Re: [PATCH 1/1] x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl

[Kees Cook]

On Wed, Nov 04, 2020 at 06:50:54PM -0500, Andrea Arcangeli wrote:
> Switch the kernel default of SSBD and STIBP to the ones with
> CONFIG_SECCOMP=n (i.e. spec_store_bypass_disable=prctl
> spectre_v2_user=prctl) even if CONFIG_SECCOMP=y.

Hello x86 maintainers!

I'd really like to get this landed, so I'll take this via the
seccomp-tree unless someone else speaks up. This keeps falling off
the edge of my TODO list. :)

-Kees

-- 
Kees Cook