mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2025-08-05 16:54:27 +00:00
4b78317679
Pull STIBP fallout fixes from Thomas Gleixner:
"The performance destruction department finally got it's act together
and came up with a cure for the STIPB regression:
- Provide a command line option to control the spectre v2 user space
mitigations. Default is either seccomp or prctl (if seccomp is
disabled in Kconfig). prctl allows mitigation opt-in, seccomp
enables the migitation for sandboxed processes.
- Rework the code to handle the conditional STIBP/IBPB control and
remove the now unused ptrace_may_access_sched() optimization
attempt
- Disable STIBP automatically when SMT is disabled
- Optimize the switch_to() logic to avoid MSR writes and invocations
of __switch_to_xtra().
- Make the asynchronous speculation TIF updates synchronous to
prevent stale mitigation state.
As a general cleanup this also makes retpoline directly depend on
compiler support and removes the 'minimal retpoline' option which just
pretended to provide some form of security while providing none"
* 'x86-pti-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (31 commits)
x86/speculation: Provide IBPB always command line options
x86/speculation: Add seccomp Spectre v2 user space protection mode
x86/speculation: Enable prctl mode for spectre_v2_user
x86/speculation: Add prctl() control for indirect branch speculation
x86/speculation: Prepare arch_smt_update() for PRCTL mode
x86/speculation: Prevent stale SPEC_CTRL msr content
x86/speculation: Split out TIF update
ptrace: Remove unused ptrace_may_access_sched() and MODE_IBRS
x86/speculation: Prepare for conditional IBPB in switch_mm()
x86/speculation: Avoid __switch_to_xtra() calls
x86/process: Consolidate and simplify switch_to_xtra() code
x86/speculation: Prepare for per task indirect branch speculation control
x86/speculation: Add command line control for indirect branch speculation
x86/speculation: Unify conditional spectre v2 print functions
x86/speculataion: Mark command line parser data __initdata
x86/speculation: Mark string arrays const correctly
x86/speculation: Reorder the spec_v2 code
x86/l1tf: Show actual SMT state
x86/speculation: Rework SMT state change
sched/smt: Expose sched_smt_present static key
...
|
||
|---|---|---|
| .. | ||
| crypto | ||
| e820 | ||
| fpu | ||
| numachip | ||
| trace | ||
| uv | ||
| xen | ||
| a.out-core.h | ||
| acenv.h | ||
| acpi.h | ||
| agp.h | ||
| alternative-asm.h | ||
| alternative.h | ||
| amd_nb.h | ||
| apb_timer.h | ||
| apic.h | ||
| apic_flat_64.h | ||
| apicdef.h | ||
| apm.h | ||
| arch_hweight.h | ||
| archrandom.h | ||
| asm-offsets.h | ||
| asm-prototypes.h | ||
| asm.h | ||
| atomic.h | ||
| atomic64_32.h | ||
| atomic64_64.h | ||
| barrier.h | ||
| bios_ebda.h | ||
| bitops.h | ||
| boot.h | ||
| bootparam_utils.h | ||
| bug.h | ||
| bugs.h | ||
| cache.h | ||
| cacheflush.h | ||
| cacheinfo.h | ||
| calgary.h | ||
| ce4100.h | ||
| checksum.h | ||
| checksum_32.h | ||
| checksum_64.h | ||
| clocksource.h | ||
| cmdline.h | ||
| cmpxchg.h | ||
| cmpxchg_32.h | ||
| cmpxchg_64.h | ||
| compat.h | ||
| cpu.h | ||
| cpu_device_id.h | ||
| cpu_entry_area.h | ||
| cpufeature.h | ||
| cpufeatures.h | ||
| cpumask.h | ||
| crash.h | ||
| current.h | ||
| debugreg.h | ||
| delay.h | ||
| desc.h | ||
| desc_defs.h | ||
| device.h | ||
| disabled-features.h | ||
| div64.h | ||
| dma-direct.h | ||
| dma-mapping.h | ||
| dma.h | ||
| dmi.h | ||
| dwarf2.h | ||
| edac.h | ||
| efi.h | ||
| elf.h | ||
| emergency-restart.h | ||
| entry_arch.h | ||
| error-injection.h | ||
| espfix.h | ||
| exec.h | ||
| extable.h | ||
| fb.h | ||
| fixmap.h | ||
| floppy.h | ||
| frame.h | ||
| fsgsbase.h | ||
| ftrace.h | ||
| futex.h | ||
| gart.h | ||
| genapic.h | ||
| geode.h | ||
| hardirq.h | ||
| highmem.h | ||
| hpet.h | ||
| hugetlb.h | ||
| hw_breakpoint.h | ||
| hw_irq.h | ||
| hyperv-tlfs.h | ||
| hypervisor.h | ||
| i8259.h | ||
| ia32.h | ||
| ia32_unistd.h | ||
| imr.h | ||
| inat.h | ||
| inat_types.h | ||
| init.h | ||
| insn-eval.h | ||
| insn.h | ||
| inst.h | ||
| intel-family.h | ||
| intel-mid.h | ||
| intel_ds.h | ||
| intel_mid_vrtc.h | ||
| intel_pconfig.h | ||
| intel_pmc_ipc.h | ||
| intel_pt.h | ||
| intel_punit_ipc.h | ||
| intel_rdt_sched.h | ||
| intel_scu_ipc.h | ||
| intel_telemetry.h | ||
| invpcid.h | ||
| io.h | ||
| io_apic.h | ||
| iomap.h | ||
| iommu.h | ||
| iommu_table.h | ||
| iosf_mbi.h | ||
| ipi.h | ||
| irq.h | ||
| irq_regs.h | ||
| irq_remapping.h | ||
| irq_vectors.h | ||
| irq_work.h | ||
| irqdomain.h | ||
| irqflags.h | ||
| ist.h | ||
| jailhouse_para.h | ||
| jump_label.h | ||
| kasan.h | ||
| kaslr.h | ||
| kbdleds.h | ||
| Kbuild | ||
| kdebug.h | ||
| kexec-bzimage64.h | ||
| kexec.h | ||
| kgdb.h | ||
| kmap_types.h | ||
| kprobes.h | ||
| kvm_emulate.h | ||
| kvm_host.h | ||
| kvm_page_track.h | ||
| kvm_para.h | ||
| kvmclock.h | ||
| linkage.h | ||
| livepatch.h | ||
| local.h | ||
| local64.h | ||
| mach_timer.h | ||
| mach_traps.h | ||
| math_emu.h | ||
| mc146818rtc.h | ||
| mce.h | ||
| mcsafe_test.h | ||
| mem_encrypt.h | ||
| microcode.h | ||
| microcode_amd.h | ||
| microcode_intel.h | ||
| misc.h | ||
| mmconfig.h | ||
| mmu.h | ||
| mmu_context.h | ||
| mmx.h | ||
| mmzone.h | ||
| mmzone_32.h | ||
| mmzone_64.h | ||
| module.h | ||
| mpspec.h | ||
| mpspec_def.h | ||
| mpx.h | ||
| mshyperv.h | ||
| msi.h | ||
| msidef.h | ||
| msr-index.h | ||
| msr-trace.h | ||
| msr.h | ||
| mtrr.h | ||
| mwait.h | ||
| nmi.h | ||
| nops.h | ||
| nospec-branch.h | ||
| numa.h | ||
| numa_32.h | ||
| olpc.h | ||
| olpc_ofw.h | ||
| orc_lookup.h | ||
| orc_types.h | ||
| page.h | ||
| page_32.h | ||
| page_32_types.h | ||
| page_64.h | ||
| page_64_types.h | ||
| page_types.h | ||
| paravirt.h | ||
| paravirt_types.h | ||
| parport.h | ||
| pat.h | ||
| pci-direct.h | ||
| pci-functions.h | ||
| pci.h | ||
| pci_64.h | ||
| pci_x86.h | ||
| percpu.h | ||
| perf_event.h | ||
| perf_event_p4.h | ||
| pgalloc.h | ||
| pgtable-2level.h | ||
| pgtable-2level_types.h | ||
| pgtable-3level.h | ||
| pgtable-3level_types.h | ||
| pgtable-invert.h | ||
| pgtable.h | ||
| pgtable_32.h | ||
| pgtable_32_types.h | ||
| pgtable_64.h | ||
| pgtable_64_types.h | ||
| pgtable_types.h | ||
| pkeys.h | ||
| platform_sst_audio.h | ||
| pm-trace.h | ||
| posix_types.h | ||
| preempt.h | ||
| probe_roms.h | ||
| processor-cyrix.h | ||
| processor-flags.h | ||
| processor.h | ||
| prom.h | ||
| proto.h | ||
| pti.h | ||
| ptrace.h | ||
| purgatory.h | ||
| pvclock-abi.h | ||
| pvclock.h | ||
| qrwlock.h | ||
| qspinlock.h | ||
| qspinlock_paravirt.h | ||
| realmode.h | ||
| reboot.h | ||
| reboot_fixups.h | ||
| refcount.h | ||
| required-features.h | ||
| rio.h | ||
| rmwcc.h | ||
| rwsem.h | ||
| seccomp.h | ||
| sections.h | ||
| segment.h | ||
| serial.h | ||
| set_memory.h | ||
| setup.h | ||
| setup_arch.h | ||
| shmparam.h | ||
| sigcontext.h | ||
| sigframe.h | ||
| sighandling.h | ||
| signal.h | ||
| simd.h | ||
| smap.h | ||
| smp.h | ||
| sparsemem.h | ||
| spec-ctrl.h | ||
| special_insns.h | ||
| spinlock.h | ||
| spinlock_types.h | ||
| sta2x11.h | ||
| stackprotector.h | ||
| stacktrace.h | ||
| string.h | ||
| string_32.h | ||
| string_64.h | ||
| suspend.h | ||
| suspend_32.h | ||
| suspend_64.h | ||
| svm.h | ||
| swiotlb.h | ||
| switch_to.h | ||
| sync_bitops.h | ||
| sync_core.h | ||
| syscall.h | ||
| syscall_wrapper.h | ||
| syscalls.h | ||
| sysfb.h | ||
| tce.h | ||
| text-patching.h | ||
| thread_info.h | ||
| time.h | ||
| timer.h | ||
| timex.h | ||
| tlb.h | ||
| tlbbatch.h | ||
| tlbflush.h | ||
| topology.h | ||
| trace_clock.h | ||
| traps.h | ||
| tsc.h | ||
| uaccess.h | ||
| uaccess_32.h | ||
| uaccess_64.h | ||
| umip.h | ||
| unaligned.h | ||
| unistd.h | ||
| unwind.h | ||
| unwind_hints.h | ||
| uprobes.h | ||
| user.h | ||
| user32.h | ||
| user_32.h | ||
| user_64.h | ||
| vdso.h | ||
| vga.h | ||
| vgtod.h | ||
| virtext.h | ||
| vm86.h | ||
| vmx.h | ||
| vsyscall.h | ||
| vvar.h | ||
| word-at-a-time.h | ||
| x86_init.h | ||
| xor.h | ||
| xor_32.h | ||
| xor_64.h | ||
| xor_avx.h | ||