Re: [PATCH v3 20/35] x86/bugs: Define attack vectors
From: Borislav Petkov
Date: Wed Feb 26 2025 - 16:03:12 EST
On Wed, Feb 26, 2025 at 12:14:53PM -0800, Pawan Gupta wrote:
> This is a bit ambiguous, mitigations=off,guest_host could be interpreted as
> disabling guest->host and enabling all others. Using attack vectors with
> both =on and =off seems unnecessary.
No, you'll have
mitigations=[global],[separate_vector(s)]
so global can be "on", "off", "auto" and the separate vector enables only that
specific one.
--
Regards/Gruss,
Boris.
https://people.kernel.org/tglx/notes-about-netiquette