spectre-and-meltdown-security-kernel-upgrades

You think you have found a bug? Let us know about it.
User avatar
simone
Posts: 19
Joined: 24. Sep 2016, 14:36

spectre-and-meltdown-security-kernel-upgrades

Post by simone » 23. Jan 2018, 09:12

There is a lot of concern in the linux gnu community for the bug
https://www.theregister.co.uk/2018/01/0 ... explained/

Debian and also Slackware, have provided some patches to solve the problem, is there a patch for Salixos, or do you need to install the patched kernel from Slackware?

Thanks

User avatar
gapan
Salix Wizard
Posts: 5528
Joined: 6. Jun 2009, 17:40

Re: spectre-and-meltdown-security-kernel-upgrades

Post by gapan » 23. Jan 2018, 09:30

simone wrote:There is a lot of concern in the linux gnu community for the bug
https://www.theregister.co.uk/2018/01/0 ... explained/

Debian and also Slackware, have provided some patches to solve the problem, is there a patch for Salixos, or do you need to install the patched kernel from Slackware?

Thanks
You need to install the patched kernel available in the Salix repositories, which is the same as the patched kernel from Slackware.
Image
Image

User avatar
simone
Posts: 19
Joined: 24. Sep 2016, 14:36

Re: spectre-and-meltdown-security-kernel-upgrades

Post by simone » 23. Jan 2018, 11:59

Thanks Gapan!

Can the kernel-headers also be updated?

User avatar
gapan
Salix Wizard
Posts: 5528
Joined: 6. Jun 2009, 17:40

Re: spectre-and-meltdown-security-kernel-upgrades

Post by gapan » 23. Jan 2018, 12:16

Yes.
Image
Image

User avatar
mimosa
Salix Warrior
Posts: 3096
Joined: 25. May 2010, 17:02
Contact:

Re: spectre-and-meltdown-security-kernel-upgrades

Post by mimosa » 23. Jan 2018, 13:21

Don't forget to update the bootloader before rebooting. Anyone in doubt, check the instructions in the wiki.

User avatar
simone
Posts: 19
Joined: 24. Sep 2016, 14:36

Re: spectre-and-meltdown-security-kernel-upgrades

Post by simone » 23. Jan 2018, 14:44

mimosa wrote:Don't forget to update the bootloader before rebooting. Anyone in doubt, check the instructions in the wiki.
Thanks!

I gave
$ sudo eliloconfig
simone[~]$ uname -r
4.4.111
;)

User avatar
Luffy
Posts: 41
Joined: 3. Jul 2017, 22:03

Re: spectre-and-meltdown-security-kernel-upgrades

Post by Luffy » 25. Jan 2018, 22:16

I wonder if the CONFIG_PAGE_TABLE_ISOLATION (KPTI) is available only for x86_64.

Code: Select all

> uname -r
4.4.111-smp

> cat /proc/cpuinfo
processor       : 0
vendor_id       : GenuineIntel
cpu family      : 15
model           : 2
model name      : Intel(R) Pentium(R) 4 CPU 2.80GHz
stepping        : 9
microcode       : 0x17
cpu MHz         : 2800.035
cache size      : 512 KB
physical id     : 0
siblings        : 1
core id         : 0
cpu cores       : 1
apicid          : 0
initial apicid  : 0
fdiv_bug        : no
f00f_bug        : no
coma_bug        : no
fpu             : yes
fpu_exception   : yes
cpuid level     : 2
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov
pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe pebs bts cid xtpr
[b]bugs            :[/b]
bogomips        : 5600.07
clflush size    : 64
cache_alignment : 128
address sizes   : 36 bits physical, 32 bits virtual
power management:

User avatar
gapan
Salix Wizard
Posts: 5528
Joined: 6. Jun 2009, 17:40

Re: spectre-and-meltdown-security-kernel-upgrades

Post by gapan » 26. Jan 2018, 07:18

I don't have access to a 32bit system at this moment, but it should make no difference. You should be patched if you have upgraded to the latest kernel availabe in the repos.
Image
Image

User avatar
Luffy
Posts: 41
Joined: 3. Jul 2017, 22:03

Re: spectre-and-meltdown-security-kernel-upgrades

Post by Luffy » 27. Jan 2018, 19:14

Hi, gapan,
It is not available in /boot/config-huge-smp-4.4.111-smp :( ... I will wait a few months for my processor type to catch up. :lol:

Saludos.

User avatar
gaucho
Donor
Posts: 90
Joined: 23. Dec 2010, 19:12

Re: spectre-and-meltdown-security-kernel-upgrades

Post by gaucho » 28. Jan 2018, 21:16

Hi, gapan and mimosa,

Thank you both for the guidance offered in this thread. I hadn't yet installed the patched kernel, but I did it this afternoon.

Here's a link to the Wiki instructions mentioned by mimosa:

https://docs.salixos.org/wiki/How_to_in ... ent_kernel
"How to install a different kernel."

Code: Select all

david[~]$ uname -a
Linux darkstar 4.4.111-smp #2 SMP Thu Jan 11 14:01:08 CST 2018 i686 Intel(R) Atom(TM) CPU N455   @ 1.66GHz GenuineIntel GNU/Linux
Registered Linux User # 442201

AMD Athlon II X2 240 2.8 GHz, 4 GB RAM, Seagate Barracuda 320 GB HD, Nvidia GeForce 6150SE nForce 430 integrated GPU, Samsung SH-S222L DVD-RW

HP Mini 210-2100

Post Reply