peter/spectre-meltdown-checker
peter
/
spectre-meltdown-checker
mirror of https://github.com/speed47/spectre-meltdown-checker.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

L1TF/Linux: fix EPT on/off detection against sysfs 

Checking whether or not EPT is enabled, happens via /sys.

We should therefore also make sure that we do that when being
invoked with no options, and with `--sysfs-only`, and that we
don't when invoked with `--no-sysfs`.
This commit is contained in:
Dario Faggioli 2019-04-18 17:54:27 +02:00
parent 0421aea53f
commit 5e35f0a711
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
spectre-meltdown-checker.sh
View File

@ -3845,7 +3845,9 @@ check_CVE_2018_3646_linux()
fi
fi
if [ "$opt_sysfs_only" != 1 ]; then
# until we find it is actually off, let's assume enabled
ept_disabled=0
if [ "$opt_no_sysfs" != 1 ]; then
_info "* Mitigation 1 (KVM)"
_info_nol " * EPT is disabled: "
if [ "$opt_live" = 1 ]; then
@ -3860,7 +3862,9 @@ check_CVE_2018_3646_linux()
else
pstatus blue N/A "not testable in offline mode"
fi
fi
if [ "$opt_sysfs_only" != 1 ]; then
_info "* Mitigation 2"
_info_nol " * L1D flush is supported by kernel: "
if [ "$opt_live" = 1 ] && grep -qw flush_l1d "$procfs/cpuinfo"; then