Re: [Patch v6 14/16] x86/speculation: Use STIBP to restrict speculation on non-dumpable task
From: Linus Torvalds
Date: Wed Nov 21 2018 - 14:32:40 EST
On Wed, Nov 21, 2018 at 9:41 AM Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx> wrote:
>
> When STIBP is on, it will prevent not only untrusted code from attacking,
> but also trusted code from getting attacked. So non-dumpable task running
> with STIBP will protect itself from attacks from code running on sibling CPU.
I understand.
You didn't read my email about why "dumpable" is not sensible.
Linus