Re: [Patch v6 00/16] Provide task property based options to enable Spectre v2 userspace-userspace protection

From: Tim Chen
Date: Tue Nov 20 2018 - 19:44:34 EST


On 11/20/2018 03:59 PM, Tim Chen wrote:
> Fix in this version bugs causing build problems for UP configuration.
>
> Also merged in Jiri's change to extend STIBP for SECCOMP processes and
> renaming TIF_STIBP to TIF_SPEC_INDIR_BRANCH.
>
> I've updated the boot options spectre_v2_app2app to
> on, off, auto, prctl and seccomp. This aligns with
> the options for other speculation related mitigations.
>
> I tried to incorporate sched_smt_present to detect when we have all SMT
> going offline and we can disable the SMT path, which Peter suggested.
> This optimization that can be easily left out of the patch series and
> not backported. I've put these two patches at the end and they can be
> considered separately.
>
> I've dropped the TIF flags re-organization patches
> as they are not needed in this patch series.
>
> To do: Create a dedicated document on the mitigation options for Spectre V2.
>

My apology that the v6 patch series is missing the first two patches
in the series. Please ignore v6 and resending the patch series as v7.

Tim