From mboxrd@z Thu Jan 1 00:00:00 1970 Return-path: Received: from aserp2130.oracle.com ([141.146.126.79]) by Galois.linutronix.de with esmtps (TLS1.2:RSA_AES_256_CBC_SHA256:256) (Exim 4.80) (envelope-from ) id 1fE8Yo-00030b-MI for speck@linutronix.de; Thu, 03 May 2018 09:21:53 +0200 Received: from pps.filterd (aserp2130.oracle.com [127.0.0.1]) by aserp2130.oracle.com (8.16.0.22/8.16.0.22) with SMTP id w437Lhrx082810 for ; Thu, 3 May 2018 07:21:43 GMT Received: from userv0021.oracle.com (userv0021.oracle.com [156.151.31.71]) by aserp2130.oracle.com with ESMTP id 2hmeg60avx-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK) for ; Thu, 03 May 2018 07:21:43 +0000 Received: from userv0121.oracle.com (userv0121.oracle.com [156.151.31.72]) by userv0021.oracle.com (8.14.4/8.14.4) with ESMTP id w437LgvV021612 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK) for ; Thu, 3 May 2018 07:21:42 GMT Received: from abhmp0017.oracle.com (abhmp0017.oracle.com [141.146.116.23]) by userv0121.oracle.com (8.14.4/8.13.8) with ESMTP id w437LfLN004000 for ; Thu, 3 May 2018 07:21:42 GMT Date: Thu, 3 May 2018 03:21:40 -0400 From: Konrad Rzeszutek Wilk Subject: [MODERATED] Re: [patch V11 15/16] SSB 15 Message-ID: <20180503072140.GC30144@char.us.oracle.com> References: <20180502215102.192655950@linutronix.de> <20180502215417.356529122@linutronix.de> MIME-Version: 1.0 In-Reply-To: <20180502215417.356529122@linutronix.de> Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit To: speck@linutronix.de List-ID: On Wed, May 02, 2018 at 11:51:17PM +0200, speck for Thomas Gleixner wrote: > Subject: [patch V11 15/16] x86/process: Allow runtime control of Speculative Store Bypass > From: Thomas Gleixner > > The Speculative Store Bypass vulnerability can be mitigated with the > Reduced Data Speculation (RDS) feature. To allow finer grained control of > this eventually expensive mitigation a per task mitigation control is > required. > > Add a new TIF_RDS flag and put it into the group of TIF flags which are > evaluated for mismatch in switch_to(). If these bits differ in the previous > and the next task, then the slow path function __switch_to_xtra() is > invoked. Implement the TIF_RDS dependent mitigation control in the slow > path. > > If the prctl for controlling Speculative Store Bypass is disabled or no > task uses the prctl then there is no overhead in the switch_to() fast > path. > > Update the KVM related speculation control functions to take TID_RDS into > account as well. > > Based on a patch from Tim Chen. Completely rewritten. > > Signed-off-by: Thomas Gleixner Reviewed-by: Konrad Rzeszutek Wilk In case you want to add that ..