[PATCH v4 0/2] Harden spectrev2 userspace-userspace protection

2018-09-06 Thread Jiri Kosina
Currently, linux kernel is basically not preventing userspace-userspace spectrev2 attack, because: - IBPB is basically unused (issued only for tasks that marked themselves explicitly non-dumpable, which is absolutely negligible minority of all software out there), therefore cross-process

[PATCH v4 0/2] Harden spectrev2 userspace-userspace protection

2018-09-06 Thread Jiri Kosina
Currently, linux kernel is basically not preventing userspace-userspace spectrev2 attack, because: - IBPB is basically unused (issued only for tasks that marked themselves explicitly non-dumpable, which is absolutely negligible minority of all software out there), therefore cross-process