Received: by 2002:ad5:474a:0:0:0:0:0 with SMTP id i10csp2109754imu; Sun, 18 Nov 2018 16:09:38 -0800 (PST) X-Google-Smtp-Source: AJdET5dQYWPOwOljiZP+bE5GjySQe1Xe8kxnbFd9PtQfVBNYxTpR0wKF80YfnM/NfbeS5Z1FcgZc X-Received: by 2002:a62:8893:: with SMTP id l141mr7311155pfd.1.1542586178888; Sun, 18 Nov 2018 16:09:38 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1542586178; cv=none; d=google.com; s=arc-20160816; b=bwrx2RzJQqJxFTME4g3W5e343aQNfko7+Gmm8a9RAQmSGpzOSZrPxrQW1Acix99oXi iGQFBZ+czPHuoQJnpUwX3OqRibl/8c/u/32+QREv/tEdlLMjDJMyM/emmqR07OZW6InR vgHjo3HlifKqWg8YfIDzGgHODUh/zbocPdj+0LJ3ohDpzxbIuzpHkKVFVXtDdJwXy/Zj Ql5Iqn53hp0PAZ0HA9Xx+gLUzYutP/VnNv+cyCIYqM4ozFSx6yPUhAVP+VIHEIOkzXof ZvIpQFyzZPFLwaYbDs54KlFS7HZYg9zZjddJtCxaYvWj2wkVmbGicqQwXFoE/kWbxFqv mfBA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:mime-version:user-agent:references :message-id:in-reply-to:subject:cc:to:from:date; bh=DY72ItTYckMvKIzWr2G+AYRZ3cZCcxii7lFHduzCfto=; b=dvchBw+bt4LrHJZu4J9VDcXwIV9qosijIhm5NYOMwvnpmijmjDfDubs+SdrQDpiqub J6ttxTAwJorYnS4/FFYVcWQj2PYhPxSeefOHwGSDW3B88cE9KP68mNp4vbcZtqsZ1zGQ MyuIO39nYUtNprZR2S6ZYqdEHn8sNPKEarmRTngiGRW7Dft5HAvEKEFIWGSWZY/b8tSo cvnD56dlCSHB5esk9IJfFqw6lr0GIt/zWaUDe7v5LdZJBQ/2ujrGWFfN1hmdM2EPjasn qpdxGm9j0C9qJXgT9lmnFsKw+7eCvlwT1ACFJhYRSgQcyyp7RlkobJSXUpLbroo5sZc6 QdTw== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id q17-v6si38583205pgd.438.2018.11.18.16.09.21; Sun, 18 Nov 2018 16:09:38 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728127AbeKSJXG (ORCPT + 99 others); Mon, 19 Nov 2018 04:23:06 -0500 Received: from mx2.suse.de ([195.135.220.15]:53298 "EHLO mx1.suse.de" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1727661AbeKSJXG (ORCPT ); Mon, 19 Nov 2018 04:23:06 -0500 X-Virus-Scanned: by amavisd-new at test-mx.suse.de Received: from relay1.suse.de (unknown [195.135.220.254]) by mx1.suse.de (Postfix) with ESMTP id 2D98AAFAD; Sun, 18 Nov 2018 23:01:27 +0000 (UTC) Date: Mon, 19 Nov 2018 00:01:26 +0100 (CET) From: Jiri Kosina To: Linus Torvalds cc: Thomas Gleixner , Peter Zijlstra , Josh Poimboeuf , Andrea Arcangeli , David Woodhouse , Andi Kleen , Tim Chen , Casey Schaufler , Linux List Kernel Mailing , the arch/x86 maintainers , stable@vger.kernel.org Subject: Re: STIBP by default.. Revert? In-Reply-To: Message-ID: References: User-Agent: Alpine 2.21 (LSU 202 2017-01-01) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sun, 18 Nov 2018, Jiri Kosina wrote: > It's probably not just browsers, but anything running JITed sandboxed > code. So the most straightforward way might be the prctl() aproach, where > userspace would claim "I do care about this, please fix it up for me". So > prctl() + perhaps SECCOMP. I've just sent SECCOMP handling as a followup to Tim's set. I still feel like we should make STIBP and IBPB behavior consistent (in a sense they should always be used both, or none of them), but that might be additional 4.21 optimization. Thanks, -- Jiri Kosina SUSE Labs