fix(xen): declare Xen's PTI patch as a valid mitigation for variant3

This commit is contained in:
Stéphane Lesimple 2018-02-14 14:24:55 +01:00
parent 66dce2c158
commit 5f914e555e
1 changed files with 1 additions and 1 deletions

View File

@ -1791,7 +1791,7 @@ check_variant3()
elif [ "$xen_pv_domo" = 1 ]; then
pvulnstatus $cve OK "Xen Dom0s are safe and do not require PTI"
elif [ "$xen_pv_domu" = 1 ]; then
pvulnstatus $cve VULN "Xen PV DomUs are vulnerable and need to be run in HVM, PVHVM or PVH mode"
pvulnstatus $cve VULN "Xen PV DomUs are vulnerable and need to be run in HVM, PVHVM, PVH mode, or the Xen hypervisor must have the Xen's own PTI patch"
else
pvulnstatus $cve VULN "PTI is needed to mitigate the vulnerability"
fi