Re: [PATCH 9/9] x86/spec-ctrl: Hide RDRAND by default on IvyBridge

2020-06-17 Thread Andrew Cooper
On 17/06/2020 11:39, Jan Beulich wrote: > On 16.06.2020 18:26, Andrew Cooper wrote: >> On 16/06/2020 11:00, Jan Beulich wrote: >>> On 15.06.2020 16:15, Andrew Cooper wrote: --- a/tools/libxc/xc_cpuid_x86.c +++ b/tools/libxc/xc_cpuid_x86.c @@ -503,6 +503,9 @@ int xc_cpuid_apply_policy

Re: [PATCH 9/9] x86/spec-ctrl: Hide RDRAND by default on IvyBridge

2020-06-17 Thread Jan Beulich
On 16.06.2020 18:26, Andrew Cooper wrote: > On 16/06/2020 11:00, Jan Beulich wrote: >> On 15.06.2020 16:15, Andrew Cooper wrote: >>> --- a/tools/libxc/xc_cpuid_x86.c >>> +++ b/tools/libxc/xc_cpuid_x86.c >>> @@ -503,6 +503,9 @@ int xc_cpuid_apply_policy(xc_interface *xch, uint32_t >>> domid, bool r

Re: [PATCH 9/9] x86/spec-ctrl: Hide RDRAND by default on IvyBridge

2020-06-16 Thread Andrew Cooper
On 16/06/2020 11:00, Jan Beulich wrote: > On 15.06.2020 16:15, Andrew Cooper wrote: >> --- a/docs/misc/xen-command-line.pandoc >> +++ b/docs/misc/xen-command-line.pandoc >> @@ -512,11 +512,21 @@ The Speculation Control hardware features >> `srbds-ctrl`, `md-clear`, `ibrsb`, >> `stibp`, `ibpb`, `l

Re: [PATCH 9/9] x86/spec-ctrl: Hide RDRAND by default on IvyBridge

2020-06-16 Thread Jan Beulich
On 15.06.2020 16:15, Andrew Cooper wrote: > --- a/docs/misc/xen-command-line.pandoc > +++ b/docs/misc/xen-command-line.pandoc > @@ -512,11 +512,21 @@ The Speculation Control hardware features `srbds-ctrl`, > `md-clear`, `ibrsb`, > `stibp`, `ibpb`, `l1d-flush` and `ssbd` are used by default if ava