Project

General

Profile

Actions
Copy link

Feature #9532

closed

GUI indication and options for MDS mitigation

Added by Jim Pingle over 5 years ago. Updated almost 5 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Jim Pingle
Category:
Web Interface
Target version:
2.4.5
Start date:
05/17/2019
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:

Description

Similar to the option for Kernel PTI on system_advanced_misc.php we should have an option for MDS.

It is controlled by sysctl oid hw.mds_disable:

0 - mitigation disabled
1 - VERW instruction (microcode) mitigation enabled
2 - Software sequence mitigation enabled (not recommended)
3 - Automatic VERW or Software selection

Also in the system info widget on the Dashboard, the value of hw.mds_disable_state can be output to show the current state.

Actions
Copy link
 #1

Updated by Jim Pingle over 5 years ago

  • Subject changed from GUI indication an options for MDS mitigation to GUI indication and options for MDS mitigation
Actions
Copy link
 #2

Updated by Jim Pingle over 5 years ago

  • Status changed from New to In Progress
  • Assignee set to Jim Pingle
Actions
Copy link
 #3

Updated by Jim Pingle over 5 years ago

  • Status changed from In Progress to Feedback
  • % Done changed from 0 to 100
Actions
Copy link
 #4

Updated by Chris Linstruth over 5 years ago

Dashboard reflects chosen MDS settings. Looks good.

Actions
Copy link
 #5

Updated by Jim Pingle over 5 years ago

  • Status changed from Feedback to Resolved
Actions
Copy link
 #6

Updated by Jim Pingle almost 5 years ago

  • Target version changed from 2.5.0 to 2.4.5
Actions
Copy link
 #7

Updated by Jim Pingle almost 5 years ago

  • Status changed from Resolved to Feedback

Needs checked and/or tested again on 2.4.5 snapshots

Actions
Copy link
 #8

Updated by Jim Pingle almost 5 years ago

  • Status changed from Feedback to Resolved

Works as expected. The mitigation can be enabled or disabled via system_advanced_misc.php and the status is correctly reflected in the System Information widget.

2.4.5.a.20191217.0637

Actions
Copy link

Also available in: Atom PDF