Received: by 2002:ad5:474a:0:0:0:0:0 with SMTP id i10csp3188002imu; Fri, 23 Nov 2018 23:39:43 -0800 (PST) X-Google-Smtp-Source: AFSGD/UGRDE65AQn8HzUnlcC/BM+QjkMc3aYagd6FmoMoLxw8NVTZ1qPDTIYThlJfGFMWSnpqAaA X-Received: by 2002:a17:902:bb86:: with SMTP id m6mr19263217pls.315.1543045183434; Fri, 23 Nov 2018 23:39:43 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1543045183; cv=none; d=google.com; s=arc-20160816; b=cEllnPW0fbpxRwEFGlcP7byVfqHz4IVxiaHWnurAf/pD0nGew83tl0HVM6wukjQaSH 9e1LWsjHPL2c653TH5ndHu7S+Onjdcp9g57rhbcfzMC1f2BugRZNKZ0OnTi3fowex5oh yyST2bArkyA7hwGetVKx9OFyaJtbMWHZCT1fMSQMWZtv8GPonzG9ITuzmvRtkpc5Nmg7 goEOJ3v6q52dyn1jA5vOdbN8nBThSHfFg5VnPz3hlsZmcoFfnuzxqw+rw9GvObLHxhqk W1EZcdzIm6QAzfUyimOJiZ6Bvr52ql6x/WpIuCmuUrtP9XRmx0EBEDO+veymMxkcyPVt rMtA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:mime-version:user-agent:references :message-id:in-reply-to:subject:cc:to:from:date; bh=XWV76r9w5lqcBdSAT8IidBpqibWY5L8prHFMqDOp3x8=; b=U1SV/TbpRz6h2QBOwVT2Oy4UbEil5NyQ0uAMZMIlOvjgMOanpbr3pk9R7uyho8f7yG 7ypioHCioGUS/mekXVC5XcpSd7lcvboiyt7ukAv7Jx3T8SIiEy57IzSX4dpz+klJz/VP rccso0hhv9QGRw4AHQ3m3qLB4SA+xmwteLzmh9kBDurDU2ojPhS/0tjKR7M0Exiz6V03 1b6hRwUS0MvgCE2IoWCgaaO0x5MkROCtLtOHo/asI2OvNcagCFC21IIaGdpYVcRYPp12 Hax2XMMDvypxjVypmi32sGPB7kAHTOXuy8GKmYZQ8rdqyZR9sKTMqa3uRMOY7VONJMUv Uzzg== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id w32si55719304pga.337.2018.11.23.23.39.29; Fri, 23 Nov 2018 23:39:43 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S2438808AbeKWH7H (ORCPT + 99 others); Fri, 23 Nov 2018 02:59:07 -0500 Received: from Galois.linutronix.de ([146.0.238.70]:49050 "EHLO Galois.linutronix.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727301AbeKWH7H (ORCPT ); Fri, 23 Nov 2018 02:59:07 -0500 Received: from p4fea46ac.dip0.t-ipconnect.de ([79.234.70.172] helo=nanos) by Galois.linutronix.de with esmtpsa (TLS1.2:DHE_RSA_AES_256_CBC_SHA256:256) (Exim 4.80) (envelope-from ) id 1gPwM5-0005CH-QE; Thu, 22 Nov 2018 22:17:45 +0100 Date: Thu, 22 Nov 2018 22:17:44 +0100 (CET) From: Thomas Gleixner To: Borislav Petkov cc: Josh Poimboeuf , Linus Torvalds , Linux List Kernel Mailing , the arch/x86 maintainers , Peter Zijlstra , Andrew Lutomirski , Jiri Kosina , thomas.lendacky@amd.com, Andrea Arcangeli , David Woodhouse , Andi Kleen , dave.hansen@intel.com, Casey Schaufler , "Mallick, Asit K" , "Van De Ven, Arjan" , jcm@redhat.com, longman9394@gmail.com, Greg KH , david.c.stewart@intel.com, Kees Cook , Tim Chen Subject: Re: [patch 01/24] x86/speculation: Update the TIF_SSBD comment In-Reply-To: <20181122175229.GD10365@zn.tnic> Message-ID: References: <20181121201430.559770965@linutronix.de> <20181121201722.337599561@linutronix.de> <20181121230450.k75e4ipdag73dayz@treble> <20181121230854.GH27559@zn.tnic> <20181122173004.fn4tqoclhcyibxff@treble> <20181122175229.GD10365@zn.tnic> User-Agent: Alpine 2.21 (DEB 202 2017-01-01) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII X-Linutronix-Spam-Score: -1.0 X-Linutronix-Spam-Level: - X-Linutronix-Spam-Status: No , -1.0 points, 5.0 required, ALL_TRUSTED=-1,SHORTCIRCUIT=-0.0001 Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, 22 Nov 2018, Borislav Petkov wrote: > On Thu, Nov 22, 2018 at 11:30:04AM -0600, Josh Poimboeuf wrote: > > But it does describe its purpose, especially in relation to the > > 'spectre_v2=' option. > > Sure, but the thing I'm proposing > > spectre_v2_task_isol= > > describes it more precisely, IMHO. :) > > I.e., "enable/disable spectre v2 task isolation". > > > Previously 'spectre_v2=' might have been more appropriately named > > 'spectre_v2_kernel=' because it only protected the kernel from Spectre > > v2 attacks. Now with these new patches, 'spectre_v2=on' will protect > > the entire system. > > Hmmm, crazy idea: can we extend the options of spectre_v2= nstead? > > spectre_v2=user_isolation,... > spectre_v2=kernel,... > spectre_v2=task_isolation,... > > and so on? > > This way we can do a couple of option switches in one go. That's results in a huge parser state space and changes the existing interface. We stay with the separate option. Thanks, tglx