lkml.org 
[lkml]   [2024]   [Apr]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
SubjectRe: [PATCH 15/14] x86/gds: Lock GDS mitigation when keylocker feature is present
From
On 4/22/2024 2:32 PM, Pawan Gupta wrote:
>
> To enable Key Locker feature, "proper mitigation" is microcode mitigation
> enabled and the GDS_MITG_LOCK bit set in MSR_IA32_MCU_OPT_CTRL. Do you
> agree?
> > If not via this patch, how is GDS_MITG_LOCK going to be set?

The lock bit seems to be set by microcode when SGX is available.
However, if the lock bit is not set for Key Locker, it does seem odd.
Introducing kernel code to override this situation might be seen as a
workaround rather than a proper solution, potentially leading to more
confusion.

I'd rather investigate the behavior of the microcode further, verify its
consistency, and gain a clearer understanding of the requirement for
this lock bit.

Thanks,
Chang

\
 
 \ /
  Last update: 2024-05-27 17:56    [W:0.082 / U:0.924 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site