linux-kernel - Re: Requirements for retpoline in Linux 4.15 (was: Re: Linux 4.15)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Mon, 29 Jan 2018 11:35:25 +0000
From:   David Woodhouse <dwmw2@...radead.org>
To:     Martin Steigerwald <martin@...htvoll.de>
Cc:     Linus Torvalds <torvalds@...ux-foundation.org>,
        Linux Kernel Mailing List <linux-kernel@...r.kernel.org>
Subject: Re: Requirements for retpoline in Linux 4.15 (was: Re: Linux 4.15)

On Mon, 2018-01-29 at 12:19 +0100, Martin Steigerwald wrote:
> 
> The whole thing works:
> 
> % grep . /sys/devices/system/cpu/vulnerabilities/*                                                       
> /sys/devices/system/cpu/vulnerabilities/meltdown:Mitigation: PTI
> /sys/devices/system/cpu/vulnerabilities/spectre_v1:Vulnerable
> /sys/devices/system/cpu/vulnerabilities/spectre_v2:Mitigation: Full generic 
> retpoline
> 
> I bet the virtualbox modules compiled by virtualbox-dkms will taint the 
> support, but I bet sooner or later they will support retpoline as well. 
> (Another reason to switch to KVM one day.)

As long as those are actually compiled, it should be fine. Any C code
will be built with the correct CFLAGS.

If they have explicit asm which has indirect jumps, that would still be
a problem. We just need to port objtool into the kernel and do it at
module load time, to check for that... :)
Download attachment "smime.p7s" of type "application/x-pkcs7-signature" (5213 bytes)