From: Fedora Kernel Team <kernel-team(a)fedoraproject.org>
Hi,
As part of the ongoing rebase effort, the following configuration
options need to be reviewed.
As a reminder, the ARK configuration flow involves moving unreviewed
configuration options from the pending directory to the ark directory.
In the diff below, options are removed from the pending directory and
added to the ark hierarchy. The final options that need to be ACKed
are the files that are being added to the ark hierarchy.
If the value for a file that is added should be changed, please reply
with a better option.
CONFIG_PPC_RTAS_FILTER:
The RTAS syscall API has security issues that could be used to
compromise system integrity. This option enforces restrictions on the
RTAS calls and arguments passed by userspace programs to mitigate
these issues.
Say Y unless you know what you are doing and the filter is causing
problems for you.
Symbol: PPC_RTAS_FILTER [=y]
Type : bool
Defined at arch/powerpc/Kconfig:991
Prompt: Enable filtering of RTAS syscalls
Depends on: PPC_RTAS [=y]
Location:
-> Kernel options
---
Cc: kernel-patches(a)redhat.com
Signed-off-by: Fedora Kernel Team <kernel-team(a)fedoraproject.org>
---
.../common/generic/CONFIG_PPC_RTAS_FILTER | 1 +
.../generic/CONFIG_PPC_RTAS_FILTER | 21 -------------------
2 files changed, 1 insertion(+), 21 deletions(-)
create mode 100644 redhat/configs/common/generic/CONFIG_PPC_RTAS_FILTER
delete mode 100644 redhat/configs/pending-common/generic/CONFIG_PPC_RTAS_FILTER
diff --git a/redhat/configs/common/generic/CONFIG_PPC_RTAS_FILTER
b/redhat/configs/common/generic/CONFIG_PPC_RTAS_FILTER
new file mode 100644
index 000000000000..7470f4d4f0fe
--- /dev/null
+++ b/redhat/configs/common/generic/CONFIG_PPC_RTAS_FILTER
@@ -0,0 +1 @@
+CONFIG_PPC_RTAS_FILTER=y
diff --git a/redhat/configs/pending-common/generic/CONFIG_PPC_RTAS_FILTER
b/redhat/configs/pending-common/generic/CONFIG_PPC_RTAS_FILTER
deleted file mode 100644
index 6105fa8baae5..000000000000
--- a/redhat/configs/pending-common/generic/CONFIG_PPC_RTAS_FILTER
+++ /dev/null
@@ -1,21 +0,0 @@
-# CONFIG_PPC_RTAS_FILTER:
-#
-# The RTAS syscall API has security issues that could be used to
-# compromise system integrity. This option enforces restrictions on the
-# RTAS calls and arguments passed by userspace programs to mitigate
-# these issues.
-#
-# Say Y unless you know what you are doing and the filter is causing
-# problems for you.
-#
-# Symbol: PPC_RTAS_FILTER [=y]
-# Type : bool
-# Defined at arch/powerpc/Kconfig:991
-# Prompt: Enable filtering of RTAS syscalls
-# Depends on: PPC_RTAS [=y]
-# Location:
-# -> Kernel options
-#
-#
-#
-CONFIG_PPC_RTAS_FILTER=y
--
GitLab
Show replies by thread