]> www.infradead.org Git - users/jedix/linux-maple.git/commit
x86/pti: Don't report XenPV as vulnerable
authorJiri Kosina <jkosina@suse.cz>
Mon, 18 Jun 2018 07:59:54 +0000 (09:59 +0200)
committerBrian Maly <brian.maly@oracle.com>
Wed, 19 Sep 2018 00:30:25 +0000 (20:30 -0400)
commit6af1c37c19ea6ddb78d1999e67d5fb55764aeb42
tree0c0c0640fa7038ee8bd8f1d444d53a51d0692cd0
parent777025edfb93f6a4bad7a1bd9c74cb36ebcf6726
x86/pti: Don't report XenPV as vulnerable

Xen PV domain kernel is not by design affected by meltdown as it's
enforcing split CR3 itself. Let's not report such systems as "Vulnerable"
in sysfs (we're also already forcing PTI to off in X86_HYPER_XEN_PV cases);
the security of the system ultimately depends on presence of mitigation in
the Hypervisor, which can't be easily detected from DomU; let's report
that.

Reported-and-tested-by: Mike Latimer <mlatimer@suse.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Acked-by: Juergen Gross <jgross@suse.com>
Cc: Borislav Petkov <bp@suse.de>
Link: https://lkml.kernel.org/r/nycvar.YFH.7.76.1806180959080.6203@cbobk.fhfr.pm
[ Merge the user-visible string into a single line. ]
Signed-off-by: Ingo Molnar <mingo@kernel.org>
(cherry picked from commit 6cb2b08ff92460290979de4be91363e5d1b6cec1)

 Conflicts:
arch/x86/kernel/cpu/bugs.c

In UEK4, these changes are made in arch/x86/kernel/cpu/bugs_64.c.

Context around the headers was slightly different (there were some extra
headers relative to the cherry-picked patch).

There is noX86_HYPER_XEN_PV, instead compare x86_hyper to x86_hyper_xen.

Orabug: 28476681

Signed-off-by: Patrick Colp <patrick.colp@oracle.com>
Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>
Signed-off-by: Brian Maly <brian.maly@oracle.com>
arch/x86/kernel/cpu/bugs_64.c