Re: Intel hyper-threading security issues

[Sven Schwedas <sven.schwedas () tao at>]

On 2018-06-21 12:28, Lukas Odzioba wrote:
> 2018-06-21 12:22 GMT+02:00 Lukas Odzioba <lukas.odzioba () gmail com>:
> > If you feel like you really need that, on Linux you can dump SRAT ACPI
> > table decompile it, remove APICID entries of "ht processors", compile
> > it back and put into initrd.
> > https://www.kernel.org/doc/Documentation/acpi/initrd_table_override.txt
>
> Or use cpu hotplug mechanism, which should be way more convenient:
> https://www.kernel.org/doc/html/v4.17/core-api/cpu_hotplug.html

Hotplug doesn't seem differentiate between HT threads and physical
cores, will setting maxcpus=2 on a 2 cores+HT machine reliably disable
HT, or can it disable one core and keep HT active on the other?

Attachment: signature.asc
Description: OpenPGP digital signature