Skip to content
This repository was archived by the owner on Sep 16, 2022. It is now read-only.

Server-side check for kernel CPU vulnerabilities.#495

Merged
vpetersson merged 5 commits intoWoTTsecurity:masterfrom
GreatFruitOmsk:482-cpu-vuln
Nov 6, 2019
Merged

Server-side check for kernel CPU vulnerabilities.#495
vpetersson merged 5 commits intoWoTTsecurity:masterfrom
GreatFruitOmsk:482-cpu-vuln

Conversation

@a-martynovich
Copy link
Copy Markdown
Contributor

@rptrchv
Copy link
Copy Markdown
Contributor

rptrchv commented Nov 4, 2019

@a-martynovich pls add screenshot(s)

@a-martynovich a-martynovich requested a review from rptrchv November 4, 2019 12:18
@a-martynovich
Copy link
Copy Markdown
Contributor Author

image

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Are you sure source_name and source_version are needed here? They are not in the DebPackage model's compound unique constraint.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

How do you expect me to find the package?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah I see what you mean... that name and version is enough. I guess you're right.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

'name', 'version', 'arch' and 'os_release_codename' is enough because of:
unique_together = ['name', 'version', 'arch', 'os_release_codename']

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

still relevant ^

Copy link
Copy Markdown
Contributor

@rptrchv rptrchv Nov 5, 2019

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@a-martynovich pls leave it as it is now

Use self.assert... in test_cpu_vulnerable().
Erase device.cpu and device.kernel_deb_package if missing in ping.
Add comments to Device.cpu_vulnerable logic.
@a-martynovich
Copy link
Copy Markdown
Contributor Author

a-martynovich commented Nov 5, 2019

Added recommended action and rebased the branch.

@a-martynovich a-martynovich requested a review from rptrchv November 5, 2019 09:02
class CpuVulnerableAction(ActionPerDevice):
action_id = 12
action_title = 'Your system is vulnerable to Meltdown and/or Spectre attacks'
action_description = 'Intel CPU sucks on %s'
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@vpetersson pls approve/improve the text ^

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@a-martynovich a-martynovich requested a review from rptrchv November 5, 2019 10:25
@vpetersson vpetersson merged commit b9b3d19 into WoTTsecurity:master Nov 6, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants