From: Dorinda Bassey on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3617 Upstream Status: RHEL only Disable The IPsec Protocols and XFRM (IPSec) Networking Security Hooks and it's related dependencies. CONFIG_XFRM_* has a dependency on CONFIG_INET_* and CONFIG_IPV6. Hence, the following: CONFIG_INET_AH CONFIG_INET6_AH CONFIG_INET6_ESP CONFIG_INET6_IPCOMP CONFIG_INET6_XFRM_TUNNEL CONFIG_IPV6 needs to be disabled in automotive. This is needed to satisfy a requirement of FuSa efforts for RHIVOS. Link: https://issues.redhat.com/browse/RHEL-75561 Signed-off-by: Dorinda Bassey <dbassey@xxxxxxxxxx> --- redhat/configs/rhel/automotive/generic/CONFIG_6LOWPAN_NHC_IPV6 | 1 + redhat/configs/rhel/automotive/generic/CONFIG_INET6_AH | 1 + redhat/configs/rhel/automotive/generic/CONFIG_INET6_XFRM_TUNNEL | 1 + redhat/configs/rhel/automotive/generic/CONFIG_INET_AH | 1 + redhat/configs/rhel/automotive/generic/CONFIG_INET_ESP | 1 + redhat/configs/rhel/automotive/generic/CONFIG_INET_IPCOMP | 1 + redhat/configs/rhel/automotive/generic/CONFIG_IPV6 | 2 +- redhat/configs/rhel/automotive/generic/CONFIG_NET_IPVTI | 1 + redhat/configs/rhel/automotive/generic/CONFIG_SECURITY_NETWORK_XFRM | 1 + redhat/configs/rhel/automotive/generic/CONFIG_XFRM | 1 + redhat/configs/rhel/automotive/generic/CONFIG_XFRM_AH | 1 + redhat/configs/rhel/automotive/generic/CONFIG_XFRM_ALGO | 1 + redhat/configs/rhel/automotive/generic/CONFIG_XFRM_ESP | 1 + redhat/configs/rhel/automotive/generic/CONFIG_XFRM_ESPINTCP | 1 + redhat/configs/rhel/automotive/generic/CONFIG_XFRM_INTERFACE | 1 + redhat/configs/rhel/automotive/generic/CONFIG_XFRM_IPCOMP | 1 + redhat/configs/rhel/automotive/generic/CONFIG_XFRM_MIGRATE | 1 + redhat/configs/rhel/automotive/generic/CONFIG_XFRM_OFFLOAD | 1 + redhat/configs/rhel/automotive/generic/CONFIG_XFRM_STATISTICS | 1 + redhat/configs/rhel/automotive/generic/CONFIG_XFRM_SUB_POLICY | 1 + redhat/configs/rhel/automotive/generic/CONFIG_XFRM_USER | 1 + redhat/configs/rhel/automotive/generic/CONFIG_XFRM_USER_COMPAT | 1 + 22 files changed, 22 insertions(+), 1 deletions(-) -- _______________________________________________ kernel mailing list -- kernel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to kernel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
