path intel-ucode/*

vendor GenuineIntel

## It is deemed that blocking the SKX/CLX microcode update on all hardware

## in cases where no model filter is used is too broad, hence

## no-model-mode=success.

## https://bugzilla.redhat.com/1902884 https://bugzilla.redhat.com/1905111

dmi mode=fail-equal no-model-mode=success key=product_name val="Superdome Flex"

## https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/issues/45

dmi mode=fail-equal no-model-mode=success key=product_name val="SYS-2029TP-HTR/X11DPT-PS"

## The "kernel_early" statements are carried over from the intel caveat config

## in order to avoid enabling this newer microcode on these problematic kernels;

## see the caveat description in /usr/share/doc/microcode_ctl/caveats/intel_readme

## (That also means that this caveat has to be enforced separately on these

## kernels.)

kernel_early 4.10.0

kernel_early 3.10.0-930

kernel_early 3.10.0-862.14.1

kernel_early 3.10.0-693.38.1

kernel_early 3.10.0-514.57.1

kernel_early 3.10.0-327.73.1