I’m still backlogged, so here’s a May 14th mitigation in DragonFly for MDS attacks possible with Intel CPUs from 2011 onward. It’s in the current release.
3 Replies to “MDS mitigation added, a while ago”
Comments are closed.
A running description of activity related to DragonFly BSD.
Is there a list which sysctl I have to set to be safe from all the CPU flaws?
Similarly, is there a list of settings to turn off if already running in a secured environment and want to turn off all those performance losing mitigations.
Hmm. No, I don’t have a list. You can create one by going through my posts on the topic, if I managed to catch all the changes – which I think I did.
Some of them default to on, and some default to off because of the performance impact, so each has to be evaluated.