diff options
| author | Josh Poimboeuf <jpoimboe@kernel.org> | 2024-06-25 23:02:02 -0700 |
|---|---|---|
| committer | Borislav Petkov (AMD) <bp@alien8.de> | 2024-06-28 15:35:54 +0200 |
| commit | 42c141fbb651b64db492aab35bc1d96eb4c20261 (patch) | |
| tree | b0e241588db1153e364a2a21bd47dd76241f312d /arch/x86/virt/vmx/tdx | |
| parent | 4586c93ebf410c2b7f480cc4762edd59012a66c0 (diff) | |
x86/bugs: Add 'spectre_bhi=vmexit' cmdline option
In cloud environments it can be useful to *only* enable the vmexit
mitigation and leave syscalls vulnerable. Add that as an option.
This is similar to the old spectre_bhi=auto option which was removed
with the following commit:
36d4fe147c87 ("x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto")
with the main difference being that this has a more descriptive name and
is disabled by default.
Mitigation switch requested by Maksim Davydov <davydov-max@yandex-team.ru>.
[ bp: Massage. ]
Signed-off-by: Josh Poimboeuf <jpoimboe@kernel.org>
Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de>
Reviewed-by: Daniel Sneddon <daniel.sneddon@linux.intel.com>
Reviewed-by: Nikolay Borisov <nik.borisov@suse.com>
Link: https://lore.kernel.org/r/2cbad706a6d5e1da2829e5e123d8d5c80330148c.1719381528.git.jpoimboe@kernel.org
Diffstat (limited to 'arch/x86/virt/vmx/tdx')
0 files changed, 0 insertions, 0 deletions