Explicitly disable MSR_CET_NO_TRACK_EN in MSR_S_CET. If enabled by the
authorderaadt <deraadt@openbsd.org>
Sat, 24 Feb 2024 17:00:05 +0000 (17:00 +0000)
committerderaadt <deraadt@openbsd.org>
Sat, 24 Feb 2024 17:00:05 +0000 (17:00 +0000)
commit7eb2b5c29ec538447e2b96e5e7bfc16279363341
tree5f63fef19ad698dd686da82305eb50c4626543ca
parentb0486b750ed927c288ba143d855e5e13923480da
Explicitly disable MSR_CET_NO_TRACK_EN in MSR_S_CET.  If enabled by the
boot-process, we don't want to accidentally allow "notrack" indirect
branches. Linux kernel does the same.  Today it is difficult to do the
same for userland, because there is 1 known piece of software using
"notrack" (which needs to be fixed).
ok kettenis
sys/arch/amd64/amd64/cpu.c