The kernel fixes provided by Redhat allow an administrator to toggle the PTI, IBRS, and IBPB features of the fix.
See https://access.redhat.com/articles/3311301
Does SUSE’s fixes have a similar mechanism for enabling/disabling these features in the SLES 11 SP4 and SLES 12 SP3 fixes for Meltdown and Spectre?
[QUOTE=jayvi;50526]The kernel fixes provided by Redhat allow an administrator to toggle the PTI, IBRS, and IBPB features of the fix.
See https://access.redhat.com/articles/3311301
Does SUSE’s fixes have a similar mechanism for enabling/disabling these features in the SLES 11 SP4 and SLES 12 SP3 fixes for Meltdown and Spectre?[/QUOTE]
Hi
If you follow the learn more banner on the forum page, it heads off to the TID with info on how to control the Meltdown and Spectre options;
https://www.suse.com/support/kb/doc/?id=7022512
I was hoping for something better than
[QUOTE]This mitigation has a performance impact, and so will be made configurable via the kernel commandline option “nospec” in later releases.
To disable this mitigation with the current updates, the ucode-intel or microcode_ctl packages could be downgraded to its previous releases or temporary de-installed.[/QUOTE]
RH accepts kernel command line options to control each mitigation: PTI, IBRS, IPBP. It looks like we can control PTI from the command line today: