stx-puppet/puppet-manifests/centos
Jim Somerville 0c13c06b02 Security: Add nospectre_v1 to the security params
Most of the v1 mitigation is baked into the kernel and not
optional.  The swapgs barriers are, however, optional.
They have a negative performance impact so we disable them
by using the nospectre_v1 kernel bootarg.

Partial-Bug: 1860193
Depends-On: https://review.opendev.org/#/c/705300
Signed-off-by: Jim Somerville <Jim.Somerville@windriver.com>
(cherry picked from commit 950670ac1f)

Change-Id: I8472e7fc4fbf5b3e01b56b79eba7feda315d29cf
2020-01-31 16:37:30 -05:00
..
build_srpm.data Security: Add nospectre_v1 to the security params 2020-01-31 16:37:30 -05:00
puppet-manifests.spec Keystone DB sync - update puppet manifest for dcdbsync service 2019-04-30 14:41:20 -04:00