Re: [Patch v6 14/16] x86/speculation: Use STIBP to restrict speculation on non-dumpable task

From: Linus Torvalds
Date: Wed Nov 21 2018 - 14:32:40 EST


On Wed, Nov 21, 2018 at 9:41 AM Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx> wrote:
>
> When STIBP is on, it will prevent not only untrusted code from attacking,
> but also trusted code from getting attacked. So non-dumpable task running
> with STIBP will protect itself from attacks from code running on sibling CPU.

I understand.

You didn't read my email about why "dumpable" is not sensible.

Linus