x86: Make "spec-ctrl=no" a global disable of all mitigations
authorJan Beulich <JBeulich@suse.com>
Mon, 13 Aug 2018 11:07:23 +0000 (05:07 -0600)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Tue, 14 Aug 2018 16:15:57 +0000 (17:15 +0100)
commit6c7d074a4b5c8e69e21e505a04e7bb3f43658bea
treef20cb13dfc0d5dd07e54734553aa780c8eb0cf7f
parent2a47c7550910f5d591ca0de369234f8c18daa2d2
x86: Make "spec-ctrl=no" a global disable of all mitigations

In order to have a simple and easy to remember means to suppress all the
more or less recent workarounds for hardware vulnerabilities, force
settings not controlled by "spec-ctrl=" also to their original defaults,
unless they've been forced to specific values already by earlier command
line options.

This is part of XSA-273.

Signed-off-by: Jan Beulich <jbeulich@suse.com>
Acked-by: Andrew Cooper <andrew.cooper3@citrix.com>
(cherry picked from commit d8800a82c3840b06b17672eddee4878bbfdacc6d)
docs/misc/xen-command-line.markdown
xen/arch/x86/spec_ctrl.c