Re: [PATCH v3 20/35] x86/bugs: Define attack vectors

From: Borislav Petkov
Date: Wed Feb 26 2025 - 16:03:12 EST


On Wed, Feb 26, 2025 at 12:14:53PM -0800, Pawan Gupta wrote:
> This is a bit ambiguous, mitigations=off,guest_host could be interpreted as
> disabling guest->host and enabling all others. Using attack vectors with
> both =on and =off seems unnecessary.

No, you'll have

mitigations=[global],[separate_vector(s)]

so global can be "on", "off", "auto" and the separate vector enables only that
specific one.

--
Regards/Gruss,
Boris.

https://people.kernel.org/tglx/notes-about-netiquette