Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-11-26 02:46:22 -05:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #317 from raja-grewal/srso_docs

Browse source 
Update SRSO docs
This commit is contained in:
Patrick Schleizer 2025-09-17 13:27:13 -04:00 • committed by GitHub
commit 2d3b4ee124
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
etc/default/grub.d/40_cpu_mitigations.cfg
View file

@ -167,7 +167,8 @@ GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX kvm.mitigate_smt_rsb=1"
## https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/srso.html
##
## The default kernel setting will be utilized until provided sufficient evidence to modify.
## Using "spec_rstack_overflow=ipbp" may provide stronger security at a greater performance impact.
## Using "spec_rstack_overflow=ibpb" may provide superior protection to the default software-based approach.
## The use of hardware barriers may be more effective while possibly incurring a greater performance loss.
##
#GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX spec_rstack_overflow=safe-ret"