From owner-svn-src-head@freebsd.org  Fri Dec  6 14:58:57 2019
Return-Path: <owner-svn-src-head@freebsd.org>
Delivered-To: svn-src-head@mailman.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.nyi.freebsd.org (Postfix) with ESMTP id 55ADC1CE01C;
 Fri,  6 Dec 2019 14:58:57 +0000 (UTC)
 (envelope-from eric@vangyzen.net)
Received: from smtp.vangyzen.net (hotblack.vangyzen.net
 [IPv6:2607:fc50:1000:7400:216:3eff:fe72:314f])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 server-signature RSA-PSS (4096 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 47Twhd1PPZz4VlS;
 Fri,  6 Dec 2019 14:58:56 +0000 (UTC)
 (envelope-from eric@vangyzen.net)
Received: from cerise.vangyzen.net (unknown [70.97.188.230])
 by smtp.vangyzen.net (Postfix) with ESMTPSA id 341D65648D;
 Fri,  6 Dec 2019 08:58:50 -0600 (CST)
Content-Type: text/plain;
	charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Subject: Re: svn commit: r355436 - in head/sys: amd64/amd64 x86/x86
From: Eric van Gyzen <eric@vangyzen.net>
In-Reply-To: <CAPyFy2B03419-DqfTf6uehC3J3behkxgbc-ORtLpE2hSGh+ebA@mail.gmail.com>
Date: Fri, 6 Dec 2019 08:58:48 -0600
Cc: Scott Long <scottl@freebsd.org>,
 src-committers <src-committers@freebsd.org>,
 svn-src-all <svn-src-all@freebsd.org>,
 svn-src-head <svn-src-head@freebsd.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <A154E85B-6781-4029-8971-B988A7B75EAA@vangyzen.net>
References: <201912060243.xB62h5So053092@repo.freebsd.org>
 <CAPyFy2B03419-DqfTf6uehC3J3behkxgbc-ORtLpE2hSGh+ebA@mail.gmail.com>
To: Ed Maste <emaste@freebsd.org>
X-Mailer: Apple Mail (2.3601.0.10)
X-Rspamd-Queue-Id: 47Twhd1PPZz4VlS
X-Spamd-Bar: -----
Authentication-Results: mx1.freebsd.org;
	none
X-Spamd-Result: default: False [-6.00 / 15.00];
 NEURAL_HAM_MEDIUM(-1.00)[-0.998,0];
 NEURAL_HAM_LONG(-1.00)[-0.999,0]; REPLY(-4.00)[]
X-BeenThere: svn-src-head@freebsd.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: SVN commit messages for the src tree for head/-current
 <svn-src-head.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/svn-src-head>,
 <mailto:svn-src-head-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/svn-src-head/>
List-Post: <mailto:svn-src-head@freebsd.org>
List-Help: <mailto:svn-src-head-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/svn-src-head>,
 <mailto:svn-src-head-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 06 Dec 2019 14:58:57 -0000



> On Dec 6, 2019, at 4:36 AM, Ed Maste <emaste@freebsd.org> wrote:
>=20
> On Thu, 5 Dec 2019 at 21:43, Scott Long <scottl@freebsd.org> wrote:
>>=20
>> Author: scottl
>> Date: Fri Dec  6 02:43:05 2019
>> New Revision: 355436
>> URL: https://svnweb.freebsd.org/changeset/base/355436
>>=20
>> Log:
>>  Move the mds, irbs, and ssb mitigation knobs into =
machdep.mitigations.
>=20
> If we're moving them and adding backwards-compatibility scaffolding we
> really should correct the sense of the sysctls at the same time.

I was just going to suggest that.  For some, 0 is secure; for others, 1 =
is secure.  Since they=E2=80=99re under =E2=80=9Cmitigations,=E2=80=9D I =
think 1 should consistently mean =E2=80=9Cmitigated.=E2=80=9D

Eric=