operating-systems.html: add a warning for Linux/CPU vulns #1231

Merged
Mikaela merged 14 commits from cpu-vulns into master 2019-08-31 17:05:37 +00:00
1 changed files with 1 additions and 1 deletions
Showing only changes of commit a6f138a383 - Show all commits

View File

@ -55,7 +55,7 @@ tor="http://sejnfjrq6szgca7v.onion"
<ol>
<li><code>sudo mkdir /etc/default/grub.d/</code> to create a directory for additional grub configuration
<li><code>echo GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT mds=full,nosmt" | sudo tee /etc/default/grub.d/mds.conf</code> to create a new grub config file source with the echoed content</li>
<li><code>sudo update-grub</code> to generate a new config file including these kernel flags
<li><code>sudo grub-mkconfig -o /boot/grub/grub.cfg</code> (or on Debian/Ubuntu based distributions <code>sudo update-grub</code> to generate a new config file including this new kernel flag
Mikaela commented 2019-08-30 10:37:50 +00:00 (Migrated from github.com)
Review

I think it's more universal than systemctl reboot

I think it's more universal than `systemctl reboot`
<li><code>sudo reboot</code> to reboot
<li>afterward the reboot check <code>tail -n +1 /sys/devices/system/cpu/vulnerabilities/*</code> again to see that MDS now says SMT disabled.
</ol>