Page MenuHomeFreeBSD
Differential D21087

Provide the list of knobs related to mitigations.
ClosedPublic
Actions

Authored by kib on Jul 27 2019, 4:12 PM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Apr 19, 9:33 PM
Unknown Object (File)
Sat, Apr 6, 9:09 AM
Unknown Object (File)
Sat, Apr 6, 7:36 AM
Unknown Object (File)
Sat, Mar 30, 10:31 AM
Unknown Object (File)
Jan 11 2024, 7:35 PM
Unknown Object (File)
Dec 23 2023, 7:34 AM
Unknown Object (File)
Dec 10 2023, 11:56 AM
Unknown Object (File)
Nov 15 2023, 3:17 PM
View All 39 Files
Subscribers
bjk
imp
juan.molina_club.fr
val_packett.cool

Details

Reviewers
emaste
Group Reviewers
manpages
Commits
rS350640: Provide the list of knobs related to mitigations.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

kib created this revision.Jul 27 2019, 4:12 PM
Herald added a reviewer: manpages. · View Herald TranscriptJul 27 2019, 4:12 PM
Herald added a subscriber: imp. · View Herald Transcript
Harbormaster completed remote builds in B25539: Diff 60196.Jul 27 2019, 4:12 PM
juan.molina_club.fr added a subscriber: juan.molina_club.fr.Jul 28 2019, 8:01 AM
juan.molina_club.fr added inline comments.
share/man/man7/security.7
1035 ↗(On Diff #60196)

s/Layour/Layout

val_packett.cool added a subscriber: val_packett.cool.Jul 28 2019, 9:05 AM
val_packett.cool added inline comments.
share/man/man7/security.7
1043 ↗(On Diff #60196)

s/32/64

kib marked 2 inline comments as done.Jul 28 2019, 9:33 PM
emaste added inline comments.Jul 30 2019, 4:50 PM
share/man/man7/security.7
4 ↗(On Diff #60196)

Parts of this documentation were written

950 ↗(On Diff #60196)

Maybe .Fx provides?

957 ↗(On Diff #60196)

of <remove the> processes owned by a different uid

1043 ↗(On Diff #60196)

And we should probably write "Position Independent Executable (PIE)"
(Correct pluralization is left as an exercise)

kib updated this revision to Diff 60304.Jul 30 2019, 7:28 PM
kib marked 4 inline comments as done.

More edits.

Harbormaster completed remote builds in B25605: Diff 60304.Jul 30 2019, 7:28 PM
kib updated this revision to Diff 60338.Jul 31 2019, 8:30 PM

stack gap

Harbormaster completed remote builds in B25623: Diff 60338.Jul 31 2019, 8:30 PM
bjk added a subscriber: bjk.Jul 31 2019, 8:51 PM
bjk added inline comments.
share/man/man7/security.7
961 ↗(On Diff #60338)

"sysctl's" is a possessive here; since there's only one sysctl in question the apostrophe should go before the final 's'.

969 ↗(On Diff #60338)

Maybe "only allows unprivileged users to send"?

985 ↗(On Diff #60338)

"so-called" is hyphenated.
I'd consider wrapping Meltdown in .Dq as well, but that's less clear.

987 ↗(On Diff #60338)

"By default, the system detects whether the CPU needs the workaround".

1002 ↗(On Diff #60338)

spurious space here.

1007 ↗(On Diff #60338)

Maybe, "which report errors other than"

1022 ↗(On Diff #60338)

I think the grammar is better as "on NMI; this provides"

1042 ↗(On Diff #60338)

"a non-zero value"

1043 ↗(On Diff #60338)

"the end of the aux vector"

1045 ↗(On Diff #60338)

comma both before and after "i.e.".

kib marked 9 inline comments as done.Jul 31 2019, 9:28 PM
kib added inline comments.
share/man/man7/security.7
961 ↗(On Diff #60338)

No, kern.proc is the node under which real sysctls are located, like kern.proc.all etc.

969 ↗(On Diff #60338)

It sounds strange that way, for me at least. I reformulated it differently.

kib updated this revision to Diff 60342.Jul 31 2019, 9:29 PM
kib marked an inline comment as done.

bjk notes

Harbormaster completed remote builds in B25624: Diff 60342.Jul 31 2019, 9:29 PM
This revision was not accepted when it landed; it landed in state Needs Review.Aug 6 2019, 5:06 PM
Closed by commit rS350640: Provide the list of knobs related to mitigations. (authored by kib). · Explain Why
This revision was automatically updated to reflect the committed changes.
kib added a commit: rS350640: Provide the list of knobs related to mitigations..

Revision Contents
Changeset List

PathSize
head/
share/
man/
man7/
120 lines

Diff 60511

View Options

head/share/man/man7/security.7

Loading...