From 1df0de78f9718170f7b693c99ea59681b88b2bf7 Mon Sep 17 00:00:00 2001 From: Dmitry Vyukov Date: Sat, 17 Nov 2018 14:24:45 -0800 Subject: dashboard/config: add spec_store_bypass_disable=prctl Opens more interesting kernel surface. --- dashboard/config/upstream-apparmor.cmdline | 1 + dashboard/config/upstream-selinux.cmdline | 1 + dashboard/config/upstream-smack.cmdline | 1 + 3 files changed, 3 insertions(+) diff --git a/dashboard/config/upstream-apparmor.cmdline b/dashboard/config/upstream-apparmor.cmdline index fb4e56262..328a9fd37 100644 --- a/dashboard/config/upstream-apparmor.cmdline +++ b/dashboard/config/upstream-apparmor.cmdline @@ -9,4 +9,5 @@ nf-conntrack-irc.ports=20000 nf-conntrack-sane.ports=20000 vivid.n_devs=16 vivid.multiplanar=1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2 +spec_store_bypass_disable=prctl nopcid diff --git a/dashboard/config/upstream-selinux.cmdline b/dashboard/config/upstream-selinux.cmdline index 166f58db5..730087017 100644 --- a/dashboard/config/upstream-selinux.cmdline +++ b/dashboard/config/upstream-selinux.cmdline @@ -9,4 +9,5 @@ nf-conntrack-irc.ports=20000 nf-conntrack-sane.ports=20000 vivid.n_devs=16 vivid.multiplanar=1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2 +spec_store_bypass_disable=prctl nopcid diff --git a/dashboard/config/upstream-smack.cmdline b/dashboard/config/upstream-smack.cmdline index 5a40aab09..108255429 100644 --- a/dashboard/config/upstream-smack.cmdline +++ b/dashboard/config/upstream-smack.cmdline @@ -9,4 +9,5 @@ nf-conntrack-irc.ports=20000 nf-conntrack-sane.ports=20000 vivid.n_devs=16 vivid.multiplanar=1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2 +spec_store_bypass_disable=prctl nopcid -- cgit mrf-deployment