Received: by 2002:a25:ab43:0:0:0:0:0 with SMTP id u61csp3040261ybi; Mon, 17 Jun 2019 15:17:01 -0700 (PDT) X-Google-Smtp-Source: APXvYqzWSJUs489szebjoL+a387uMI1tEFIgQ5l1sUXkAL2iK0RyOk47a5C4Ys/VI4OBeHqrtXEM X-Received: by 2002:a17:902:868b:: with SMTP id g11mr106905923plo.183.1560809821280; Mon, 17 Jun 2019 15:17:01 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1560809821; cv=none; d=google.com; s=arc-20160816; b=CLsHFupdqf3op/qutqX95dj7V/8pllTChgY701B6d0I30aUqJpLWw1iiAmzW4YITJ6 0oGrrujSlzDM9sPbHhvDp0XUwh2RwonJXgXKx7Dx0YWQm/Zdzas5QSL+HwvPuf6Bc+D5 7PhJKRLiomqT5mv4ekl3vl2jAhzfv5mxbYz9N8R5BLpJeWoTWsgx/8AUHIrL+4c96PWP hmcTMlt8U2MlwTP/mBftngLvhdtvW4yrQKUbkCV4nrMwRA5VmizB8a/FFOGL3WwB98xm mToMx90ukIl0PVSitfsiKsbt7yX5x8JguF+Jz7vU99sVzV4GGzRypz9WVEYRCf9919XV yjwQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding:mime-version :organization:references:in-reply-to:message-id:subject:cc:to:from :date; bh=GkzJiuVQIwXwaXZoJSG9biEw9HXxTuqWo/R7GABC3hg=; b=yiA74EpG4gdl2wI6WYgpcy+M+lhbjaLJJBA9+p5X0ymQfMXNPD5ovjuSNQM0pYXm3I YCXeKj2Xa6owE6D2NEN/T8yiJoXq2R7qSmoRUPGyB+UEGcklWvAr10U9+1wVeeOWQ9MS EYK7IOArbwIcuelEw4wH6ZmPEsrq1BcLE+haL0LL0830vJmBU9ow5VTtcGtDR7bF0nBr ZTZT5aeWCEmDE4RVjZwMV8uvPGGGmMJoYym7/7fEnp55CMgnhxDPyM9cbvN+0nUMb8M0 RWQXRDLgZmt+MAky5jY+n9GbUjWXkHZ8PQ8NBxG3y9Z8KlXfniE1WAGH1tS/bPA7RKu6 eeYw== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id s62si465137pjc.75.2019.06.17.15.16.45; Mon, 17 Jun 2019 15:17:01 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728719AbfFQWQD (ORCPT + 99 others); Mon, 17 Jun 2019 18:16:03 -0400 Received: from ms.lwn.net ([45.79.88.28]:45402 "EHLO ms.lwn.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726116AbfFQWQD (ORCPT ); Mon, 17 Jun 2019 18:16:03 -0400 Received: from lwn.net (localhost [127.0.0.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ms.lwn.net (Postfix) with ESMTPSA id B3B20A4D; Mon, 17 Jun 2019 22:16:01 +0000 (UTC) Date: Mon, 17 Jun 2019 16:16:00 -0600 From: Jonathan Corbet To: Thomas Gleixner Cc: Tim Chen , Alexei Starovoitov , Greg Kroah-Hartman , Ben Greear , stable@vger.kernel.org, Andi Kleen , Dave Hansen , Jun Nakajima , Jiri Kosina , Linus Torvalds , Tom Lendacky , Ingo Molnar , Peter Zijlstra , Josh Poimboeuf , Andrea Arcangeli , David Woodhouse , Asit Mallick , Arjan van de Ven , Jon Masters , Waiman Long , Borislav Petkov , Mark Gross , LKML , x86@kernel.org Subject: Re: [PATCH v3] Documentation: Add section about CPU vulnerabilities for Spectre Message-ID: <20190617161600.77f5f5eb@lwn.net> In-Reply-To: References: Organization: LWN.net MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 8bit Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Mon, 17 Jun 2019 22:21:51 +0200 (CEST) Thomas Gleixner wrote: > > +Spectre variant 1 attacks take advantage of speculative execution of > > +conditional branches, while Spectre variant 2 attacks use speculative > > +execution of indirect branches to leak privileged memory. See [1] [5] > > +[7] [10] [11]. > > It would be great to actually link these [N] to the actual http link at the > bottom. No idea what's the best way to do that. > > Jonathan? Append an underscore to the link text, so: See [1_] [5_] ... Then, when adding the links: .. _1: https://.../ There are other ways; see http://docutils.sourceforge.net/docs/user/rst/quickref.html#external-hyperlink-targets for the list. > The below renders horribly when converted to HTML > > You probably want to wrap these into a table > > > + nospectre_v2 [X86] Disable all mitigations for the Spectre variant 2 > > + (indirect branch prediction) vulnerability. System may > > + allow data leaks with this option, which is equivalent > > + to spectre_v2=off. > > + > > + > > + spectre_v2= [X86] Control mitigation of Spectre variant 2 > > + (indirect branch speculation) vulnerability. > > + The default operation protects the kernel from > > + user space attacks. > > Maybe Jonathan has a better idea. The easiest thing is probably a definition list: nospectre_v2 [X86] Disable all mitigations for the Spectre variant 2 (indirect branch prediction) ... spectrev2= ... i.e. just move the descriptive text into an indented block below the term of interest. jon