For certain use cases it is desired to enforce mitigations so they cannot be undone afterwards. That's important for loader stubs which want to prevent a child from disabling the mitigation again. Will also be used for seccomp(). The extra state preserving of the prctl state for SSB is a preparatory step for EBPF dymanic speculation control.
Showing the changes to include/uapi/linux (1 of 5 files). Show all
Unified · Split
| @@ -217,5 +217,6 @@ struct prctl_mm_map { · 216 unmodified lines | ||
| 217 | 217 | # define PR_SPEC_PRCTL (1UL << 0) |
| 218 | 218 | # define PR_SPEC_ENABLE (1UL << 1) |
| 219 | 219 | # define PR_SPEC_DISABLE (1UL << 2) |
| 220 | +# define PR_SPEC_FORCE_DISABLE (1UL << 3) | |
| 220 | 221 | |
| 221 | 222 | #endif /* _LINUX_PRCTL_H */ |