How Meltdown and Spectre relate to the Enterprise File Fabric – Patch

For customers who have deployed Enterprise File Fabric Server on a hypervisor or in the cloud please follow the advice provided by your hypervisor vendor or cloud host.  For most deployments this will involve restarting the Enterprise File Fabric instance once the cloud or hypervisor has been patched.

For customers running a v10 or later instance patching can be achieved by following the following steps:

Log into the console as smeconfiguser and elevate to root:

su -

As the root user run the following command:

yum update kernel -y

This will install kernel version 3.10.0-693.11.6.el7 or later which have been patched for Meltdown and Spectre.

Output similar to the following confirms the kernel patch applied.

Removed:
 kernel.x86_64 0:3.10.0-514.21.1.el7

Installed:
 kernel.x86_64 0:3.10.0-693.11.6.el7

Complete!

Reboot the appliance to complete the patching with the following command:

reboot

For SME hosted customers SME will be handling the security updates to the infrastructure in co-ordination with our hosting partners. Contact support if you have any further questions.

Reference:

• Intel’s response 
• Google’s Project Zero post 
• meltdownattack.com 
• Documentation/x86/kaiser.txt  
• LWN: KAISER: hiding the kernel from user space 
• Kernel Side-Channel Attacks – CVE-2017-5754 CVE-2017-5753 CVE-2017-5715