peter/spectre-meltdown-checker
peter
/
spectre-meltdown-checker
mirror of https://github.com/speed47/spectre-meltdown-checker.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

detect kpti directly in vmlinux if option is not there

This commit is contained in:
Stéphane Lesimple 2018-01-07 22:47:41 +01:00
parent 9def0c949a
commit 05c79425ab
1 changed files with 12 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
spectre-meltdown-checker.sh
View File

@ -1,7 +1,7 @@
#! /bin/sh
# Spectre & Meltdown checker
# Stephane Lesimple
VERSION=0.07
VERSION=0.08
pstatus()
{
@ -95,7 +95,6 @@ else
pstatus green YES "$nb_lfence opcodes found, which is >= 60"
status=2
fi
rm -f $vmlinux
fi
fi
@ -218,6 +217,14 @@ elif [ -e /boot/System.map-$(uname -r) ]; then
else
pstatus red NO
fi
elif [ -n "$vmlinux" ]; then
# some backports don't have the option but still have the patch, try to find out
if strings "$vmlinux" | grep -qw nopti; then
pstatus green YES
kpti_support=1
else
pstatus red NO
fi
else
pstatus yellow UNKNOWN "couldn't read your kernel configuration"
fi
@ -226,7 +233,7 @@ fi
if grep ^flags /proc/cpuinfo | grep -qw pti; then
pstatus green YES
kpti_enabled=1
elif dmesg | grep -q 'Kernel/User page tables isolation: enabled'; then
elif dmesg | grep -Eq 'Kernel/User page tables isolation: enabled|Kernel page table isolation enabled'; then
pstatus green YES
kpti_enabled=1
else
@ -249,3 +256,5 @@ if [ "$USER" != root ]; then
/bin/echo "You can try the following command: sudo $0"
fi
[ -n "$vmlinux" ] && rm -f "$vmlinux"