Re: [PATCH v2 8/9] qemu: Enable SCHED_CORE for domains and helper processes

2022-08-10 Thread Michal Prívozník
On 7/13/22 19:25, Daniel P. Berrangé wrote: > On Mon, Jun 27, 2022 at 12:44:40PM +0200, Michal Privoznik wrote: >> Despite all mitigations, side channel attacks when two processes >> run at two Hyper Threads of the same core are still possible. >> Fortunately, the Linux kernel came up with a soluti

Re: [PATCH v2 8/9] qemu: Enable SCHED_CORE for domains and helper processes

2022-07-13 Thread Daniel P . Berrangé
On Mon, Jun 27, 2022 at 12:44:40PM +0200, Michal Privoznik wrote: > Despite all mitigations, side channel attacks when two processes > run at two Hyper Threads of the same core are still possible. > Fortunately, the Linux kernel came up with a solution: userspace > can create so called trusted grou

[PATCH v2 8/9] qemu: Enable SCHED_CORE for domains and helper processes

2022-06-27 Thread Michal Privoznik
Despite all mitigations, side channel attacks when two processes run at two Hyper Threads of the same core are still possible. Fortunately, the Linux kernel came up with a solution: userspace can create so called trusted groups, which are sets of processes and only processes of the same group can r