Re: [PATCH 1/1] x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl

From: Josh Poimboeuf
Date: Sat Sep 11 2021 - 22:29:33 EST




> On Sep 11, 2021, at 2:13 PM, Kees Cook <keescook@xxxxxxxxxxxx> wrote:
>
> On Wed, Nov 04, 2020 at 06:50:54PM -0500, Andrea Arcangeli wrote:
>> Switch the kernel default of SSBD and STIBP to the ones with
>> CONFIG_SECCOMP=n (i.e. spec_store_bypass_disable=prctl
>> spectre_v2_user=prctl) even if CONFIG_SECCOMP=y.
>
> Hello x86 maintainers!
>
> I'd really like to get this landed, so I'll take this via the
> seccomp-tree unless someone else speaks up. This keeps falling off
> the edge of my TODO list. :)

Thanks! You can add my

Acked-by: Josh Poimboeuf <jpoimboe@xxxxxxxxxx>