FreeBSD mds mitigation.

[mike tancsa]

On 7/10/2019 1:21 PM, damian at damianek.be wrote:
> śr., 10 lip 2019 o 18:56 Mike Tancsa <mike at sentex.net> napisał(a):
>
>> Try the port
>>
>> sysutils/devcpu-data/
>>
>>
> FreeBSD port is stale, does not contain the latest microcodes.


Looking at the port it seems like you can grab the versions newer than
May. There does not seem to be too many transformations going on.

0{backup4}# make extract
===>  License EULA accepted by the user
===>   devcpu-data-1.22 depends on file: /usr/local/sbin/pkg - found
===> Fetching all distfiles required by devcpu-data-1.22 for building
===>  Extracting for devcpu-data-1.22
=> SHA256 Checksum OK for amd64-microcode.20181214.tar.xz.
=> SHA256 Checksum OK for
intel-Intel-Linux-Processor-Microcode-Data-Files-1.22-microcode-20190514_GH0.tar.gz.
cp -f -p /usr/ports/sysutils/devcpu-data/files/Makefile
/usr/ports/sysutils/devcpu-data/files/ucode-split.c
/usr/ports/sysutils/devcpu-data/work/Intel-Linux-Processor-Microcode-Data-Files-microcode-20190514
/usr/bin/sed -i.bak 's|%%GH_TAGNAME%%|microcode-20190514|g'
/usr/ports/sysutils/devcpu-data/work/Intel-Linux-Processor-Microcode-Data-Files-microcode-20190514/Makefile
/bin/cat
/usr/ports/sysutils/devcpu-data/work/Intel-Linux-Processor-Microcode-Data-Files-microcode-20190514/Intel-Linux-Processor-Microcode-Data-Files-microcode-20190514/intel-ucode/*
/usr/ports/sysutils/devcpu-data/work/Intel-Linux-Processor-Microcode-Data-Files-microcode-20190514/Intel-Linux-Processor-Microcode-Data-Files-microcode-20190514/intel-ucode-with-caveats/*
>
/usr/ports/sysutils/devcpu-data/work/Intel-Linux-Processor-Microcode-Data-Files-microcode-20190514/intel-ucode.bin
0{backup4}#
0{backup4}#
0{backup4}# make
===>  Patching for devcpu-data-1.22
===>  Configuring for devcpu-data-1.22
===>  Building for devcpu-data-1.22
--- ucode-split ---
cc ucode-split.c -o ucode-split
--- ucode ---
mkdir -p mcodes
cd mcodes &&  for file in 
../Intel-Linux-Processor-Microcode-Data-Files-microcode-20190514/intel-ucode/[0-9,a-f][0-9,a-f]-[0-9,a-f][0-9,a-f]-[0-9,a-f][0-9,a-f];
do  ../ucode-split $file;  done
===>  Staging for devcpu-data-1.22
===>   Generating temporary packing list
/bin/mkdir -p
/usr/ports/sysutils/devcpu-data/work/stage/usr/local/share/cpucontrol/
install  -m 0644
/usr/ports/sysutils/devcpu-data/work/Intel-Linux-Processor-Microcode-Data-Files-microcode-20190514/microcode_amd.bin
/usr/ports/sysutils/devcpu-data/work/stage/usr/local/share/cpucontrol/
install  -m 0644
/usr/ports/sysutils/devcpu-data/work/Intel-Linux-Processor-Microcode-Data-Files-microcode-20190514/microcode_amd_fam15h.bin
/usr/ports/sysutils/devcpu-data/work/stage/usr/local/share/cpucontrol/
install  -m 0644
/usr/ports/sysutils/devcpu-data/work/Intel-Linux-Processor-Microcode-Data-Files-microcode-20190514/microcode_amd_fam16h.bin
/usr/ports/sysutils/devcpu-data/work/stage/usr/local/share/cpucontrol/
install  -m 0644
/usr/ports/sysutils/devcpu-data/work/Intel-Linux-Processor-Microcode-Data-Files-microcode-20190514/microcode_amd_fam17h.bin
/usr/ports/sysutils/devcpu-data/work/stage/usr/local/share/cpucontrol/
install  -m 0644
/usr/ports/sysutils/devcpu-data/work/Intel-Linux-Processor-Microcode-Data-Files-microcode-20190514/mcodes/*
/usr/ports/sysutils/devcpu-data/work/stage/usr/local/share/cpucontrol/
/bin/mkdir -p /usr/ports/sysutils/devcpu-data/work/stage/boot/firmware
install  -m 0644
/usr/ports/sysutils/devcpu-data/work/Intel-Linux-Processor-Microcode-Data-Files-microcode-20190514/intel-ucode.bin
/usr/ports/sysutils/devcpu-data/work/stage/boot/firmware/
====> Compressing man pages (compress-man)
===> Staging rc.d startup script(s)
0{backup4}#