path intel-ucode/*
vendor GenuineIntel
## It is deemed that blocking the SKX/CLX microcode update on all hardware
## in cases where no model filter is used is too broad, hence
## no-model-mode=success.
## https://bugzilla.redhat.com/1902884 https://bugzilla.redhat.com/1905111
dmi mode=fail-equal no-model-mode=success key=product_name val="Superdome Flex"
## https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/issues/45
dmi mode=fail-equal no-model-mode=success key=product_name val="SYS-2029TP-HTR/X11DPT-PS"
## The "kernel_early" statements are carried over from the intel caveat config
## in order to avoid enabling this newer microcode on these problematic kernels;
## see the caveat description in /usr/share/doc/microcode_ctl/caveats/intel_readme
## (That also means that this caveat has to be enforced separately on these
## kernels.)
kernel_early 4.10.0
kernel_early 3.10.0-930
kernel_early 3.10.0-862.14.1
kernel_early 3.10.0-693.38.1
kernel_early 3.10.0-514.57.1
kernel_early 3.10.0-327.73.1