Re: FreeBSD mds mitigation.

On Wed, 10 Jul 2019 12:52:47 +0300
Konstantin Belousov <[email protected]> wrote:

> On Wed, Jul 10, 2019 at 09:06:31AM +0200, [email protected] wrote:
> > Hello
> > 
> > FreeBSD 11.2-RELEASE-p11
> > CPU: Intel(R) Xeon(R) CPU E5-2640 v3 @ 2.60GHz (2594.05-MHz
> > K8-class CPU)
> > 
> > sysctl hw.mds_disable was set to 3 (Automatic VERW or Software
> > selection), HT disabled in BIOS, and i install manually latest CPU
> > microcode from
> > https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/
> > 
> > I wonder why hw.mds_disable_state shows
> > hw.mds_disable_state: software Broadwell
> > instead VERW?
> > 
> > sysctl hw.mds_disable=1 causes hw.mds_disable_state: VERW
> > 
> > These automatic selection works correctly?
> No idea.
> 
> How did you installed the microcode ?  Was it loaded ?
> Show the dmesg output after the 'cpucontrol -e /dev/cpuctl0'.
> _______________________________________________
> [email protected] mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to
> "[email protected]"

I am using it long time but I didn't have enabled hw.mds_disable_state.
Yesterday I did and I have now (3):

hw.mds_disable_state: software IvyBridge. I am confused.I have FreeBSD
12.0-RELEASE (amd64) installed on iMac 11,1 (late 2009) and I have:
"The iMac "Core i7" 2.8 27-Inch Aluminum (Late 2009) is powered by a
2.8 GHz Quad Core Intel "Core i7" I7-860 (Lynnfield/Nehalem) processor
with a dedicated 256k level 2 cache for each core and an 8 MB shared
level 3 cache."

Thank you.
-- 
“Happiness is the meaning and the purpose of life, the whole aim and
end of human existence.”

― Aristotle
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[email protected]"