Re: [PATCH 1/1] x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl

[Kees Cook]

On Mon, Oct 04, 2021 at 10:54:31AM -0700, Josh Poimboeuf wrote:
> On Sat, Sep 11, 2021 at 07:01:40PM -0700, Josh Poimboeuf wrote:
> > 
> > 
> > > On Sep 11, 2021, at 2:13 PM, Kees Cook <keescook@xxxxxxxxxxxx> wrote:
> > > 
> > > On Wed, Nov 04, 2020 at 06:50:54PM -0500, Andrea Arcangeli wrote:
> > >> Switch the kernel default of SSBD and STIBP to the ones with
> > >> CONFIG_SECCOMP=n (i.e. spec_store_bypass_disable=prctl
> > >> spectre_v2_user=prctl) even if CONFIG_SECCOMP=y.
> > > 
> > > Hello x86 maintainers!
> > > 
> > > I'd really like to get this landed, so I'll take this via the
> > > seccomp-tree unless someone else speaks up. This keeps falling off
> > > the edge of my TODO list. :)
> > 
> > Thanks!  You can add my
> > 
> > Acked-by: Josh Poimboeuf <jpoimboe@xxxxxxxxxx>
> 
> Hi Kees,
> 
> Ping - I don't see this patch in linux-next.  Are you planning on grabbing this
> for the next merge window?

Thanks for the reminder! I've pushed this to the seccomp next tree.

-- 
Kees Cook