seccomp: Move speculation migitation control to arch code

Browse source

commit 8bf37d8c06 upstream.

The migitation control is simpler to implement in architecture code as it
avoids the extra function call to check the mode. Aside of that having an
explicit seccomp enabled mode in the architecture mitigations would require
even more workarounds.

Move it into architecture code and provide a weak function in the seccomp
code. Remove the 'which' argument as this allows the architecture to decide
which mitigations are relevant for seccomp.

Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
[bwh: Backported to 3.16: adjust context]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

...

This commit is contained in:

Thomas Gleixner 2018-05-04 15:12:06 +02:00 • committed by Ben Hutchings

parent 92856049f6

commit 34be01c449

3 changed files with 22 additions and 24 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

29

arch/x86/kernel/cpu/bugs.c

View file

2

include/linux/nospec.h

View file

15

kernel/seccomp.c

View file