freebsd-skq/tools/build/options/WITHOUT_KERNEL_RETPOLINE
Ed Maste e9093b66d5 Add kernel retpoline option for amd64
Retpoline is a compiler-based mitigation for CVE-2017-5715, also known
as Spectre V2, that protects against speculative execution branch target
injection attacks.

In this commit it is disabled by default, but will be changed in a
followup commit.

Reviewed by:	bdrewery (previous version)
MFC after:	3 days
Security:	CVE-2017-5715
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D14242
2018-02-28 14:57:45 +00:00

4 lines
95 B
Plaintext

.\" $FreeBSD$
Set to disable the "retpoline" mitigation for CVE-2017-5715 in the kernel
build.