Difference between revisions of "Configuring Spectre Protection Level"
Jump to navigation
Jump to search
m (improve reference) |
m (adjust scope of reference: it actually applies to all three sentences, see the reference) |
||
| Line 1: | Line 1: | ||
| − | The Spectre protections on [[POWER9]] can be partly or fully disengaged if desired. Note that disengaging the protections will leave you vulnerable to attack via Spectre variant 2, and could result in data leakage and/or system compromise. | + | The Spectre protections on [[POWER9]] can be partly or fully disengaged if desired. Note that disengaging the protections will leave you vulnerable to attack via Spectre variant 2, and could result in data leakage and/or system compromise. The override is controlled by the BMC and requires a reboot of the POWER9 to take effect.<ref>[ftp://170.225.15.34/ecc/sar/CMA/SFA/08h25/1/AC922_8335-GTH-GTX_OpenPowerReadme.op920.21.xhtml IBM POWER9 Systems LC Server Firmware]. Retrieved 2020-03-26.</ref> |
To override the protection level: | To override the protection level: | ||
Revision as of 13:17, 26 March 2020
The Spectre protections on POWER9 can be partly or fully disengaged if desired. Note that disengaging the protections will leave you vulnerable to attack via Spectre variant 2, and could result in data leakage and/or system compromise. The override is controlled by the BMC and requires a reboot of the POWER9 to take effect.[1]
To override the protection level:
- Create/edit the file
/var/lib/obmc/cfam_overrideson the BMC. - Add the following contents:
- Re-IPL (fully power off and restart the host system) to apply changes.
# Control speculative execution mode 0 0x283a 0x00000001 # bits 28:31 are used for init level -- in this case 1 (Kernel protection only) 0 0x283F 0x20000000 # Indicate override register is valid
Key:
- Init level 0 — Kernel and User protection (safest, default)
- Init level 1 — Kernel protection only
- Init level 2 — No protection
See also
References
- ↑ IBM POWER9 Systems LC Server Firmware. Retrieved 2020-03-26.
