Skip to content
View in the app

A better way to browse. Learn more.

Unraid

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

[Plugin] Disable Security Mitigations

Featured Replies

  • Author

I know.  Haven't had a chance yet to fix that and check for Kernel version instead of unRaid version

  • Replies 65
  • Views 22.3k
  • Created
  • Last Reply

Top Posters In This Topic

Most Popular Posts

  • For the record, I highly recommend no one surfs the internet using the unRaid GUI boot mode and included web browser and no one exposes their server to the internet. In my opinion, those two issues ar

  • I love this community, half of 'em are screaming like hellfire when a vulnerability goes longer than 30 seconds unpatched, the other half want to switch it off.   Me, I'm in the latter camp.

  • Yeah, it's getting ridiculous now.   So for Spectre / Meltdown.  First you have to have the appropriate malware running locally on your server. (Which BTW, they have never found a single ins

Posted Images

  • Author

Update should fix it up.  Depending upon your upgrade path on the OS, a reboot may be necessary to disable the mitigations

  • 2 months later...
  • Author

Just so that there's no confusion, this plugin has nothing to do with any security mitigations done by Limetech ie: Sysdream 

 

This plugin will only disable the mitigations for Spectre, Meltdown, et al and will NOT disable the mitigations discussed below

 

 

15 minutes ago, Squid said:

This plugin will only disable the mitigations for Spectre, Meltdown, and will NOT disable the mitigations discussed below

For the record: Lime Tech highly recommends you do not turn off these mitigations.

For the record, I highly recommend no one surfs the internet using the unRaid GUI boot mode and included web browser and no one exposes their server to the internet. In my opinion, those two issues are more dangerous than disabling these mitigations.

 

  • 3 weeks later...

How to disable the yellow bar alert that says I need to reboot my server? I hit the disable button and then re-enabled it immediately since I don't want to reboot and want to get rid of the message. I tried removing the plugin but that yellow alert is still there and there is no X.

Found it with a recursive grep, had to purge the content of /tmp/reboot_notifications. Deleting it would probably work too, haven't tried.

Edited by dnLL

  • 2 years later...

Bumping this thread because latest Unraid 6.11 uses Linux kernal 5.19.x, which has mitigations for Retbleed. It appears this plugin sets the global mitigations to disabled, so it should disable Rebleed mitigations, but wanted to see if anyone has verified that is actually the case.

  • Author
3 hours ago, dcooper said:

Bumping this thread because latest Unraid 6.11 uses Linux kernal 5.19.x, which has mitigations for Retbleed. It appears this plugin sets the global mitigations to disabled, so it should disable Rebleed mitigations, but wanted to see if anyone has verified that is actually the case.

All you have to do is go to the settings of the plugin to confirm

image.png

1 hour ago, Squid said:

All you have to do is go to the settings of the plugin to confirm

image.png

Sure, but I haven't upgraded to 6.11 yet.  Thanks for confirming. 

  • 2 weeks later...

I used the mitigations plugin in 6.9.2 without any problems regarding to my macOS VMs.

After upgrading to 6.11/6.11.1 I had boot problems into my macOS VMs (several random opencore kernel panics, syslog shows amdgpu errors) and I am not able to boot into the macOS VMs. Windows works fine.

I have a verdict, causing the problem. I suspect the boot problems could be related to the mitigations plugin, as it looks like the problem only accures at the time mitigations are enabled.
I can reproduce the error, every time I rebuild my flash to 6.9.2 from backup with mitigations enabled, everthing works fine. Updating 6.9.2 to 6.11 or 6.11.1, the mitigations are still enabled and I am not able to boot into the macOS VMs.
Any advice from your side, what I could check to see if there is defenitly any relation?
I like the mitigations enabled, as my macOS is round about 20-25% faster with them turned on.

2 hours ago, derpuma said:

I like the mitigations enabled, as my macOS is round about 20-25% faster with them turned on.

This is a bit strange - I would always expect the mitigations to reduce performance.

17 minutes ago, itimpi said:
3 hours ago, derpuma said:

I like the mitigations enabled, as my macOS is round about 20-25% faster with them turned on.

This is a bit strange - I would always expect the mitigations to reduce performance.

 

i think the OP meant that to have the mitigations 'Enabled' (That is; the protection turned 'off'), the MacOS was faster...

  • Author
1 hour ago, Frank1940 said:

 

i think the OP meant that to have the mitigations 'Enabled' (That is; the protection turned 'off'), the MacOS was faster...

I think both you and the OP meant to say "Disabled" which makes everything faster  ;) 

18 minutes ago, Squid said:

I think both you and the OP meant to say "Disabled" which makes everything faster  ;) 

 

Yes I did, sorry for the missundertanding. Of course I meant mitigations="off"...

19 minutes ago, Squid said:

I think both you and the OP meant to say "Disabled" which makes everything faster  ;) 

You are right.   I will have to remember to read what is actually written rather than what I think it says...   🤣😈

image.thumb.png.53910f61809ecc618511fc6e5b192c7c.png

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.