DragonFlyBSD Flips On Compiler-Based Retpoline Support For Its Kernel, Also Adds SMAP/SMEP

Written by Michael Larabel in BSD on 17 May 2019 at 12:24 AM EDT. Add A Comment
In addition to DragonFlyBSD seeing MDS "Zombie Load" mitigations this week, the DragonFlyBSD kernel now has better Spectre Variant Two coverage with making use of the GCC compiler support.

DragonFlyBSD switched to GCC 8 by default at the end of last year and that allows them now to enable -mindirect-branch=thunk-inline as part of the Spectre Variant Two mitigation strategy. Their earlier GCC5 compiler didn't offer this support albeit it took them a while still to enable this compiler flag by default when compiling the kernel.

This kernel flag is needed inline Retpoline-based methods for software-based Spectre V2 mitigation. When enabling the support, DragonFlyBSD lead developer Matthew Dillon noted he didn't find a change in his simple benchmark of doing a generic build kernel compilation test.

Separately and unrelated to Spectre but in the name of security, Matthew Dillon also added support to the DragonFlyBSD kernel for SMAP and SMEP.
Related News
About The Author
Michael Larabel

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter, LinkedIn, or contacted via MichaelLarabel.com.

Popular News This Week