RE: [patch RFC 5/5] x86/speculation: Add basic speculation control code

From: Van De Ven, Arjan
Date: Wed Jan 10 2018 - 08:51:40 EST


> So here is the simple list of questions all to be answered with YES or
> NO. I don't want to see any of the 'but, though ...'. We all know by now
> that it's CPU dependent and slow and whatever and that IBRS_ATT will be in
> future CPUs. So get your act together and tell a clear YES or NO.

I will answer for current cpus, so those not having IBRS_ATT
>
> 1) Does IBRS=1 when set once act as a set-and-forget option ?

NO


> 1a) If the answer to #1 is yes, is it more secure than toggling it?

NO
>
> 1b) If the answer to #1 is yes, is retpoline required ?

NO - Once you have IBRS done PROPERLY (toggled) you don't need retpoline
>
> 1c) If the answer to #1 is yes, is RSB stuffing required ?

Only for the VM exit case

>
> 2) Does toggle mode of IBRS require retpoline ?

NO

>
> 3) Does toggle mode of IBRS require RSB stuffing ?

Only for the VM exit case
>
> 4) Exist CPUs which require IBRS to be selected automatically ?

I do not understand your question exactly