[Xen-devel] [PATCH for-4.13 v2 0/2] xen/nospec: Add Kconfig options for speculative hardening

[Andrew Cooper <andrew.cooper3@xxxxxxxxxx>]

The main purpose is patch 2.  The "l1tf-barrier" work currently causes a perf
hit and gains no safety, and is therefore unfit for inclusion into Xen 4.13 at
this time.

See individual patches for changes from v1.

Andrew Cooper (2):
  xen/nospec: Introduce CONFIG_SPECULATIVE_HARDEN_ARRAY
  xen/nospec: Introduce CONFIG_SPECULATIVE_HARDEN_BRANCH and disable it

 docs/misc/xen-command-line.pandoc |  8 +------
 xen/arch/x86/spec_ctrl.c          | 17 ++-------------
 xen/common/Kconfig                | 45 +++++++++++++++++++++++++++++++++++++++
 xen/include/asm-x86/cpufeatures.h |  2 +-
 xen/include/asm-x86/nospec.h      |  6 +++---
 xen/include/asm-x86/spec_ctrl.h   |  1 -
 xen/include/xen/nospec.h          |  5 +++++
 7 files changed, 57 insertions(+), 27 deletions(-)

-- 
2.11.0


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxx
https://lists.xenproject.org/mailman/listinfo/xen-devel