Project

General

Profile

Actions
Copy link

Feature #9532

closed
JP JP

GUI indication and options for MDS mitigation

Feature #9532: GUI indication and options for MDS mitigation

Added by Jim Pingle over 7 years ago. Updated over 6 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Jim Pingle
Category:
Web Interface
Target version:
2.4.5
Start date:
05/17/2019
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:

Description

Similar to the option for Kernel PTI on system_advanced_misc.php we should have an option for MDS.

It is controlled by sysctl oid hw.mds_disable:

0 - mitigation disabled
1 - VERW instruction (microcode) mitigation enabled
2 - Software sequence mitigation enabled (not recommended)
3 - Automatic VERW or Software selection

Also in the system info widget on the Dashboard, the value of hw.mds_disable_state can be output to show the current state.

JP Updated by Jim Pingle over 7 years ago Actions
Copy link
 #1

  • Subject changed from GUI indication an options for MDS mitigation to GUI indication and options for MDS mitigation

JP Updated by Jim Pingle over 7 years ago Actions
Copy link
 #2

  • Status changed from New to In Progress
  • Assignee set to Jim Pingle

JP Updated by Jim Pingle over 7 years ago Actions
Copy link
 #3

  • Status changed from In Progress to Feedback
  • % Done changed from 0 to 100

Applied in changeset commit:42c48efe1c326273079ac38176098a1993f8ae88.

CL Updated by Chris Linstruth about 7 years ago Actions
Copy link
 #4

Dashboard reflects chosen MDS settings. Looks good.

JP Updated by Jim Pingle about 7 years ago Actions
Copy link
 #5

  • Status changed from Feedback to Resolved

JP Updated by Jim Pingle almost 7 years ago Actions
Copy link
 #6

  • Target version changed from 2.5.0 to 2.4.5

JP Updated by Jim Pingle almost 7 years ago Actions
Copy link
 #7

  • Status changed from Resolved to Feedback

Needs checked and/or tested again on 2.4.5 snapshots

JP Updated by Jim Pingle over 6 years ago Actions
Copy link
 #8

  • Status changed from Feedback to Resolved

Works as expected. The mitigation can be enabled or disabled via system_advanced_misc.php and the status is correctly reflected in the System Information widget.

2.4.5.a.20191217.0637

Actions
Copy link

Also available in: Atom