL, PR_SPEC_INDIR_BRANCH,

[Patch v6 12/16] x86/speculation: Add 'seccomp' Spectre v2 app to app protection mode

2018-11-20 Thread Tim Chen
From: Jiri Kosina From: Jiri Kosina If 'prctl' mode of app2app protection from spectre_v2 is selected on kernel command-line, we are currently applying STIBP protection to tasks that restrict their indirect branch speculation via prctl(PR_SET_SPECULATION_CTRL, PR_SPEC_INDIR_BRANCH,