From: Benjamin Coddington <bcodding@xxxxxxxxxx> redhat/configs: NFS: disable UDP, insecure enctypes Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1952863 Upstream-status: RHEL Only There are a few serious problems supporting NFS over UDP, we're disabling to protect customers from running in this configuration. There's also no reason to continue to allow insecure encryption types, let disable that as well. Signed-off-by: Benjamin Coddington <bcodding@xxxxxxxxxx> diff --git a/redhat/configs/common/generic/CONFIG_NFS_DISABLE_UDP_SUPPORT b/redhat/configs/common/generic/CONFIG_NFS_DISABLE_UDP_SUPPORT index blahblah..blahblah 100644 --- a/redhat/configs/common/generic/CONFIG_NFS_DISABLE_UDP_SUPPORT +++ b/redhat/configs/common/generic/CONFIG_NFS_DISABLE_UDP_SUPPORT @@ -1 +1 @@ -# CONFIG_NFS_DISABLE_UDP_SUPPORT is not set +CONFIG_NFS_DISABLE_UDP_SUPPORT=y diff --git a/redhat/configs/common/generic/CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES b/redhat/configs/common/generic/CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES index blahblah..blahblah 100644 --- a/redhat/configs/common/generic/CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES +++ b/redhat/configs/common/generic/CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES @@ -1 +1 @@ -# CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES is not set +CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES=y -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1506 _______________________________________________ kernel mailing list -- kernel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to kernel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
