[Beowulf] [upgrade strategy] Intel CPU design bug & security flaw - kernel fix imposes performance penalty

Christopher Samuel chris at csamuel.org
Fri Jan 5 08:19:51 PST 2018


On 03/01/18 23:56, Remy Dernat wrote:

> So here is me question : if this is not confidential, what will you do ?

Any system where you do not have 100% trust in your users, their
passwords and the devices they use will (IMHO) need to be patched.

But as ever this will need to be a site-specific risk assessment.

For sites running Slurm with Munge they might want to consider what
the impact of a user being able to read the munge secret key out of
memory and potentially reusing it, for instance.

All the best,
Chris
-- 
  Chris Samuel  :  http://www.csamuel.org/  :  Melbourne, VIC


More information about the Beowulf mailing list