Stéphane Lesimple

1. the {KERNEL_SOURCE}/vmlinux file is probably the raw uncompressed and unprocessed kernel image file, straight out from compilation/linking and before compression/packing/formatting (arch-dependent, uImage doesn't exist on x86 for example), so...

Indeed in some cases it could happen that the person running the script doesn't have root access for some reason, and still want to try to have some information about...

Thanks for your report. I don't want people thinking they're secure when they're not, and that's exactly why on every run of the script, the last line always says: >...

I know AMD finally announced that they would release microcode updates too for variant 2, but I didn't know those were already available ! I'm making the assumption that the...

Got it. Is the source of the kernel you're using (I suppose it's an OpenSUSE one) that shows the `ibpb` flag with updated AMDs available somewhere? I'm trying to document...

I think I shouldn't just add the `ibpb` flag as a synonym to the `spec_ctrl` flag, because per the patch you linked, these seem slightly different. For Intel, the `spec_ctrl`...

Could you try the `ibpb` branch on an updated AMD system? You'll see that the output of the script will be different than before, now I also check for IBPB...

I couldn't find any updated AMD microcode yet, even under OpenSUSE Tumbleweed as of `kernel-default-4.14.14-1.7`. I guess we'll have to wait a bit to be able to test, but this...

I have no access to a Chromebook to be able to test on it, but based on the output of the script, it would seem that the script can't read...

Those are the important bits: > Will use no vmlinux image (accuracy might be reduced) > Will use no kconfig (accuracy might be reduced) However I don't see the debug...