diff options
| author | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2019-02-18 10:11:02 -0800 |
|---|---|---|
| committer | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2019-02-18 10:11:02 -0800 |
| commit | f8382d59108034e6bbbfc151692822a9d5ba0268 (patch) | |
| tree | 63ec67b76df972acbe9236a7e3f04aefc2c1a6b0 | |
| parent | Updated to 4.20.10.a (diff) | |
| download | linux-hardened-ck-f8382d59108034e6bbbfc151692822a9d5ba0268.tar.xz | |
Make Spectre, Meltdown, and L1TF mitigations explicit
| -rw-r--r-- | PKGBUILD | 4 | ||||
| -rw-r--r-- | config.x86_64 | 2 |
2 files changed, 3 insertions, 3 deletions
@@ -26,7 +26,7 @@ _jcpatchversion=1 _gcc_more_v='20180509' _srcname=linux-${_pkgver} pkgver=${_pkgver}.${_hardenedver} -pkgrel=1 +pkgrel=3 url='https://github.com/anthraxx/linux-hardened' #url='http://ck.kolivas.org/patches/' arch=('x86_64') @@ -60,7 +60,7 @@ sha256sums=('53de6be9adfb8899f0a15855f1aef62b8b5a3c5c575196ec8a640a5b8c1c3cf8' '226e30068ea0fecdb22f337391385701996bfbdba37cdcf0f1dbf55f1080542d' 'e7ebf050c22bcec0028c0b3c79fd6d3913b0370ecc6a23dfe78ce475630cf503' '0f81d6e4158b7beeb0eb514f1b9401f7e23699cb0f7b0d513e25dae1815daaeb' - '9474b157ba50e35496481ce242cec2dc288f1920ab6afc0ea513821279985857' + '31ff2c095ff1993ae53a545e9e6f82732c1053f4e68f57e117466b06de4af998' 'ae2e95db94ef7176207c690224169594d49445e04249d2499e9d2fbc117a0b21' '75f99f5239e03238f88d1a834c50043ec32b1dc568f2cc291b07d04718483919' 'ad6344badc91ad0630caacde83f7f9b97276f80d26a20619a87952be65492c65' diff --git a/config.x86_64 b/config.x86_64 index 37d7869..e079ff8 100644 --- a/config.x86_64 +++ b/config.x86_64 @@ -474,7 +474,7 @@ CONFIG_HOTPLUG_CPU=y # CONFIG_LEGACY_VSYSCALL_EMULATE is not set CONFIG_LEGACY_VSYSCALL_NONE=y CONFIG_CMDLINE_BOOL=y -CONFIG_CMDLINE="page_poison=1 slab_nomerge pti=on" +CONFIG_CMDLINE="page_poison=1 slab_nomerge l1tf=full,force pti=on spec_store_bypass_disable=on spectre_v2=on" # CONFIG_CMDLINE_OVERRIDE is not set # CONFIG_MODIFY_LDT_SYSCALL is not set CONFIG_HAVE_LIVEPATCH=y |