From Friday, April 19th (11:00 PM CDT) through Saturday, April 20th (2:00 PM CDT), 2024, ni.com will undergo system upgrades that may result in temporary service interruption.
We appreciate your patience as we improve our online experience.
From Friday, April 19th (11:00 PM CDT) through Saturday, April 20th (2:00 PM CDT), 2024, ni.com will undergo system upgrades that may result in temporary service interruption.
We appreciate your patience as we improve our online experience.
In order to enable mitigations, the following steps must be taken.
For example, if using the cRIO-9068, you would need to install NI-CompactRIO 19.0 and upgrade the firmware to get the mitigations.
In order to enable all mitigations, the following steps must be taken:
Vulnerability | Status Name | Section | Token | Value |
---|---|---|---|---|
For NI Linux Real-Time 2022Q4 and Later | ||||
All | All | SYSTEMSETTINGS | cpu.mitigations.disabled | FALSE |
For NI Linux Real-Time 2022Q4 and Prior | ||||
Spectre Variant 2 | Spectre_v2 | SYSTEMSETTINGS | spectre_v2.mitigations.disabled | FALSE |
Spectre Variant 4 | Spec_store_bypass | SYSTEMSETTINGS | spectre_v4.mitigations.disabled | FALSE |
Meltdown | Meltdown | SYSTEMSETTINGS | meltdown.mitigations.disabled | FALSE |
Foreshadow | L1tf | SYSTEMSETTINGS | l1tf.mitigations.disabled | FALSE |
If you need to enable or disable specific mitigations for NI Linux Real-Time 2022Q4 and later, directly edit “/boot/runmode/cpu-mitigations.cfg” on the NI Linux Real-Time target.
If the cpu-mitigations file is named “cpu-mitigations.cfg.disabled” on your NI Linux Real-Time target you should first rename it to “cpu-mitigations.cfg”. Next you will need to replace “mitigations=off” in “cpu-mitigations.cfg”. Note that replacing mitigations=off will enable all mitigations by default. You will need to specify specific mitigations you want disabled in cpu-mitigations.cfg. For example, if you want to enable all mitigations but specifically disable spectre_v2 and meltdown mitigations you would update “cpu-mitigations.cfg” to the following:
set otherbootargs="${otherbootargs} spectre_v2=off pti=off"
Whenever you update “cpu-mitigations.cfg” you will need to reboot your NI Linux Real-Time target for the changes to take effect. For a complete list of mitigations please refer to the kernel parameter documentation for the kernel version you’re using on your NI Linux Real-Time target.