Re: [patch V2 27/28] x86/speculation: Add seccomp Spectre v2 user space protection mode

From: Arjan van de Ven
Date: Tue Dec 04 2018 - 04:43:27 EST


On processors with enhanced IBRS support, we recommend setting IBRS to 1
and left set.

Then why doesn't CPU with EIBRS support acutally *default* to '1', with
opt-out possibility for OS?

the BIOSes could indeed get this set up this way.

do you want to trust the bios to get it right?