freebsd-nq/sys
Colin Percival 8b4553119e Adjust dangerous-shared-cache-detection logic from "all shared data
caches are dangerous" to "a shared L1 data cache is dangerous".  This
is a compromise between paranoia and performance: Unlike the L1 cache,
nobody has publicly demonstrated a cryptographic side channel which
exploits the L2 cache -- this is harder due to the larger size, lower
bandwidth, and greater associativity -- and prohibiting shared L2
caches turns Intel Core Duo processors into Intel Core Solo processors.

As before, the 'machdep.hyperthreading_allowed' sysctl will allow even
the L1 data cache to be shared.

Discussed with:	jhb, scottl
Security:	See FreeBSD-SA-05:09.htt for background material.
2006-04-24 21:17:01 +00:00
..
alpha Move AHC_REG_PRETTY_PRINT and AHD_REG_PRETTY_PRINT below 2006-04-24 08:44:34 +00:00
amd64 Adjust dangerous-shared-cache-detection logic from "all shared data 2006-04-24 21:17:01 +00:00
arm MFother arches : 2006-04-22 22:51:32 +00:00
boot MFp4: 2006-04-21 13:58:51 +00:00
bsm Update src/sys/bsm for OpenBSM 1.0 alpha 5 changes: 2006-03-04 16:54:21 +00:00
cam Actually check to see if XPT_CALC_GEOMETRY had an error 2006-04-18 22:01:59 +00:00
coda CODA_COMPAT_5 may not be defined unconditionally in the coda5 module. 2006-02-27 12:04:13 +00:00
compat Annotate uses of fgetsock() with indications that they should rely 2006-04-01 15:25:01 +00:00
conf MFi386: revision 1.554 (add minidump_machdep.c). 2006-04-21 12:13:11 +00:00
contrib fix "ipf -Z" reporting rubbish and possibly panic'ing box 2006-04-18 13:24:14 +00:00
crypto padlock(4) doesn't support explicitly provided keys yet. 2006-04-20 06:31:44 +00:00
ddb Use LIST_FOREACH(). 2006-04-21 20:39:51 +00:00
dev MFp4: Calculate the divisor before setting the DLAB bit. This 2006-04-23 21:15:07 +00:00
doc
fs Remove unused prototypes. 2006-04-12 12:17:29 +00:00
gdb add support for copying console messages to a remote gdb 2006-03-23 23:06:14 +00:00
geom geli(8) provides keys on newsession time, so remove CRD_F_KEY_EXPLICIT flag 2006-04-20 06:33:46 +00:00
gnu Repair ext2fs writes. 2006-04-13 19:37:32 +00:00
i4b Fix -Wundef warnings found when compiling i386 LINT, GENERIC and 2005-12-05 11:58:35 +00:00
i386 Adjust dangerous-shared-cache-detection logic from "all shared data 2006-04-24 21:17:01 +00:00
ia64 In nexus_teardown_intr(), actually remove the handler. 2006-04-21 16:12:28 +00:00
isa Committed the xbox syscons(8)-able console driver. 2006-03-03 14:52:57 +00:00
isofs/cd9660 When encountering a ISO_SUSP_CFLAG_ROOT element in Rock Ridge 2006-03-13 22:32:33 +00:00
kern Inherit LOCAL_CREDS option from listen socket for sockets returned 2006-04-24 19:09:33 +00:00
libkern Convert function declarations to ANSI C. 2006-01-22 00:46:40 +00:00
modules Import ACPI Dock Station support. Note that this is still very young. 2006-04-15 12:31:34 +00:00
net Use ANSI C function protypes and declarations for if_arcsubr. 2006-04-12 07:44:31 +00:00
net80211 implement set(IEEE80211_IOC_STA_STATS) for hostapd; for 2006-03-27 05:22:35 +00:00
netatalk White space consistency with kasserts. Minor style tweaks. 2006-04-01 16:54:37 +00:00
netatm Chance protocol switch method pru_detach() so that it returns void 2006-04-01 15:42:02 +00:00
netgraph Correct assertion in ng_detach(). 2006-04-06 02:54:42 +00:00
netinet Instead of calling tcp_usr_detach() from tcp_usr_abort(), break out 2006-04-24 08:20:02 +00:00
netinet6 Modify in6_pcbpurgeif0() to accept a pcbinfo structure rather than a pcb 2006-04-23 15:06:16 +00:00
netipsec Hide net.inet.ipsec.test_{replay,integrity} sysctls under #ifdef REGRESSION. 2006-04-10 15:04:36 +00:00
netipx Make this compile without INVARIANTS. 2006-04-11 23:15:47 +00:00
netkey In raw and raw-derived socket types, maintain and enforce invariant that 2006-04-01 15:55:44 +00:00
netnatm style(9) treatment following fixups. 2006-04-23 16:33:56 +00:00
netncp In ncp_sysctl_connstat(), the SLIST_FOREACH() logic to check 'error' 2006-01-14 11:40:32 +00:00
netsmb Retire NETSMBCRYPTO as a kernel option and make its functionality 2006-03-05 22:52:17 +00:00
nfs
nfs4client Use nfs4_disconnect for connections opened with nfs4_connect. 2006-01-19 22:48:31 +00:00
nfsclient Keep track of the number of in-progress async direct IO writes in the nfsnode. 2006-04-06 01:20:30 +00:00
nfsserver Introduce a new MAC entry point for label initialization of the NFS daemon's 2006-04-06 23:33:11 +00:00
opencrypto Be sure to wakeup the crypto thread when new request was queued. 2006-04-11 18:01:04 +00:00
pc98 Add minidump.h for pc98. 2006-04-21 12:13:59 +00:00
pccard I don't believe these are used at all, and can be safely removed 2006-01-15 06:49:28 +00:00
pci Add support for RTL8111B chip, that can be found on some mainboards, 2006-03-22 07:33:03 +00:00
posix4 Use proc lock to prevent a thread from exiting, Giant was no longer used to 2006-04-10 04:55:59 +00:00
powerpc Set the rid for any resource obtained from rman_resource_reserve. 2006-04-20 04:19:10 +00:00
rpc Fix up some cut-n-paste damage and some out-of-date comments. 2006-01-20 15:20:41 +00:00
security Add some new options to mac_bsdestended. We can now match on: 2006-04-23 17:06:18 +00:00
sparc64 Move AHC_REG_PRETTY_PRINT and AHD_REG_PRETTY_PRINT below 2006-04-24 08:44:34 +00:00
sys Bump __FreeBSD_version to reflect the addition of fcloseall() to libc. 2006-04-22 15:12:50 +00:00
tools Fix a leftover "iwi_boot" string. 2006-01-30 16:32:08 +00:00
ufs Revert previous to this file before an actual request is made. 2006-04-22 04:22:15 +00:00
vm It seems that POSIX would rather ENODEV returned in place of EINVAL when 2006-04-21 07:17:25 +00:00
Makefile Reimplementation of world/kernel build options. For details, see: 2006-03-17 18:54:44 +00:00