On Wed, Nov 04, 2020 at 06:50:54PM -0500, Andrea Arcangeli wrote: > Switch the kernel default of SSBD and STIBP to the ones with > CONFIG_SECCOMP=n (i.e. spec_store_bypass_disable=prctl > spectre_v2_user=prctl) even if CONFIG_SECCOMP=y. Hello x86 maintainers! I'd really like to get this landed, so I'll take this via the seccomp-tree unless someone else speaks up. This keeps falling off the edge of my TODO list. :) -Kees -- Kees Cook