From 363d9c1889a5378a36c28f76c3a2c6e1cc30649a Mon Sep 17 00:00:00 2001 From: Mikaela Suomalainen Date: Sat, 7 Sep 2019 00:20:57 +0300 Subject: [PATCH] operating-systems: add mitigation flags, fix typo MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Jan Pobříslo --- _includes/sections/operating-systems.html | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/_includes/sections/operating-systems.html b/_includes/sections/operating-systems.html index 9dc6d511..ca79428a 100644 --- a/_includes/sections/operating-systems.html +++ b/_includes/sections/operating-systems.html @@ -53,16 +53,17 @@ tor="http://sejnfjrq6szgca7v.onion"
  1. sudo mkdir /etc/default/grub.d/ to create a directory for additional grub configuration
    2. -
  2. echo GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT mds=full,nosmt" | sudo tee /etc/default/grub.d/mds.conf to create a new grub config file source with the echoed content
    3. -
  3. sudo grub-mkconfig -o /boot/grub/grub.cfg to generate a new grub config file including this new kernel boot flag
    4. +
  4. echo GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT l1tf=full,force mds=full,nosmt mitigations=auto,nosmt nosmt=force" | sudo tee /etc/default/grub.d/mitigations.cfg to create a new grub config file source with the echoed content
    5. +
  5. sudo grub-mkconfig -o /boot/grub/grub.cfg to generate a new grub config file including these new kernel boot flags
  6. sudo reboot to reboot
    7. -
  7. after the reboot, check tail -n +1 /sys/devices/system/cpu/vulnerabilities/* again to see that MDS now says "SMT disabled."
    8. +
  8. after the reboot, check tail -n +1 /sys/devices/system/cpu/vulnerabilities/* again to see that everything referring to SMT now says "SMT disabled."
Further reading