23
Attack Vector Controls Land In Linux 6.17 To Better Control CPU Security Mitigations (www.phoronix.com)
submitted 1 year ago by to c/linux@programming.dev
comment fedilink hide all child comments

no comments (yet)

sorted by: hot top controversial new old
there doesn't seem to be anything here
5 comments in c/linux@lemmy.ml view that post
[–] 8 points 1 year ago

The Attack Vector Controls work is now in Linux 6.17 for those new tuning knobs worked on by AMD engineer David Kaplan to make it more straight-forward for Linux server administrators and power users to more easily select the CPU security mitigations relevant to their system(s) and intended workloads

Title makes more sense in context of the first couple paragraphs.

  • permalink
  • fedilink
  • source
    •
    [–] 6 points 1 year ago (3 children)

    Title make little sense to me.

  • permalink
  • fedilink
  • source
  • hideshow 3 child comments
    •
  • [–] 4 points 1 year ago (2 children)

    A lot of the security fixes since spectre have focused on exploiting speculative execution (a key CPU performance feature) to cross security boundaries. Defeating speculative execution when switching from user to kernel space (for example) adds a lot of overhead.

    The new kernel add controls so that machines that don't need to worry about these exploits to disable the performance killing fixes.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 1 year ago (1 child)

    I get the concept. Title is written so badly that's really unreadable make no sense and confuses even people who know a bit on the subject.

    The word "land" should be relaces, because it stck with controls and lose its meaning. Also, repeating control again adds to the mess.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •