Messages in this thread | | | Subject | Re: [PATCH v2] x86/pti: don't report XenPV as vulnerable | From | Juergen Gross <> | Date | Mon, 18 Jun 2018 10:07:49 +0200 |
| |
On 18/06/18 09:59, Jiri Kosina wrote: > From: Jiri Kosina <jkosina@suse.cz> > > Xen PV domain kernel is not by design affected by meltdown as it's > enforcing split CR3 itself. Let's not report such systems as "Vulnerable" > in sysfs (we're also already forcing PTI to off in X86_HYPER_XEN_PV > cases); the security of the system ultimately depends on presence of > mitigation in Hypervisor, which can't be easily detected from DomU; let's > report that. > > Reported-and-tested-by: Mike Latimer <mlatimer@suse.com> > Signed-off-by: Jiri Kosina <jkosina@suse.cz>
Acked-by: Juergen Gross <jgross@suse.com>
Juergen
| |