On Sun, Feb 06, 2022 at 07:39:46PM -0800, Kees Cook wrote: > Oh, this seems weird to me, as I'd expect it to show up since the CPU is > _capable_ of it, even if it's not in use. (Am I really using avx512vl, > e.g.?) We're trying to put feature flags in /proc/cpuinfo which mean that the kernel supports the feature - not every CPUID bit out there. For that there's tools/arch/x86/kcpuid/kcpuid.c Otherwise /proc/cpuinfo becomes a dumping ground for feature flags and there's no shortage of those. > But as you point out later, it does work that way for a lot of things > and boot params. If this is the way things are supposed to be done, > it looks like we should wire up "nx" vs "noexec=off" boot param to do See here: https://lore.kernel.org/r/20220127115626.14179-1-bp@xxxxxxxxx -- Regards/Gruss, Boris. https://people.kernel.org/tglx/notes-about-netiquette