From d361925ba8e7c1f712615e12d4eff678f1f4d59b Mon Sep 17 00:00:00 2001 From: Alexander Popov Date: Thu, 17 Nov 2022 19:39:32 +0300 Subject: [PATCH] Add the srbds check --- kconfig_hardened_check/__init__.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/kconfig_hardened_check/__init__.py b/kconfig_hardened_check/__init__.py index 3986073..4dc9fe7 100644 --- a/kconfig_hardened_check/__init__.py +++ b/kconfig_hardened_check/__init__.py @@ -744,6 +744,8 @@ def add_cmdline_checks(l, arch): CmdlineCheck('self_protection', 'defconfig', 'mds', 'is not set'))] l += [OR(CmdlineCheck('self_protection', 'defconfig', 'tsx_async_abort', 'is not off'), CmdlineCheck('self_protection', 'defconfig', 'tsx_async_abort', 'is not set'))] + l += [OR(CmdlineCheck('self_protection', 'defconfig', 'srbds', 'is not off'), + CmdlineCheck('self_protection', 'defconfig', 'srbds', 'is not set'))] l += [OR(CmdlineCheck('self_protection', 'defconfig', 'mmio_stale_data', 'is not off'), CmdlineCheck('self_protection', 'defconfig', 'mmio_stale_data', 'is not set'))] l += [OR(CmdlineCheck('self_protection', 'defconfig', 'retbleed', 'is not off'), @@ -977,6 +979,9 @@ def normalize_cmdline_options(option, value): if option == 'tsx_async_abort': # See tsx_async_abort_parse_cmdline() in arch/x86/kernel/cpu/bugs.c return value + if option == 'srbds': + # See srbds_parse_cmdline() in arch/x86/kernel/cpu/bugs.c + return value if option == 'mmio_stale_data': # See mmio_stale_data_parse_cmdline() in arch/x86/kernel/cpu/bugs.c return value -- 2.31.1