dprevot/evocheck
1
0
Fork 0
forked from evolix/evocheck
Code Issues Pull requests Projects Releases Wiki Activity

Add check for spectre v2

Browse source
This commit is contained in:
Benoît S. 2018-06-27 17:45:11 +02:00
parent 3451218a16
commit 33b19090e6
1 changed files with 4 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
evocheck.sh
View file

@ -97,7 +97,7 @@ IS_REDIS_BACKUP=1
IS_ELASTIC_BACKUP=1
IS_MONGO_BACKUP=1
IS_MOUNT_FSTAB=1
IS_MELTDOWN=1
IS_MELTDOWN_SPECTRE=1
#Proper to OpenBSD
IS_SOFTDEP=1
@ -706,10 +706,11 @@ if [ -e /etc/debian_version ]; then
fi
fi
if [ "$IS_MELTDOWN" = 1 ]; then
if [ "$IS_MELTDOWN_SPECTRE" = 1 ]; then
# We check if the running kernel has kaiser loaded
if is_debianversion stretch; then
grep '^flags' /proc/cpuinfo | grep -qEw '(kaiser|pti)' || echo 'IS_MELTDOWN FAILED!'
grep '^flags' /proc/cpuinfo | grep -qEw '(kaiser|pti)' || echo 'IS_MELTDOWN_SPECTRE FAILED!'
test -f /sys/devices/system/cpu/vulnerabilities/spectre_v2 || echo 'IS_MELTDOWN_SPECTRE FAILED!'
fi
fi
fi