50a9ff6df4
The kernel is moved ahead to version 3.10.0-693.21.1.el7 To summarize: CVE-2017-5753 [bounds check bypass] aka 'Spectre Variant 1' This is fixed by load fences and is "baked in" and cannot be turned off. CVE-2017-5715 [branch target injection] aka 'Spectre Variant 2' This is fixed by a combination of retpolines and IBPB, or IBRS+IBPB if on skylake. This requires a microcode change in the processors. This feature, if on, has a significant performance impact. It is assumed on unless turned off via the "nospectre_v2" bootarg. CVE-2017-5754 [rogue data cache load] aka 'Meltdown' aka 'Variant 3' This is fixed by page table isolation using the Kaiser patches. This feature is assumed on unless turned off via the "nopti" bootarg. As of the commit date, we have changed the installer kickstarts to issue both "nopti nospectre_v2" bootargs to minimize realtime impacts by default. The customer will be able to optionally sacrifice performance for extra security at datafill time. Change-Id: Id7c99923f2ee2ee91f77c7bd9940e684eff8b476 Signed-off-by: Jim Somerville <Jim.Somerville@windriver.com>
48 lines
2.2 KiB
Diff
48 lines
2.2 KiB
Diff
From 944948cf301916d5bccab042853feaadb3e2d7d6 Mon Sep 17 00:00:00 2001
|
|
Message-Id: <944948cf301916d5bccab042853feaadb3e2d7d6.1522099418.git.Jim.Somerville@windriver.com>
|
|
In-Reply-To: <37dfb62264baec527d56aaf20db887840bec1ea1.1522099415.git.Jim.Somerville@windriver.com>
|
|
References: <37dfb62264baec527d56aaf20db887840bec1ea1.1522099415.git.Jim.Somerville@windriver.com>
|
|
From: Alex Kozyrev <alex.kozyrev@windriver.com>
|
|
Date: Thu, 17 Aug 2017 12:37:41 -0400
|
|
Subject: [PATCH 21/32] PM: introduce per-cpu power management
|
|
|
|
Cherry-picking 4 commits from the 4.11 branch of the linux-stable tree.
|
|
All of the patches require small amount of work to apply to TiC kernel.
|
|
Fixes are temporary until we switch to CentOS kernel that includes them.
|
|
|
|
Signed-off-by: Alex Kozyrev <alex.kozyrev@windriver.com>
|
|
Signed-off-by: Jim Somerville <Jim.Somerville@windriver.com>
|
|
---
|
|
SPECS/kernel.spec | 8 ++++++++
|
|
1 file changed, 8 insertions(+)
|
|
|
|
diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec
|
|
index 18da325..d5e7aaf 100644
|
|
--- a/SPECS/kernel.spec
|
|
+++ b/SPECS/kernel.spec
|
|
@@ -439,6 +439,10 @@ Patch40022: cacheinfo-porting-original-4.10.17-version.patch
|
|
Patch40023: cacheinfo-fixing-compilation-issues-on-3.10.patch
|
|
Patch40024: intel-rdt-porting-original-4.10.17-version.patch
|
|
Patch40025: intel-rdt-fixing-compilation-issues-on-3.10.patch
|
|
+Patch40026: stop-seeking-deeper-idle-if-current-state-is-deep-enough.patch
|
|
+Patch40027: add-per-cpu-pm-qos-resume-latency-consideration.patch
|
|
+Patch40028: expose-pm_qos_resume_latency-for-cpus.patch
|
|
+Patch40029: avoid-taking-spinlock-for-accessing-qos-values.patch
|
|
|
|
BuildRoot: %{_tmppath}/kernel-%{KVRA}-root
|
|
|
|
@@ -782,6 +786,10 @@ ApplyOptionalPatch cacheinfo-porting-original-4.10.17-version.patch
|
|
ApplyOptionalPatch cacheinfo-fixing-compilation-issues-on-3.10.patch
|
|
ApplyOptionalPatch intel-rdt-porting-original-4.10.17-version.patch
|
|
ApplyOptionalPatch intel-rdt-fixing-compilation-issues-on-3.10.patch
|
|
+ApplyOptionalPatch stop-seeking-deeper-idle-if-current-state-is-deep-enough.patch
|
|
+ApplyOptionalPatch add-per-cpu-pm-qos-resume-latency-consideration.patch
|
|
+ApplyOptionalPatch expose-pm_qos_resume_latency-for-cpus.patch
|
|
+ApplyOptionalPatch avoid-taking-spinlock-for-accessing-qos-values.patch
|
|
|
|
# Any further pre-build tree manipulations happen here.
|
|
|
|
--
|
|
1.8.3.1
|
|
|