etc/default/grub.d: add mds.conf for mitigating mds CPU vuln

Ref: #22
This commit is contained in:
Aminda Suomalainen 2019-08-25 20:32:38 +03:00
parent 0aa41a07cf
commit 06c56bbc78
No known key found for this signature in database
GPG Key ID: 0C207F07B2F32B67
1 changed files with 6 additions and 0 deletions

View File

@ -0,0 +1,6 @@
# Enable all mitigation for Microarchitectural Data Sampling attack
# including disabling Simultaneous multithreading
# https://en.wikipedia.org/wiki/Simultaneous_multithreading
# WARNING: This may have performance impact!
# https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html
GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT mds=full,nosmt"