MDS mitigation added, a while ago – DragonFly BSD Digest

MDS mitigation added, a while ago

I’m still backlogged, so here’s a May 14th mitigation in DragonFly for MDS attacks possible with Intel CPUs from 2011 onward. It’s in the current release.

3 Replies to “MDS mitigation added, a while ago”

LetMeFreshBSDthatForYou says:

2019/06/25 at 04:30

Is there a list which sysctl I have to set to be safe from all the CPU flaws?
Eric Olson says:

2019/06/25 at 14:39

Similarly, is there a list of settings to turn off if already running in a secured environment and want to turn off all those performance losing mitigations.
Justin Sherrill says:

2019/06/25 at 16:00

Hmm. No, I don’t have a list. You can create one by going through my posts on the topic, if I managed to catch all the changes – which I think I did.

Some of them default to on, and some default to off because of the performance impact, so each has to be evaluated.

Comments are closed.