freebsd-dev/sys/x86
Ed Maste b3327f62f0 Enable KPTI by default on amd64 for non-AMD CPUs
Kernel Page Table Isolation (KPTI) was introduced in r328083 as a
mitigation for the 'Meltdown' vulnerability.  AMD CPUs are not affected,
per https://www.amd.com/en/corporate/speculative-execution:

    We believe AMD processors are not susceptible due to our use of
    privilege level protections within paging architecture and no
    mitigation is required.

Thus default KPTI to off for AMD CPUs, and to on for others.  This may
be refined later as we obtain more specific information on the sets of
CPUs that are and are not affected.

Submitted by:	Mitchell Horne
Reviewed by:	cem
Relnotes:	Yes
Security:	CVE-2017-5754
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D13971
2018-01-19 15:42:34 +00:00
..
acpica Move VM_NUMA_ALLOC and DEVICE_NUMA under the single global config option NUMA. 2018-01-14 03:36:03 +00:00
bios sys/x86: further adoption of SPDX licensing ID tags. 2017-11-27 15:11:47 +00:00
cpufreq x86: make some use of mallocarray(9). 2018-01-15 21:08:22 +00:00
include Enable KPTI by default on amd64 for non-AMD CPUs 2018-01-19 15:42:34 +00:00
iommu Add support for NUMA domains to bus dma tags. This causes all memory 2018-01-12 23:34:16 +00:00
isa PTI for amd64. 2018-01-17 11:44:21 +00:00
pci sys/x86: further adoption of SPDX licensing ID tags. 2017-11-27 15:11:47 +00:00
x86 Enable KPTI by default on amd64 for non-AMD CPUs 2018-01-19 15:42:34 +00:00
xen sys/x86: further adoption of SPDX licensing ID tags. 2017-11-27 15:11:47 +00:00