For certain use cases it is desired to enforce mitigations so they cannot be undone afterwards. That's important for loader stubs which want to prevent a child from disabling the mitigation again. Will also be used for seccomp(). The extra state preserving of the prctl state for SSB is a preparatory step for EBPF dymanic speculation control.
Showing the changes to include/uapi/linux (1 of 5 files). Show all
Unified · Split
| @@ -217,5 +217,6 @@ struct prctl_mm_map { · 216 unmodified lines | |||
| 217 | # define PR_SPEC_PRCTL (1UL << 0) | 217 | # define PR_SPEC_PRCTL (1UL << 0) |
| 218 | # define PR_SPEC_ENABLE (1UL << 1) | 218 | # define PR_SPEC_ENABLE (1UL << 1) |
| 219 | # define PR_SPEC_DISABLE (1UL << 2) | 219 | # define PR_SPEC_DISABLE (1UL << 2) |
| 220 | # define PR_SPEC_FORCE_DISABLE (1UL << 3) | ||
| 220 | 221 | ||
| 221 | #endif /* _LINUX_PRCTL_H */ | 222 | #endif /* _LINUX_PRCTL_H */ |