Andrew Cooper 71ca0e0ad0 x86/spec-ctrl: Hide RDRAND by default on IvyBridge client ...

To combat the absence of mitigating microcode, arrange to hide RDRAND by
default on IvyBridge client hardware.

Adjust the default feature derivation to hide RDRAND on IvyBridge client
parts, unless `cpuid=rdrand` is explicitly provided.

Adjust the restore path in xc_cpuid_apply_policy() to not hide RDRAND from VMs
which migrated from pre-4.14.

In all cases, individual guests can continue using RDRAND if explicitly
enabled in their config files.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
Acked-by: Ian Jackson <ian.jackson@eu.citrix.com>
Release-acked-by: Paul Durrant <paul@xen.org>

2020-06-17 13:54:12 +01:00

..

include

tools/libx[cl]: Plumb bool restore down into xc_cpuid_apply_policy()

2020-06-17 13:54:12 +01:00

COPYING

# HG changeset patch

2010-08-24 18:42:59 +01:00

Makefile

tools/libxc: Drop unused xc_compression_*()

2019-12-20 16:08:00 +00:00

xc_altp2m.c

x86/altp2m: hypercall to set altp2m view visibility

2020-04-14 11:38:48 +02:00

xc_arinc653.c

arinc: Add poolid parameter to scheduler get/set functions

2013-12-04 14:02:10 +00:00

xc_bitops.h

libxc/bitops: correct comment for bitmap_size

2017-09-05 17:35:57 +01:00

xc_core_arm.c

tools/libxc: Fix domid parameter types

2017-10-11 12:20:17 +01:00

xc_core_arm.h

Replace FSF street address with canonical URL

2015-07-29 11:14:07 +01:00

xc_core_x86.c

tools/libxc: Fix domid parameter types

2017-10-11 12:20:17 +01:00

xc_core_x86.h

Replace FSF street address with canonical URL

2015-07-29 11:14:07 +01:00

xc_core.c

libxc: fix HVM core dump

2019-03-20 16:52:01 +00:00

xc_core.h

tools/libxc: Fix domid parameter types

2017-10-11 12:20:17 +01:00

xc_cpu_hotplug.c

x86/smt: Support for enabling/disabling SMT at runtime

2019-04-09 19:34:41 +01:00

xc_cpuid_x86.c

x86/spec-ctrl: Hide RDRAND by default on IvyBridge client

2020-06-17 13:54:12 +01:00

xc_cpupool.c

tools/libxc: Introduce XC_CPUPOOL_POOLID_ANY

2017-02-16 12:47:10 +00:00

xc_csched2.c

tools/libxc: Fix domid parameter types

2017-10-11 12:20:17 +01:00

xc_csched.c

tools/libxc: Fix domid parameter types

2017-10-11 12:20:17 +01:00

xc_devicemodel_compat.c

x86/domctl: remove XEN_DOMCTL_pin_mem_cacheattr

2018-01-25 12:26:55 +01:00

xc_dom_arm.c

tools/dombuilder: Don't allocate dom->p2m_host[] for translated domains

2020-01-07 12:46:03 +00:00

xc_dom_armzimageloader.c

Replace FSF street address with canonical URL

2015-07-29 11:14:07 +01:00

xc_dom_binloader.c

cleanup domain builder declarations and related users

2015-09-28 17:28:35 +02:00

xc_dom_boot.c

tools/dombuilder: Remove p2m_guest from the common interface

2020-01-07 12:46:03 +00:00

xc_dom_bzimageloader.c

tools: lift BUILD_BUG_ON to a tools header file

2016-09-19 17:03:20 +01:00

xc_dom_compat_linux.c

tools/libxc: Multi modules support

2018-01-16 18:34:04 +00:00

xc_dom_core.c

tools/dombuilder: Remove p2m_guest from the common interface

2020-01-07 12:46:03 +00:00

xc_dom_decompress_lz4.c

libxc: don't leak buffer containing the uncompressed PV kernel

2014-11-25 15:53:53 +00:00

xc_dom_decompress_unsafe_bzip2.c

libxc: Add unsafe decompressors

2013-04-22 12:46:30 +01:00

xc_dom_decompress_unsafe_lzma.c

libxc: Add unsafe decompressors

2013-04-22 12:46:30 +01:00

xc_dom_decompress_unsafe_lzo1x.c

libxc: Fix stub domain build breakage

2014-07-04 09:47:01 +01:00

xc_dom_decompress_unsafe_xz.c

tools/libxc: Shuffle definitions and uses of min()/max() macros

2014-07-18 13:38:08 +01:00

xc_dom_decompress_unsafe.c

libxc: Add unsafe decompressors

2013-04-22 12:46:30 +01:00

xc_dom_decompress_unsafe.h

libxc: Add unsafe decompressors

2013-04-22 12:46:30 +01:00

xc_dom_decompress.h

libxc: add LZ4 decompression support

2013-10-07 09:42:51 +02:00

xc_dom_elfloader.c

libxc: elf_kernel loader: Remove check for shstrtab

2019-05-17 16:14:04 +01:00

xc_dom_hvmloader.c

libxl: put RSDP for PVH guest near 4GB

2018-01-18 10:40:21 +00:00

xc_dom_x86.c

xen/pvh: Fix segment selector ABI

2020-02-10 15:26:09 +00:00

xc_domain.c

xen/hvm: Fix handling of obsolete HVM_PARAMs

2020-02-21 15:21:40 +00:00

xc_efi.h

Replace FSF street address with canonical URL

2015-07-29 11:14:07 +01:00

xc_elf.h

Replace FSF street address with canonical URL

2015-07-29 11:14:07 +01:00

xc_evtchn_compat.c

tools/libxc: Fix domid parameter types

2017-10-11 12:20:17 +01:00

xc_evtchn.c

tools/libxc: Fix domid parameter types

2017-10-11 12:20:17 +01:00

xc_flask.c

tools/libxc: Fix domid parameter types

2017-10-11 12:20:17 +01:00

xc_foreign_memory.c

tools/libs/foreignmemory: pull array length argument to map forward

2016-01-22 12:24:19 +00:00

xc_freebsd.c

Replace FSF street address with canonical URL

2015-07-29 11:14:07 +01:00

xc_gnttab_compat.c

tools: Refactor /dev/xen/gnt{dev,shr} wrappers into libxengnttab.

2016-01-22 12:22:27 +00:00

xc_gnttab.c

tools/libxc: Fix domid parameter types

2017-10-11 12:20:17 +01:00

xc_hcall_buf.c

tools: Refactor hypercall calling wrappers into libxencall.

2016-01-22 12:23:30 +00:00

xc_kexec.c

kexec: implement STATUS hypercall to check if image is loaded

2017-01-18 09:55:49 +00:00

xc_linux.c

Replace FSF street address with canonical URL

2015-07-29 11:14:07 +01:00

xc_mem_access.c

tools/libxc: Fix domid parameter types

2017-10-11 12:20:17 +01:00

xc_mem_paging.c

x86/mem-paging: use guest handle for XENMEM_paging_op_prep

2020-05-18 17:15:46 +02:00

xc_memshr.c

libxc: xc_memshr_fork with interrupts blocked

2020-06-16 10:30:48 +02:00

xc_minios.c

tools: Refactor foreign memory mapping into libxenforeignmemory

2016-01-22 12:24:03 +00:00

xc_misc.c

tools/libxc: remove xc_set_parameters()

2020-05-29 12:20:16 +02:00

xc_monitor.c

x86/mm: suppress vm_events caused by page-walks

2018-07-05 15:25:20 +02:00

xc_msr_x86.h

tools, docs: add total/local memory bandwith monitoring

2015-03-05 16:27:49 +00:00

xc_netbsd.c

tools: Refactor foreign memory mapping into libxenforeignmemory

2016-01-22 12:24:03 +00:00

xc_nomigrate.c

libxc/migration: Rationalise the 'checkpointed' field to 'stream_type'

2020-01-15 15:22:28 +00:00

xc_offline_page.c

tools/libxc: Fix domid parameter types

2017-10-11 12:20:17 +01:00

xc_pagetab.c

libxc: fix xc_translate_foreign_address()

2017-04-06 10:37:24 +01:00

xc_physdev.c

tools/libxc: Fix domid parameter types

2017-10-11 12:20:17 +01:00

xc_pm.c

tools/libxc: allow controlling the max C-state sub-state

2019-07-22 11:35:19 +02:00

xc_private.c

libxc: Provide access to internal handles

2018-07-06 16:27:52 +01:00

xc_private.h

tools/libxc: misc: Mark const the parameter 'keys' of xc_send_debug_keys()

2020-04-01 10:56:01 +01:00

xc_psr.c

tools: implement new generic set value interface and MBA set value command

2018-01-18 11:32:51 +00:00

xc_resource.c

tools/libxc: Drop other examples of the 'goto x; } else if' antipattern

2019-12-20 16:08:00 +00:00

xc_resume.c

Revert "libxc/libxl/python/xenstat/ocaml: Use new XEN_VERSION hypercall"

2016-04-26 11:53:49 +02:00

xc_rt.c

tools/libxc: Fix domid parameter types

2017-10-11 12:20:17 +01:00

xc_solaris.c

tools: Refactor foreign memory mapping into libxenforeignmemory

2016-01-22 12:24:03 +00:00

xc_sr_common_x86_pv.c

libxc/migration: Adjust layout of struct xc_sr_context

2020-01-16 15:17:08 +00:00

xc_sr_common_x86_pv.h

libxc/migration: Adjust layout of struct xc_sr_context

2020-01-16 15:17:08 +00:00

xc_sr_common_x86.c

tools/libxc: Restore CPUID/MSR data found in the migration stream

2020-05-29 17:33:03 +01:00

xc_sr_common_x86.h

tools/libx[cl]: Plumb 'missing' through static_data_done() up into libxl

2020-05-29 17:33:03 +01:00

xc_sr_common.c

docs/migration: Specify X86_{CPUID,MSR}_POLICY records

2020-05-29 17:33:03 +01:00

xc_sr_common.h

tools/libx[cl]: Plumb 'missing' through static_data_done() up into libxl

2020-05-29 17:33:03 +01:00

xc_sr_restore_x86_hvm.c

tools/libx[cl]: Plumb 'missing' through static_data_done() up into libxl

2020-05-29 17:33:03 +01:00

xc_sr_restore_x86_pv.c

tools/libx[cl]: Plumb 'missing' through static_data_done() up into libxl

2020-05-29 17:33:03 +01:00

xc_sr_restore.c

tools/libx[cl]: Plumb 'missing' through static_data_done() up into libxl

2020-05-29 17:33:03 +01:00

xc_sr_save_x86_hvm.c

libxc/save: Write X86_{CPUID,MSR}_DATA records

2020-05-29 17:33:03 +01:00

xc_sr_save_x86_pv.c

libxc/save: Write X86_{CPUID,MSR}_DATA records

2020-05-29 17:33:03 +01:00

xc_sr_save.c

libxc/save: Write a v3 stream

2020-05-29 17:33:03 +01:00

xc_sr_stream_format.h

docs/migration: Specify X86_{CPUID,MSR}_POLICY records

2020-05-29 17:33:03 +01:00

xc_suspend.c

tools/libxc: Fix domid parameter types

2017-10-11 12:20:17 +01:00

xc_tbuf.c

libxc: fix leak of t_info in xc_tbuf_get_size()

2016-02-18 11:42:59 +00:00

xc_vm_event.c

vm_event: Add a new opcode to get VM_EVENT_INTERFACE_VERSION

2019-03-12 12:57:13 +00:00

xencontrol.pc.in

tools: remove gntshr support

2017-03-15 10:31:16 +00:00

xenguest.pc.in

tools: provide pkg-config file for libxenguest, update the one for libxenctrl

2017-03-14 14:13:14 +00:00

xg_private.c

tools/libxc: Fix domid parameter types

2017-10-11 12:20:17 +01:00

xg_private.h

tools/libxc: Fix domid parameter types

2017-10-11 12:20:17 +01:00

xg_save_restore.h

Revert "libxc/libxl/python/xenstat/ocaml: Use new XEN_VERSION hypercall"

2016-04-26 11:53:49 +02:00