GCC and Meltdown and Spectre vulnerabilities

[Florian Weimer]

* timofonic timofonic:

> Paranoid jails/sandboxes inside a virtual machine may mitigate a lot
> the risk for those untrusted binaries, right?

Someone needs to impelement those sandboxes and virtual machines, and
GCC changes may help with writing them in such a way that they are
less exposed to these vulnerabilities.

(I'm not sure if this is the right way forward—I'm just trying to
explain the rationale for potential GCC changes.)