Enable ssbd=force-on

[raja-grewal]

As per the suggested review in #278, there is a minor addition we can make that in many cases is not neccessary.

Currently, our inclusion of spec_store_bypass_disable=on unconditionally disables Speculative Store Bypass .

The use of ssbd=force-on also unconditionally enables the mitigation for both kernel and userspace that is applicable in situations where a firmware based mitigation is offered.

Therefore, I see no harm in also including this parameter.

Changes

Add the ssbd=force-on kernel boot parameter.

Mandatory Checklist

• Legal agreements accepted. By contributing to this organisation, you acknowledge you have read, understood, and agree to be bound by these these agreements:

Terms of Service, Privacy Policy, Cookie Policy, E-Sign Consent, DMCA, Imprint

Optional Checklist

The following items are optional but might be requested in certain cases.

• I have tested it locally
• I have reviewed and updated any documentation if relevant
• I am providing new code and test(s) for it