]> git.itanic.dy.fi Git - linux-stable/commitdiff
x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto
authorJosh Poimboeuf <jpoimboe@kernel.org>
Thu, 11 Apr 2024 05:40:50 +0000 (22:40 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 17 Apr 2024 09:23:41 +0000 (11:23 +0200)
commit 36d4fe147c870f6d3f6602befd7ef44393a1c87a upstream.

Unlike most other mitigations' "auto" options, spectre_bhi=auto only
mitigates newer systems, which is confusing and not particularly useful.

Remove it.

Signed-off-by: Josh Poimboeuf <jpoimboe@kernel.org>
Signed-off-by: Ingo Molnar <mingo@kernel.org>
Reviewed-by: Nikolay Borisov <nik.borisov@suse.com>
Cc: Sean Christopherson <seanjc@google.com>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Link: https://lore.kernel.org/r/412e9dc87971b622bbbaf64740ebc1f140bff343.1712813475.git.jpoimboe@kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Documentation/admin-guide/hw-vuln/spectre.rst
Documentation/admin-guide/kernel-parameters.txt
arch/x86/Kconfig
arch/x86/kernel/cpu/bugs.c

index 081f289008987370c57cf5ceafe385915d68c1e0..e0a1be97fa75985860bbec11d0be2db61ba64790 100644 (file)
@@ -669,10 +669,6 @@ kernel command line.
                        needed.
                off
                        Disable the mitigation.
-               auto
-                       Enable the HW mitigation if needed, but
-                       *don't* enable the SW mitigation except for KVM.
-                       The system may be vulnerable.
 
 For spectre_v2_user see Documentation/admin-guide/kernel-parameters.txt
 
index 9770a9168a7da9dcc2ae0aff03c4ce8ced9f9c8f..31fdaf4fe9dd897b5d55e1303c3269916ff4ad2a 100644 (file)
                        on   - (default) Enable the HW or SW mitigation
                               as needed.
                        off  - Disable the mitigation.
-                       auto - Enable the HW mitigation if needed, but
-                              *don't* enable the SW mitigation except
-                              for KVM.  The system may be vulnerable.
 
        spectre_v2=     [X86] Control mitigation of Spectre variant 2
                        (indirect branch speculation) vulnerability.
index 890ba8e48bc39ce3b72df5ba5dccf70f0607ab6b..498ae74b597fb3db0a9b73f2d4fbfdcd19f9b8fa 100644 (file)
@@ -2630,10 +2630,6 @@ config SPECTRE_BHI_OFF
        bool "off"
        help
          Equivalent to setting spectre_bhi=off command line parameter.
-config SPECTRE_BHI_AUTO
-       bool "auto"
-       help
-         Equivalent to setting spectre_bhi=auto command line parameter.
 
 endchoice
 
index 5883fa2e1f704aba59bdec609800d92de34a48fb..9bcc898dcc757d3d1967332163889dbc0aa7b779 100644 (file)
@@ -1624,13 +1624,10 @@ static bool __init spec_ctrl_bhi_dis(void)
 enum bhi_mitigations {
        BHI_MITIGATION_OFF,
        BHI_MITIGATION_ON,
-       BHI_MITIGATION_AUTO,
 };
 
 static enum bhi_mitigations bhi_mitigation __ro_after_init =
-       IS_ENABLED(CONFIG_SPECTRE_BHI_ON)  ? BHI_MITIGATION_ON  :
-       IS_ENABLED(CONFIG_SPECTRE_BHI_OFF) ? BHI_MITIGATION_OFF :
-                                            BHI_MITIGATION_AUTO;
+       IS_ENABLED(CONFIG_SPECTRE_BHI_ON) ? BHI_MITIGATION_ON : BHI_MITIGATION_OFF;
 
 static int __init spectre_bhi_parse_cmdline(char *str)
 {
@@ -1641,8 +1638,6 @@ static int __init spectre_bhi_parse_cmdline(char *str)
                bhi_mitigation = BHI_MITIGATION_OFF;
        else if (!strcmp(str, "on"))
                bhi_mitigation = BHI_MITIGATION_ON;
-       else if (!strcmp(str, "auto"))
-               bhi_mitigation = BHI_MITIGATION_AUTO;
        else
                pr_err("Ignoring unknown spectre_bhi option (%s)", str);
 
@@ -1672,9 +1667,6 @@ static void __init bhi_select_mitigation(void)
        setup_force_cpu_cap(X86_FEATURE_CLEAR_BHB_LOOP_ON_VMEXIT);
        pr_info("Spectre BHI mitigation: SW BHB clearing on vm exit\n");
 
-       if (bhi_mitigation == BHI_MITIGATION_AUTO)
-               return;
-
        /* Mitigate syscalls when the mitigation is forced =on */
        setup_force_cpu_cap(X86_FEATURE_CLEAR_BHB_LOOP);
        pr_info("Spectre BHI mitigation: SW BHB clearing on syscall\n");