[SRU Mantic][PATCH 9/9] UBUNTU: [Config] Set CONFIG_BHI to enabled
Stefan Bader
stefan.bader at canonical.com
Mon Apr 15 09:48:20 UTC 2024
From: Yuxuan Luo <yuxuan.luo at canonical.com>
Adjusting the config to have BHI mitigations enabled (for now we do use
the auto mode, this differs from upstream).
CVE-2024-2201
Signed-off-by: Yuxuan Luo <yuxuan.luo at canonical.com>
---
debian.master/config/annotations | 3 +++
1 file changed, 3 insertions(+)
diff --git a/debian.master/config/annotations b/debian.master/config/annotations
index 0c6260bf190c..4891ec6c7ba8 100644
--- a/debian.master/config/annotations
+++ b/debian.master/config/annotations
@@ -12918,6 +12918,9 @@ CONFIG_SPEAKUP_SYNTH_LTLK policy<{'amd64': 'm', 'arm64': '
CONFIG_SPEAKUP_SYNTH_SOFT policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm'}>
CONFIG_SPEAKUP_SYNTH_SPKOUT policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm'}>
CONFIG_SPEAKUP_SYNTH_TXPRT policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm'}>
+CONFIG_SPECTRE_BHI_AUTO policy<{'amd64': 'y'}>
+CONFIG_SPECTRE_BHI_OFF policy<{'amd64': 'n'}>
+CONFIG_SPECTRE_BHI_ON policy<{'amd64': 'n'}>
CONFIG_SPECULATION_MITIGATIONS policy<{'amd64': 'y'}>
CONFIG_SPI policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 'riscv64': 'y', 's390x': 'n'}>
CONFIG_SPI_ALTERA policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm', 's390x': '-'}>
--
2.34.1
More information about the kernel-team
mailing list