[OS-BUILD PATCH] Change value of CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE

[GitLab Bridge on behalf of jmflinuxtx]

From: "Justin M. Forbes" <jforbes(a)fedoraproject.org&gt;

From https://www.paul-moore.com/blog/d/2020/06/linux_v57.html

"Deprecate setting “/sys/fs/selinux/checkreqprot” to 1. This flag was
originally created to deal with legacy userspace and the READ_IMPLIES_EXEC
personality flag. We changed the default from 1 to 0 back in Linux v4.4 and
now we are taking the next step of deprecating it, at some point in the future
we will take the final step of rejecting 1."

Signed-off-by: Justin M. Forbes <jforbes(a)fedoraproject.org&gt;
---
 .../common/generic/CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/redhat/configs/common/generic/CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE
b/redhat/configs/common/generic/CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE
index 47810c7e452a..9fefaf319b27 100644
--- a/redhat/configs/common/generic/CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE
+++ b/redhat/configs/common/generic/CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE
@@ -1 +1 @@
-CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1
+CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=0
-- 
2.26.2

[GitLab Bridge on behalf of Ondrej Mosnáček]

From: Ondrej Mosnáček on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/399#note_35393...

See also: https://src.fedoraproject.org/rpms/kernel/pull-request/41

You might want to replace the copy-pasted unicode double quotes (they
show up as junk in the generated patch on the ML). Pending that I'm
eager to ack it :) (Although I wish my PR hadn't been ignored for 5
months...)

[GitLab Bridge on behalf of Justin Forbes]

From: Justin Forbes on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/399#note_35394...

Luckily they are just in the commit message, and not the patch itself.

[GitLab Bridge on behalf of Ondrej Mosnáček]

From: Ondrej Mosnáček on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/399#note_35424...

Personally, I'd stick with printable ASCII in commit messages, but if
you want to keep it as-is, that's fine by me.

Acked-by: Ondrej Mosnacek <omosnace(a)redhat.com&gt;

^^ Does this count? Can you verify that it's really me? :) Or should
acks be sent via email only?