From: Mark Langsdorf <mlangsdo@xxxxxxxxxx> redhat: enable CONFIG_DEVTMPFS_SAFE Include the MS_NOEXEC and MS_NOSUID mount flags when mounting devtmpfs. Signed-off-by: Mark Langsdorf <mlangsdo@xxxxxxxxxx> diff --git a/redhat/configs/common/generic/CONFIG_DEVTMPFS_SAFE b/redhat/configs/common/generic/CONFIG_DEVTMPFS_SAFE index blahblah..blahblah 100644 --- a/redhat/configs/common/generic/CONFIG_DEVTMPFS_SAFE +++ b/redhat/configs/common/generic/CONFIG_DEVTMPFS_SAFE @@ -1 +1 @@ -# CONFIG_DEVTMPFS_SAFE is not set +CONFIG_DEVTMPFS_SAFE=y -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1890 _______________________________________________ kernel mailing list -- kernel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to kernel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure