1. Home
  2. slp

Slp's Projects

slp/kernel-ibrs

This is a variant for Fedora's kernel, replacing repoline patches with upstream's IBRS. I built this for myself, as I'm not a big fan of retpoline as a mitigation, but perhaps others may find this useful too. Future kernels from 4.15.x series will provide both mitigations, allowing the user to choose between them. Combined with the latest microcode_ctl package (microcode_ctl-2.1-20.fc27.x86_64), this will get you some (upstream's IBRS patch is still WIP) protection against Spectre variant #2, and a /sys/kernel/debug/x86/ibrs_enabled knob with the same semantics as described in this article: Controlling the Performance Impact of Microcode and Security Patches for CVE-2017-5754 CVE-2017-5715 and CVE-2017-5753 using Red Hat Enterprise Linux Tunables.
  • 1
  • 2

News - Read All

Task Queue

0 Build Batches 0 Importing 0 Pending 0 Starting 41 Running

Recent Builds - View All

libvirt

Project: ligenix/enterprise-sandbox

Build: 2263759

State: failed

Finished: a minute ago

libvirt-test-API

Project: @python/python3.10

Build: 2263546

State: succeeded

Finished: 2 minutes ago

m2crypto

Project: @python/python3.10

Build: 2263548

State: failed

Finished: 2 minutes ago

libtdb

Project: @python/python3.10

Build: 2263541

State: succeeded

Finished: 3 minutes ago