Help¶

This is recommended on platforms with speculative executions, to protect against branch target injection (AKA Spectre-V2). Full description of how retpolines work can be found here[1].

Currently only the x86 port

[1] https://support.google.com/faqs/answer/7625886

Defaults¶

“y” if !X86_NO_SPECTRE_V2

Kconfig definition¶

At kernel/Kconfig:577

Included via Kconfig:10 → Kconfig.zephyr:25

Menu path: (top menu) → General Kernel Options → Security Options

config RETPOLINE
    bool
    prompt "Build with retpolines enabled"
    default "y" if !X86_NO_SPECTRE_V2
    help
      This is recommended on platforms with speculative executions, to protect
      against branch target injection (AKA Spectre-V2).  Full description of
      how retpolines work can be found here[1].

      Currently only the x86 port

      [1] https://support.google.com/faqs/answer/7625886

(Definitions include propagated dependencies, including from if’s and menus.)