starlingx/integ
Code Issues Proposed changes
integ/kernel-std/centos/meta_patches/Cleanup-TIC-patch-list-for-CentOS-7.4-port.patch
Jim Somerville 50a9ff6df4 Kernel Upgrades for Meltdown and Spectre 
The kernel is moved ahead to version 3.10.0-693.21.1.el7

To summarize:

CVE-2017-5753 [bounds check bypass] aka 'Spectre Variant 1'
This is fixed by load fences and is "baked in" and cannot
be turned off.

CVE-2017-5715 [branch target injection] aka 'Spectre Variant 2'
This is fixed by a combination of retpolines and IBPB, or
IBRS+IBPB if on skylake.  This requires a microcode change in
the processors.  This feature, if on, has a significant performance
impact.  It is assumed on unless turned off via the
"nospectre_v2" bootarg.

CVE-2017-5754 [rogue data cache load] aka 'Meltdown' aka 'Variant 3'
This is fixed by page table isolation using the Kaiser patches.
This feature is assumed on unless turned off via the
"nopti" bootarg.

As of the commit date, we have changed the installer kickstarts
to issue both "nopti nospectre_v2" bootargs to minimize realtime
impacts by default.  The customer will be able to optionally
sacrifice performance for extra security at datafill time.

Change-Id: Id7c99923f2ee2ee91f77c7bd9940e684eff8b476
Signed-off-by: Jim Somerville <Jim.Somerville@windriver.com>
2018-06-22 12:53:11 -04:00

77 lines
4.3 KiB
Diff
Raw Blame History

From 93d50ee36287ea51a6e10bf2689058e5d7b5ed64 Mon Sep 17 00:00:00 2001
Message-Id: <93d50ee36287ea51a6e10bf2689058e5d7b5ed64.1522099419.git.Jim.Somerville@windriver.com>
In-Reply-To: <37dfb62264baec527d56aaf20db887840bec1ea1.1522099415.git.Jim.Somerville@windriver.com>
References: <37dfb62264baec527d56aaf20db887840bec1ea1.1522099415.git.Jim.Somerville@windriver.com>
From: Jim Somerville <Jim.Somerville@windriver.com>
Date: Thu, 5 Oct 2017 17:27:15 -0400
Subject: [PATCH 26/32] Cleanup TIC patch list for CentOS 7.4 port
Signed-off-by: Jim Somerville <Jim.Somerville@windriver.com>
---
SPECS/kernel.spec | 40 ++++++++++++++++------------------------
1 file changed, 16 insertions(+), 24 deletions(-)
diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec
index e72feaa..d1dc5bf 100644
--- a/SPECS/kernel.spec
+++ b/SPECS/kernel.spec
@@ -436,19 +436,15 @@ Patch40013: Enable-building-kernel-with-CONFIG_BLK_DEV_NBD.patch
Patch40014: x86-make-dma_alloc_coherent-return-zeroed-memory-if-.patch
Patch40015: arch-x86-kernel-pci-dma.c-fix-dma_generic_alloc_cohe.patch
Patch40016: rcu-Don-t-wake-rcuc-X-kthreads-on-NOCB-CPUs.patch
-Patch40022: cacheinfo-porting-original-4.10.17-version.patch
-Patch40023: cacheinfo-fixing-compilation-issues-on-3.10.patch
-Patch40024: intel-rdt-porting-original-4.10.17-version.patch
-Patch40025: intel-rdt-fixing-compilation-issues-on-3.10.patch
-Patch40026: stop-seeking-deeper-idle-if-current-state-is-deep-enough.patch
-Patch40027: add-per-cpu-pm-qos-resume-latency-consideration.patch
-Patch40028: expose-pm_qos_resume_latency-for-cpus.patch
-Patch40029: avoid-taking-spinlock-for-accessing-qos-values.patch
-Patch40030: nfsd-check-for-oversized-NFSv2-v3-arguments.patch
-Patch40031: nfsd4-minor-NFSv2-v3-write-decoding-cleanup.patch
-Patch40032: nfsd-stricter-decoding-of-write-like-NFSv2-v3-ops.patch
-Patch40033: US101216-IMA-support-in-Titanium-kernel.patch
-Patch40036: US103091-IMA-System-Configuration.patch
+Patch40017: Porting-Cacheinfo-from-Kernel-4.10.17.patch
+Patch40018: Fix-cacheinfo-compilation-issues-for-3.10.patch
+Patch40019: cpuidle-menu-stop-seeking-deeper-idle-if-current-sta.patch
+Patch40020: cpuidle-menu-add-per-CPU-PM-QoS-resume-latency-consi.patch
+Patch40021: CPU-PM-expose-pm_qos_resume_latency-for-CPUs.patch
+Patch40022: cpuidle-menu-Avoid-taking-spinlock-for-accessing-QoS.patch
+Patch40023: US101216-IMA-support-in-Titanium-kernel.patch
+Patch40024: US103091-IMA-System-Configuration.patch
+Patch40025: Fix-CentOS-mistake-thinking-that-Xen-is-always-enabl.patch
BuildRoot: %{_tmppath}/kernel-%{KVRA}-root
@@ -788,19 +784,15 @@ ApplyOptionalPatch Enable-building-kernel-with-CONFIG_BLK_DEV_NBD.patch
ApplyOptionalPatch x86-make-dma_alloc_coherent-return-zeroed-memory-if-.patch
ApplyOptionalPatch arch-x86-kernel-pci-dma.c-fix-dma_generic_alloc_cohe.patch
ApplyOptionalPatch rcu-Don-t-wake-rcuc-X-kthreads-on-NOCB-CPUs.patch
-ApplyOptionalPatch cacheinfo-porting-original-4.10.17-version.patch
-ApplyOptionalPatch cacheinfo-fixing-compilation-issues-on-3.10.patch
-ApplyOptionalPatch intel-rdt-porting-original-4.10.17-version.patch
-ApplyOptionalPatch intel-rdt-fixing-compilation-issues-on-3.10.patch
-ApplyOptionalPatch stop-seeking-deeper-idle-if-current-state-is-deep-enough.patch
-ApplyOptionalPatch add-per-cpu-pm-qos-resume-latency-consideration.patch
-ApplyOptionalPatch expose-pm_qos_resume_latency-for-cpus.patch
-ApplyOptionalPatch avoid-taking-spinlock-for-accessing-qos-values.patch
-ApplyOptionalPatch nfsd-check-for-oversized-NFSv2-v3-arguments.patch
-ApplyOptionalPatch nfsd4-minor-NFSv2-v3-write-decoding-cleanup.patch
-ApplyOptionalPatch nfsd-stricter-decoding-of-write-like-NFSv2-v3-ops.patch
+ApplyOptionalPatch Porting-Cacheinfo-from-Kernel-4.10.17.patch
+ApplyOptionalPatch Fix-cacheinfo-compilation-issues-for-3.10.patch
+ApplyOptionalPatch cpuidle-menu-stop-seeking-deeper-idle-if-current-sta.patch
+ApplyOptionalPatch cpuidle-menu-add-per-CPU-PM-QoS-resume-latency-consi.patch
+ApplyOptionalPatch CPU-PM-expose-pm_qos_resume_latency-for-CPUs.patch
+ApplyOptionalPatch cpuidle-menu-Avoid-taking-spinlock-for-accessing-QoS.patch
ApplyOptionalPatch US101216-IMA-support-in-Titanium-kernel.patch
ApplyOptionalPatch US103091-IMA-System-Configuration.patch
+ApplyOptionalPatch Fix-CentOS-mistake-thinking-that-Xen-is-always-enabl.patch
# Any further pre-build tree manipulations happen here.
--
1.8.3.1
View Git Blame Copy Permalink