Re: How to correctly configure mitigation of CVE-2018-3646 'Foreshadow-NG (VMM)' on Xen Dom0 host?

Dario Faggioli <[email protected]> Mon, 15 Apr 2019 13:48:39 +0200
Newsgroups gmane.linux.suse.opensuse.virtual,gmane.linux.suse.security
Organization SUSE
Message-ID <[email protected]>
--=-c9YJvMphHKMSd7VwC7Yp
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Sun, 2019-04-14 at 21:28 -0700, Tony Su wrote:
> Personally, I prefer the following  It was one of the first tools
> available and the author seems to be reasonably conscientious about
> keeping his tool up to date.. It also doesn't hurt that it's open
> source and he describes what his tool does.
>=20
> https://github.com/speed47/spectre-meltdown-checker
>=20
I believe that is exactly the one we package, and that PGNet is using.
See, e.g.:

https://build.opensuse.org/package/show/security/spectre-meltdown-checker
https://build.opensuse.org/package/view_file/security/spectre-meltdown-chec=
ker/spectre-meltdown-checker.spec?expand=3D1

Regards
--=20
Dario Faggioli, Ph.D
http://about.me/dario.faggioli
Virtualization Software Engineer
SUSE Labs, SUSE https://www.suse.com/
-------------------------------------------------------------------
<<This happens because _I_ choose it to happen!>> (Raistlin Majere)


--=-c9YJvMphHKMSd7VwC7Yp
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
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=IsZ9
-----END PGP SIGNATURE-----

--=-c9YJvMphHKMSd7VwC7Yp--