Re: [PATCH 10/16] arm64: Make KPTI strict CPU local feature

2018-01-29 Thread Dave Martin
On Fri, Jan 26, 2018 at 03:46:59PM +, Suzuki K Poulose wrote: > On 26/01/18 12:25, Dave Martin wrote: > >On Tue, Jan 23, 2018 at 12:28:03PM +, Suzuki K Poulose wrote: > >>KPTI capability is a security feature which should be enabled > >>when at least one CPU on the system needs it. Any late

Re: [PATCH 10/16] arm64: Make KPTI strict CPU local feature

2018-01-26 Thread Suzuki K Poulose
On 26/01/18 12:25, Dave Martin wrote: On Tue, Jan 23, 2018 at 12:28:03PM +, Suzuki K Poulose wrote: KPTI capability is a security feature which should be enabled when at least one CPU on the system needs it. Any late CPU which needs the kernel support, should be prevented from booting (and t

Re: [PATCH 10/16] arm64: Make KPTI strict CPU local feature

2018-01-26 Thread Dave Martin
On Tue, Jan 23, 2018 at 12:28:03PM +, Suzuki K Poulose wrote: > KPTI capability is a security feature which should be enabled > when at least one CPU on the system needs it. Any late CPU > which needs the kernel support, should be prevented from > booting (and thus making the system unsecure) i