diff options
| author | pennae <github@quasiparticle.net> | 2022-08-03 22:46:41 +0200 |
|---|---|---|
| committer | pennae <github@quasiparticle.net> | 2022-08-03 22:46:41 +0200 |
| commit | 61e93df1891972bae3e0c97a477bd44e8a477aa0 (patch) | |
| tree | 4285c1d22db537fb02baf1e978eb4434b0276b0c /nixos/modules/security/misc.nix | |
| parent | 645cfa59ac5690187eac40ef2ac67381668acecc (diff) | |
| download | nixpkgs-61e93df1891972bae3e0c97a477bd44e8a477aa0.tar nixpkgs-61e93df1891972bae3e0c97a477bd44e8a477aa0.tar.gz nixpkgs-61e93df1891972bae3e0c97a477bd44e8a477aa0.tar.bz2 nixpkgs-61e93df1891972bae3e0c97a477bd44e8a477aa0.tar.lz nixpkgs-61e93df1891972bae3e0c97a477bd44e8a477aa0.tar.xz nixpkgs-61e93df1891972bae3e0c97a477bd44e8a477aa0.tar.zst nixpkgs-61e93df1891972bae3e0c97a477bd44e8a477aa0.zip | |
nixos/*: automatically convert option docs to MD
once again using nix-doc-munge (https://github.com/pennae/nix-doc-munge/commit/69d080323ae27c0d8da3967c62b925a9aedb2828)
Diffstat (limited to 'nixos/modules/security/misc.nix')
| -rw-r--r-- | nixos/modules/security/misc.nix | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/nixos/modules/security/misc.nix b/nixos/modules/security/misc.nix index 3c83ff8d773..6833452a570 100644 --- a/nixos/modules/security/misc.nix +++ b/nixos/modules/security/misc.nix @@ -52,7 +52,7 @@ with lib; security.allowSimultaneousMultithreading = mkOption { type = types.bool; default = true; - description = '' + description = lib.mdDoc '' Whether to allow SMT/hyperthreading. Disabling SMT means that only physical CPU cores will be usable at runtime, potentially at significant performance cost. @@ -62,7 +62,7 @@ with lib; e.g., shared caches). This attack vector is unproven. Disabling SMT is a supplement to the L1 data cache flushing mitigation - (see <xref linkend="opt-security.virtualisation.flushL1DataCache"/>) + (see [](#opt-security.virtualisation.flushL1DataCache)) versus malicious VM guests (SMT could "bring back" previously flushed data). ''; |