From 33b19090e6c2462228f9f650f1e83da0b5928406 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Beno=C3=AEt=20S?= Date: Wed, 27 Jun 2018 17:45:11 +0200 Subject: [PATCH] Add check for spectre v2 --- evocheck.sh | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/evocheck.sh b/evocheck.sh index b4984bb..9c11b1a 100755 --- a/evocheck.sh +++ b/evocheck.sh @@ -97,7 +97,7 @@ IS_REDIS_BACKUP=1 IS_ELASTIC_BACKUP=1 IS_MONGO_BACKUP=1 IS_MOUNT_FSTAB=1 -IS_MELTDOWN=1 +IS_MELTDOWN_SPECTRE=1 #Proper to OpenBSD IS_SOFTDEP=1 @@ -706,10 +706,11 @@ if [ -e /etc/debian_version ]; then fi fi - if [ "$IS_MELTDOWN" = 1 ]; then + if [ "$IS_MELTDOWN_SPECTRE" = 1 ]; then # We check if the running kernel has kaiser loaded if is_debianversion stretch; then - grep '^flags' /proc/cpuinfo | grep -qEw '(kaiser|pti)' || echo 'IS_MELTDOWN FAILED!' + grep '^flags' /proc/cpuinfo | grep -qEw '(kaiser|pti)' || echo 'IS_MELTDOWN_SPECTRE FAILED!' + test -f /sys/devices/system/cpu/vulnerabilities/spectre_v2 || echo 'IS_MELTDOWN_SPECTRE FAILED!' fi fi fi