Linux 4.19 Preparing Better CPU Security Mitigations, New EROFS File-System (phoronix.com)
An anonymous reader writes: Linus Torvalds released on Sunday Linux 4.19-rc1 that he describes as a "fairly frustrating merge window" following the new features landing over the past two weeks. What does this "pretty big release" offer? Phoronix's Linux 4.19 feature overview sheds light on more Spectre CPU mitigations for x86/POWER/s390, the new EROFS read-only Android file-system, a Raspberry Pi voltage driver, ThinkPad calculator key support, an in-kernel GPS subsystem, the Google GASKET driver framework, virtual kernel mode-setting, Qualcomm Adreno 600 series support, and many other improvements.
There is no way a single kernel should be doing all this shit.
I got a preview of the security Code:
if (cpu_vendor == intel) {
disable_L1_cache();
disable_L2_cache();
disable_L3_cache();
disable_instr_cache();
disable_data_cache();
disable_branch_prediction();
disable_hyperthreading();
if (ultra_secure_mode == true) {
for (i=1;i=num_cores-1;i++) {
disable_core(i);
}
}
}
one can expect a heavy performance penalty, but the power consumption should go way down, so we have that going for us.
It's a good thing USA Linux doesn't rely on socialist open source software or the untrustworthy labor of immigrants or foreigners. I just can't figure out where to send the check so they send me the CD in the mail?
Only buy AMD.
Anons need not reply. Questions end with a question mark.
It appears that it might support my wireless AC. If so, finally I will be able to use 5ghz and 802.11ac in Linux with my USB adapter!
New ERO file-system, not mentioned in TFA, what can that be...
Slashdot, fix the reply notifications... You won't get away with it...
It should be illegal for Intel, or Google or Microsoft to put their disgusting shit into the Linuz kernel. Android is a stupid Java toy piece of shit and Google just wants to make it easier for themselves by stuffing their patches into the mainline, instead of dealing with changes in their own copy. This should be illegal. If you are some corporate piece of shit that believes in keeping your stuff closed source while invading everyone's privacy for profit, then you should be barred from contributing anything to Linux, on the grounds you are a filthy, scheming over-valued shitbag and your "contribution" is just a way to entrench your stupid product where it is not wanted, and does not belong.
Fuck Intel.
The summary left out a pretty important point from the article, in my opinion:
The USB Type-C display mode alternate driver was merged to the mainline kernel for stepping up the DP Type-C support, but more work on integrating with the DRM drivers is still being tackled.
So what this means, is that you have a dongle or monitor cable with USB-C on one end, and DisplayPort on the other end.
This is important, because I expect to see new laptops coming out, that only have USB-C/Thunderbolt 3. The obvious existing ones are from Apple, but I expect that more laptops will come out with no other ports except USB-C/Thunderbolt 3.
8 of 13 people found this answer helpful. Did you?
As someone who has had a ThinkPad of some sort or another for 10+ years running Linux... what is the calculator key supposed to do?
By looking at the name of EROFS I thought we will finally have a dedicated porn filesystem. So disappointed.
Why the fuck isn't GPS a userland process? What business does it have being in-kernel?
Linux has been modular for decades, so you only include what you use. So if you don't use the filesystem or the patch, you don't install the filesystem or patch.
Interactions should only be with the local subsystem, so a hundred modules of a hundred thousand makes no difference. You're still only looking at core functions (kernel core functions plus local API). The subsystem takes care of security, etc.
With kernel threads, non-interacting code blocks don't need to risk blocking each other.
Because context switches are the things that kill performance, reducing context switches by having all of a module in the kernel rather than half in is a good approach. Exokernels (where only essential code is ring 0) are only faster if you're not having to make a lot of calls across. Microkernels are generally slower than monolithic, modular or eco.
At this point, the cost of mitigating the Intel bugs is more than the cost of recalling the chips or the cost of using formal methods to prevent such bugs arising to begin with. This shows why doing it right is better than doing it cheaply. (Something I've said for the past 30 years.)
Frankly, I'm not impressed with the improvements of the last few releases. Zero copy was introduced both with Von Jacobson Channels and the RDMA Consortium, again many decades ago. It should be standard for all I/O subsystems. I'm also still waiting for the plugable scheduler, as no individual scheduler is right for all systems.
And if people really want a lighter kernel, then have the filesystem and network subsystems standalone. If you can upload them on to a sufficiently advanced disk controer/network card respectively, you can offload all that work and use message passing to mask where it's running. Decentralization. Reduces the consequence of bad CPUs, you can't interfere with code that isn't running on it, and might improve performance as the CPU isn't hogged.
Some parts of the kernel may be buggy or vulnerable to regression. If they can be rewritten in Verified C, or so that they can be praised with Why3, you can start to develop theorems that will establish if the code is behaving as you'd expect.
Lost track of whether SGI's kernel debugger was fully integrated with the mainline. If not, why not and can someone please bring it up to date and get it looked at properly?
Same with Web10g, the network profiling system. We could do a lot with that if it were, ummm, used by people and not hiding in obscurity.
What's the story with badmem? Now that cheapo space missions are going to be common, Linux needs to support the ability to be used in a slowly degrading computer.
It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
It is a driver for GPS devices.
All it does is provide the communications with the device, and control the device.
What's the deal with the GPS subsystem that was mentioned for 4.19?
What can this subsystem do and why does it have to be in the kernel?
And yes, I buy AMD where I can.
The summary left out a pretty important point from the article, in my opinion:
The USB Type-C display mode alternate driver was merged to the mainline kernel for stepping up the DP Type-C support, but more work on integrating with the DRM drivers is still being tackled.
Slight confusing:
* DP = DisplayPort: https://www.displayport.org/displayport-over-usb-c/
But if you transpose them:
* PD = PowerDelivery: http://www.usb.org/developers/powerdelivery/
Of course you can connect a display using DP to a laptop, and also have the screen have PD to charge the battery.
Ero-Manga, Ero-Game, Ero-Anime, Ero-FS!
As in erotica?
I guess it's in line with the rest of Linux/UNIX history of sexual fetish/fantasies: fsck, gimp, stdin, stdout.