[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20180128095027.hqrcpnholsvukdzd@gmail.com>
Date: Sun, 28 Jan 2018 10:50:28 +0100
From: Ingo Molnar <mingo@...nel.org>
To: Dan Williams <dan.j.williams@...el.com>
Cc: tglx@...utronix.de, linux-arch@...r.kernel.org,
kernel-hardening@...ts.openwall.com, gregkh@...uxfoundation.org,
x86@...nel.org, torvalds@...ux-foundation.org,
Ingo Molnar <mingo@...hat.com>, "H. Peter Anvin" <hpa@...or.com>,
Jiri Slaby <jslaby@...e.cz>, alan@...ux.intel.com
Subject: Re: [PATCH v5 12/12] x86/spectre: report get_user mitigation for
spectre_v1
* Dan Williams <dan.j.williams@...el.com> wrote:
> Reflect the presence of 'get_user', '__get_user', and 'syscall'
> protections in sysfs. Keep the "Vulnerable" distinction given the
> expectation that the places that have been identified for 'array_idx'
> usage are likely incomplete.
(The style problems/inconsistencies of the previous patches are repeated here too,
please fix.)
>
> Cc: Thomas Gleixner <tglx@...utronix.de>
> Cc: Ingo Molnar <mingo@...hat.com>
> Cc: "H. Peter Anvin" <hpa@...or.com>
> Cc: x86@...nel.org
> Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
> Reported-by: Jiri Slaby <jslaby@...e.cz>
> Signed-off-by: Dan Williams <dan.j.williams@...el.com>
> ---
> arch/x86/kernel/cpu/bugs.c | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/arch/x86/kernel/cpu/bugs.c b/arch/x86/kernel/cpu/bugs.c
> index 390b3dc3d438..01d5ba48f745 100644
> --- a/arch/x86/kernel/cpu/bugs.c
> +++ b/arch/x86/kernel/cpu/bugs.c
> @@ -269,7 +269,7 @@ ssize_t cpu_show_spectre_v1(struct device *dev,
> {
> if (!boot_cpu_has_bug(X86_BUG_SPECTRE_V1))
> return sprintf(buf, "Not affected\n");
> - return sprintf(buf, "Vulnerable\n");
> + return sprintf(buf, "Vulnerable: Minimal user pointer sanitization\n");
Btw., I think this string is still somewhat passive-aggressive towards users, as
it doesn't really give them any idea about what is missing from their system so
that they can turn it into not vulnerable.
What else is missing that would turn this into a "Mitigated" entry?
Thanks,
Ingo
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
