Re: [PATCH v2 2/6] x86/cpu: Remove "nosep"

Kees Cook
2022-02-07T21:58:51Z

On Thu, Jan 27, 2022 at 12:56:22PM +0100, Borislav Petkov wrote:
> From: Borislav Petkov <bp@suse.de>
>
> That chicken bit was added by
>
> 4f88651125e2 ("[PATCH] i386: allow disabling X86_FEATURE_SEP at boot")
>
> but measuring int80 vsyscall performance on 32-bit doesn't matter
> anymore.
>
> If still needed, one can boot with
>
> clearcpuid=sep
>
> to disable that feature for testing.
>
> Signed-off-by: Borislav Petkov <bp@suse.de>

Reviewed-by: Kees Cook <keescook@chromium.org>

--
Kees Cook