Andrew Cooper 71ca0e0ad0 x86/spec-ctrl: Hide RDRAND by default on IvyBridge client ...

To combat the absence of mitigating microcode, arrange to hide RDRAND by
default on IvyBridge client hardware.

Adjust the default feature derivation to hide RDRAND on IvyBridge client
parts, unless `cpuid=rdrand` is explicitly provided.

Adjust the restore path in xc_cpuid_apply_policy() to not hide RDRAND from VMs
which migrated from pre-4.14.

In all cases, individual guests can continue using RDRAND if explicitly
enabled in their config files.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
Acked-by: Ian Jackson <ian.jackson@eu.citrix.com>
Release-acked-by: Paul Durrant <paul@xen.org>

2020-06-17 13:54:12 +01:00

..

arm

xen/arm: Configure early printk via Kconfig

2020-04-01 10:49:33 +01:00

xen-makefiles

xen/build: introduce if_changed and if_changed_rule

2020-04-24 15:01:11 +02:00

9pfs.pandoc

docs etc.: https: Fix references to other Xen pages

2020-03-30 15:27:17 +01:00

amd-ucode-container.txt

docs, amd_ucode: condense amd_ucode notes

2014-10-16 10:07:56 +02:00

block-scripts.txt

hotplug/FreeBSD: document disk hotplug interface

2016-04-06 15:50:45 +01:00

console.txt

xen/arm: vpl011: Update documentation for vuart console support

2017-10-03 15:23:38 -07:00

crashdb.txt

build: convert crash_debug to Kconfig

2016-06-08 14:09:16 +02:00

distro_mapping.txt

Config.mk: Remove unused setvar_dir macro

2019-12-13 16:30:34 +00:00

dump-core-format.txt

dump-core: update the documentation

2009-01-15 12:40:48 +00:00

efi.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

grant-tables.txt

gnttab: split maptrack lock to make it fulfill its purpose again

2017-08-15 15:07:25 +02:00

hvm-emulated-unplug.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

hypfs-paths.pandoc

xen: add runtime parameter access support to hypfs

2020-05-29 12:18:36 +02:00

kconfig-language.rst

xen: Update Kconfig to Linux v5.4

2020-01-30 11:54:33 +00:00

kconfig-macro-language.rst

xen: Update Kconfig to Linux v5.4

2020-01-30 11:54:33 +00:00

kconfig.rst

xen: Update Kconfig to Linux v5.4

2020-01-30 11:54:33 +00:00

kexec_and_kdump.txt

kexec: provide user friendly option for memory limit

2017-06-09 14:11:37 +02:00

libxl_memory.txt

docs: initial documentation for xenstore paths

2012-10-01 17:54:11 +01:00

livepatch.pandoc

docs etc.: https: Fix references to other Xen pages

2020-03-30 15:27:17 +01:00

netif-staging-grants.pandoc

docs/misc: add netif staging grants design document

2017-10-05 09:27:25 -04:00

printk-formats.txt

xen/vsprintf: Introduce %*pb[l] for printing bitmaps

2018-10-22 13:39:22 +01:00

pv-drivers-lifecycle.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

pvcalls.pandoc

docs etc.: https: Fix references to other Xen pages

2020-03-30 15:27:17 +01:00

pvh.pandoc

x86/pvh: drop v2 suffix from pvh.pandoc

2020-02-25 17:21:45 +00:00

qemu-backends.txt

docs: add misc/qemu-backends.txt

2016-04-20 18:59:11 +01:00

status-override-table-spec.fodt

docs: convert STAO from odt to fodt

2017-02-15 11:40:16 -08:00

stubdom.txt

Document ioemu Linux stubdomain protocol

2020-05-18 23:23:44 +01:00

support-matrix-head.html

docs: Provide support-matrix-generate, to generate a support matrix in HTML

2018-04-12 16:13:49 +01:00

vtd-pi.txt

VT-d Posted-intterrupt (PI) design

2015-12-10 13:11:25 +01:00

vtd.txt

docs etc.: https: Fix references to wiki.xen[project].org

2020-03-30 15:27:06 +01:00

vtpm-platforms.txt

vtpmmgr: use XSM label as vTPM kernel hash

2014-04-23 11:58:26 +01:00

x86-xenpv-bootloader.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

xen_config.html

tools: vnet: Remove

2011-03-25 21:59:20 +00:00

xen-command-line.pandoc

x86/spec-ctrl: Hide RDRAND by default on IvyBridge client

2020-06-17 13:54:12 +01:00

xen-env-table-spec.fodt

docs: convert XENV from odt to fodt

2017-02-15 11:40:37 -08:00

xen-error-handling.txt

docs: Add description of BUILD_BUG_ON().

2008-12-04 16:36:43 +00:00

xenmon.txt

docs: Move misc README's into docs/misc/

2015-08-27 19:14:17 +01:00

xenpaging.txt

docs: update xenpaging.txt

2012-08-30 17:57:31 +01:00

xenstore-paths.pandoc

docs: Add device-model-domid to xenstore-paths

2020-05-19 16:19:15 +01:00

xenstore-ring.txt

xenstore: extend the xenstore ring with a 'closing' signal

2014-10-08 14:29:08 +01:00

xenstore.txt

docs/designs: re-work the xenstore migration document...

2020-05-13 13:26:06 +01:00

xl-psr.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

xsm-flask.txt

docs etc.: https: Fix references to other Xen pages

2020-03-30 15:27:17 +01:00