From: Fedora Kernel Team <[email protected]>
[redhat] New configs in arch/x86
Hi,
As part of the ongoing rebase effort, the following configuration
options need to be reviewed.
As a reminder, the ARK configuration flow involves moving unreviewed
configuration options from the pending directory to the ark directory.
In the diff below, options are removed from the pending directory and
added to the ark hierarchy. The final options that need to be ACKed
are the files that are being added to the ark hierarchy.
If the value for a file that is added should be changed, please reply
with a better option.
Symbol: MITIGATION_ITS [=y]
Type : bool
Defined at arch/x86/Kconfig:2714
Prompt: Enable Indirect Target Selection mitigation
Depends on: CPU_MITIGATIONS [=y] && CPU_SUP_INTEL [=y] && X86_64 [=y] &&
MITIGATION_RETPOLINE [=y] && MITIGATION_RETHUNK [=y]
Location:
-> Mitigations for CPU vulnerabilities (CPU_MITIGATIONS [=y])
-> Enable Indirect Target Selection mitigation (MITIGATION_ITS [=y])
Selects: EXECMEM [=y]
Commit: 8754e67ad4ac (x86/its: Add support for ITS-safe indirect thunk)
---
Signed-off-by: Fedora Kernel Team <[email protected]>
diff --git a/redhat/configs/pending-rhel/generic/CONFIG_MITIGATION_ITS
b/redhat/configs/pending-rhel/generic/CONFIG_MITIGATION_ITS
deleted file mode 100644
index blahblah..blahblah 0
--- a/redhat/configs/pending-rhel/generic/CONFIG_MITIGATION_ITS
+++ /dev/null
@@ -1,14 +0,0 @@
-# Symbol: MITIGATION_ITS [=y]
-# Type : bool
-# Defined at arch/x86/Kconfig:2714
-# Prompt: Enable Indirect Target Selection mitigation
-# Depends on: CPU_MITIGATIONS [=y] && CPU_SUP_INTEL [=y] && X86_64 [=y] &&
MITIGATION_RETPOLINE [=y] && MITIGATION_RETHUNK [=y]
-# Location:
-# -> Mitigations for CPU vulnerabilities (CPU_MITIGATIONS [=y])
-# -> Enable Indirect Target Selection mitigation (MITIGATION_ITS [=y])
-# Selects: EXECMEM [=y]
-#
-#
-#
-# Commit: 8754e67ad4ac (x86/its: Add support for ITS-safe indirect thunk)
-CONFIG_MITIGATION_ITS=y
diff --git a/redhat/configs/rhel/generic/CONFIG_MITIGATION_ITS
b/redhat/configs/rhel/generic/CONFIG_MITIGATION_ITS
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/rhel/generic/CONFIG_MITIGATION_ITS
@@ -0,0 +1 @@
+CONFIG_MITIGATION_ITS=y
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3866
--
_______________________________________________
kernel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
