diff options
| author | Joachim Fasting <joachifm@fastmail.fm> | 2018-12-26 22:24:04 +0100 |
|---|---|---|
| committer | Joachim Fasting <joachifm@fastmail.fm> | 2018-12-27 15:00:49 +0100 |
| commit | ea4f37162767280bbed460dc7293b6738cb43bd5 (patch) | |
| tree | 8c3eeee0192429af81dfa93ea84d465765edaa65 /nixos/modules/hardware | |
| parent | e9761fa3270c5182b488e483be1d97ed7e8a0fee (diff) | |
| download | nixlib-ea4f37162767280bbed460dc7293b6738cb43bd5.tar nixlib-ea4f37162767280bbed460dc7293b6738cb43bd5.tar.gz nixlib-ea4f37162767280bbed460dc7293b6738cb43bd5.tar.bz2 nixlib-ea4f37162767280bbed460dc7293b6738cb43bd5.tar.lz nixlib-ea4f37162767280bbed460dc7293b6738cb43bd5.tar.xz nixlib-ea4f37162767280bbed460dc7293b6738cb43bd5.tar.zst nixlib-ea4f37162767280bbed460dc7293b6738cb43bd5.zip | |
nixos/security/misc: expose SMT control option
For the hardened profile disable symmetric multi threading. There seems to be no *proven* method of exploiting cache sharing between threads on the same CPU core, so this may be considered quite paranoid, considering the perf cost. SMT can be controlled at runtime, however. This is in keeping with OpenBSD defaults. TODO: since SMT is left to be controlled at runtime, changing the option definition should take effect on system activation. Write to /sys/devices/system/cpu/smt/control
Diffstat (limited to 'nixos/modules/hardware')
0 files changed, 0 insertions, 0 deletions