4 ms·
With so much going on - is there a way in linux to know whether my system is patched or not? Similar to the powershell script for Windows?
by fermienrico 9y ago
With so much going on - is there a way in linux to know whether my system is patched or not?
Similar to the powershell script for Windows?
- RedCrowbar 9y agocat /proc/cpuinfo | grep pti
- fermienrico 9y agoWhat is the expected outcome if its patched vs. not? I am getting: fpu_exception : yes
- AbacusAvenger 9y agoYou should see "pti" on the "flags" line of /proc/cpuinfo. You apparently don't, so you don't have page table isolation.
- ComputerGuru 9y agoNo, he shouldn’t be seeing that regardless as it doesn’t match the grep regex. I don’t know what, though. Edit: facepalm. Or should that be foot-in-mouth?
- sowpati 9y agoIt does match the regex. "pti" is a substring in "exception"
- ComputerGuru 9y agoThanks. I feel stupid, I looked that line up, down, and sideways for a match :/
- ComputerGuru 9y agoI was wrong
- jwilk 9y agofpu_excePTIon
- fermienrico 9y agoI currently have the following system (up-to-date): Ubuntu 16.04.3 LTS (GNU/Linux 4.4.0-104-generic x86_64) I ran the following command: sudo cat /proc/cpuinfo | grep pti which returned: fpu_exception : yes Note the instance of 'pti' in the word 'exception'.
- blattimwind 9y ago$ dmesg | grep isolation [ 0.000000] Kernel/User page tables isolation: enabled
- frazar0 9y agoA number of ways are listed here [1] 1. With dmesg dmesg -wH | grep 'page tables isolation' 2. With /proc/cpuinfo grep cpu_insecure /proc/cpuinfo && echo "Patched" || echo "Unpatched!" [1] https://askubuntu.com/questions/992137/how-to-check-that-kpti-is-enabled-on-my-ubuntu https://askubuntu.com/questions/992137/how-to-check-that-kpt...
- weinzierl 9y agoI like dmesg -H | grep 'page tables isolation' better, because dmesg -wH doesn't return and I suppose the 'page tables isolation' appears during boot.
- fermienrico 9y agoThanks. So apparently, my system: Ubuntu 16.04.3 LTS (GNU/Linux 4.4.0-104-generic x86_64) is unpatched! Is it because of LTS version? Most servers run this including mine.
- andreyv 9y agoUbuntu has not released kernel updates for this issue yet.
- deleted 9y ago[deleted]
- nebulous1 9y agoUbuntu say they will release a patch on or before the 9th of January. They got caught out by the embargo being ended early.
- deleted 9y ago[deleted]
- deleted 9y ago[deleted]
- cheeseprocedure 9y ago
- booleandilemma 9y agoLink to the powershell script for those who need it: https://blogs.technet.microsoft.com/ralphkyttle/2018/01/05/verifying-spectre-meltdown-protections-remotely/ https://blogs.technet.microsoft.com/ralphkyttle/2018/01/05/v...