On 10/14/16 7:29 , Steve wrote: > Hi everyone, > > I've been out of the loop on CPUs/MB's and now being in need of a new > system I've started to put one together. Turns out Intel have added a > new CPU security feature called OS Guard which prevents "wrong" O/S from > even booting. > > As I'm searching for answers I see that Linux has progress on this but > I'm not sure if SmartOS does or it may even be made a moot point by some > new development from the stuff I've found so far.
Hi, From what little I can find on this, Intel 'OS Guard' is the marketing name for the SMEP and SMAP features of the processor. In other words Supervisor Mode Execution Protection and Supervisor Mode Access Protection. These are designed to prevent exploits from being able to access and execute user data. SmartOS and illumos has full support for these, I implemented it. SMAP landed in https://github.com/joyent/illumos-joyent/commit/0b74b7926a52d8b5aac502670b436e5c8d0b15aa and SMEP landed in https://github.com/joyent/illumos-joyent/commit/44bc3e71d46ec034fcc883a7157967b4b8918b05. Robert ------------------------------------------- smartos-discuss Archives: https://www.listbox.com/member/archive/184463/=now RSS Feed: https://www.listbox.com/member/archive/rss/184463/25769125-55cfbc00 Modify Your Subscription: https://www.listbox.com/member/?member_id=25769125&id_secret=25769125-7688e9fb Powered by Listbox: http://www.listbox.com
