Return to 73.html CVS log | Up to [local] / www |
version 1.51, 2023/04/08 01:52:39 | version 1.52, 2023/04/08 10:56:51 | ||
---|---|---|---|
|
|
||
href="https://man.openbsd.org/getnsecruntime.9">getnsecruntime(9)</a>. | href="https://man.openbsd.org/getnsecruntime.9">getnsecruntime(9)</a>. | ||
Offers fast access to the system runtime clock at the cost of precision. | Offers fast access to the system runtime clock at the cost of precision. | ||
<li>Add detection for Spectre-BHB Branch History Injection | |||
vulnerability related CLRBHB, ECBHB and CSV2_3/HCXT feature bits. | |||
<li>Prevent detaching ("bioctl -d detach") of a boot volume on a RAID managed by <a | <li>Prevent detaching ("bioctl -d detach") of a boot volume on a RAID managed by <a | ||
href="https://man.openbsd.org/bioctl.8">bioctl(8)</a>. | href="https://man.openbsd.org/bioctl.8">bioctl(8)</a>. | ||
|
|
||
avoids accidentally mapping memory regions that should not be mapped | avoids accidentally mapping memory regions that should not be mapped | ||
(i.e. secure memory) as all mapped memory can be accessed | (i.e. secure memory) as all mapped memory can be accessed | ||
speculatively. | speculatively. | ||
<li>Added arm64 detection of EPAN feature bit. Enhanced Privileged Access Never | |||
(EPAN) allows Privileged Access Never to be used with Execute-only mappings. | |||
<li>On arm64, add a machdep.lidaction <a | <li>On arm64, add a machdep.lidaction <a | ||
href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> for <a | href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> for <a | ||
href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a> Apple Silicon | href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a> Apple Silicon |