kernel February 2025

kernel@lists.fedoraproject.org

5 participants
52 discussions

[OS-BUILD PATCH] redhat/configs: Enable CONFIG_KASAN_INLINE for RT debug kernel
by Waiman Long (via Email Bridge) 16 Feb '25

16 Feb '25

From: Waiman Long <longman(a)redhat.com> redhat/configs: Enable CONFIG_KASAN_INLINE for RT debug kernel Enabling CONFIG_KASAN_INLINE has the effect of improving RT debug kernel performance by up to 2x depending on the workloads and architecture. The downside is the increase in the kernel text size by up to 50%. This may make the RT debug kernel harder to run on systems with limited memory. So it is a trade off. Since RT debug kernel performance is becoming a problem, just move the rt/debug CONFIG_KASAN_{INLINE,OUTLINE} files to automotive/debug so that RT debug kernel will now use CONFIG_KASAN_INLINE while the automative debug kernel will continue to use CONFIG_KASAN_OUTLINE as the automative systems are likely to have less memory. Signed-off-by: Waiman Long <longman(a)redhat.com> diff --git a/redhat/configs/rhel/rt/debug/CONFIG_KASAN_INLINE b/redhat/configs/rhel/automotive/debug/CONFIG_KASAN_INLINE rename from redhat/configs/rhel/rt/debug/CONFIG_KASAN_INLINE rename to redhat/configs/rhel/automotive/debug/CONFIG_KASAN_INLINE index blahblah..blahblah 100644 --- a/redhat/configs/rhel/rt/debug/CONFIG_KASAN_INLINE +++ b/redhat/configs/rhel/automotive/debug/CONFIG_KASAN_INLINE diff --git a/redhat/configs/rhel/rt/debug/CONFIG_KASAN_OUTLINE b/redhat/configs/rhel/automotive/debug/CONFIG_KASAN_OUTLINE rename from redhat/configs/rhel/rt/debug/CONFIG_KASAN_OUTLINE rename to redhat/configs/rhel/automotive/debug/CONFIG_KASAN_OUTLINE index blahblah..blahblah 100644 --- a/redhat/configs/rhel/rt/debug/CONFIG_KASAN_OUTLINE +++ b/redhat/configs/rhel/automotive/debug/CONFIG_KASAN_OUTLINE -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3696

1 0

[OS-BUILD PATCH 0/2] redhat/configs: Move all the lock debugging Kconfig's to common
by Waiman Long (via Email Bridge) 15 Feb '25

15 Feb '25

From: Waiman Long on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3695 The setting of all the lock debugging kernel config options below are the same for both Fedora and RHEL. - DEBUG_SPINLOCK - DEBUG_MUTEXES - DEBUG_RT_MUTEXES - DEBUG_RWSEMS - DEBUG_WW_MUTEX_SLOWPATH - DEBUG_LOCK_ALLOC - PROVE_LOCKING - PROVE_RAW_LOCK_NESTING Move them to common/{debug,generic}. Signed-off-by: Waiman Long <longman(a)redhat.com> --- redhat/configs/fedora/debug/CONFIG_DEBUG_LOCK_ALLOC => redhat/configs/common/debug/CONFIG_DEBUG_LOCK_ALLOC | 0 redhat/configs/fedora/debug/CONFIG_DEBUG_MUTEXES => redhat/configs/common/debug/CONFIG_DEBUG_MUTEXES | 0 redhat/configs/fedora/debug/CONFIG_DEBUG_RT_MUTEXES => redhat/configs/common/debug/CONFIG_DEBUG_RT_MUTEXES | 0 redhat/configs/fedora/debug/CONFIG_DEBUG_RWSEMS => redhat/configs/common/debug/CONFIG_DEBUG_RWSEMS | 0 redhat/configs/fedora/debug/CONFIG_DEBUG_SPINLOCK => redhat/configs/common/debug/CONFIG_DEBUG_SPINLOCK | 0 redhat/configs/fedora/debug/CONFIG_DEBUG_WW_MUTEX_SLOWPATH => redhat/configs/common/debug/CONFIG_DEBUG_WW_MUTEX_SLOWPATH | 0 redhat/configs/fedora/debug/CONFIG_PROVE_LOCKING => redhat/configs/common/debug/CONFIG_PROVE_LOCKING | 0 redhat/configs/fedora/debug/CONFIG_PROVE_RAW_LOCK_NESTING => redhat/configs/common/debug/CONFIG_PROVE_RAW_LOCK_NESTING | 0 redhat/configs/fedora/generic/CONFIG_DEBUG_LOCK_ALLOC => redhat/configs/common/generic/CONFIG_DEBUG_LOCK_ALLOC | 0 redhat/configs/fedora/generic/CONFIG_DEBUG_MUTEXES => redhat/configs/common/generic/CONFIG_DEBUG_MUTEXES | 0 redhat/configs/fedora/generic/CONFIG_DEBUG_RT_MUTEXES => redhat/configs/common/generic/CONFIG_DEBUG_RT_MUTEXES | 0 redhat/configs/fedora/generic/CONFIG_DEBUG_RWSEMS => redhat/configs/common/generic/CONFIG_DEBUG_RWSEMS | 0 redhat/configs/fedora/generic/CONFIG_DEBUG_SPINLOCK => redhat/configs/common/generic/CONFIG_DEBUG_SPINLOCK | 0 redhat/configs/fedora/generic/CONFIG_DEBUG_WW_MUTEX_SLOWPATH => redhat/configs/common/generic/CONFIG_DEBUG_WW_MUTEX_SLOWPATH | 0 redhat/configs/fedora/generic/CONFIG_PROVE_LOCKING => redhat/configs/common/generic/CONFIG_PROVE_LOCKING | 0 redhat/configs/common/generic/CONFIG_PROVE_RAW_LOCK_NESTING | 1 - redhat/configs/rhel/debug/CONFIG_DEBUG_LOCK_ALLOC | 1 - redhat/configs/rhel/debug/CONFIG_DEBUG_MUTEXES | 1 - redhat/configs/rhel/debug/CONFIG_DEBUG_RT_MUTEXES | 1 - redhat/configs/rhel/debug/CONFIG_DEBUG_RWSEMS | 1 - redhat/configs/rhel/debug/CONFIG_DEBUG_SPINLOCK | 1 - redhat/configs/rhel/debug/CONFIG_DEBUG_WW_MUTEX_SLOWPATH | 1 - redhat/configs/rhel/debug/CONFIG_PROVE_LOCKING | 1 - redhat/configs/rhel/debug/CONFIG_PROVE_RAW_LOCK_NESTING | 1 - redhat/configs/rhel/generic/CONFIG_DEBUG_LOCK_ALLOC | 1 - redhat/configs/rhel/generic/CONFIG_DEBUG_MUTEXES | 1 - redhat/configs/rhel/generic/CONFIG_DEBUG_RT_MUTEXES | 1 - redhat/configs/rhel/generic/CONFIG_DEBUG_RWSEMS | 1 - redhat/configs/rhel/generic/CONFIG_DEBUG_SPINLOCK | 1 - redhat/configs/rhel/generic/CONFIG_DEBUG_WW_MUTEX_SLOWPATH | 1 - redhat/configs/rhel/generic/CONFIG_PROVE_LOCKING | 1 - 31 files changed, 0 insertions(+), 16 deletions(-)

1 2

[OS-BUILD PATCH] efi,lockdown: fix kernel lockdown on Secure Boot
by Ondrej Mosnáček (via Email Bridge) 15 Feb '25

15 Feb '25

From: Ondrej Mosnacek <omosnace(a)redhat.com> efi,lockdown: fix kernel lockdown on Secure Boot Upstream commit 77b644c39d6a ("init/main.c: Initialize early LSMs after arch code, static keys and calls") changed the order of initialization of LSM hooks, so the Fedora/RHEL code to automatically put the kernel into integrity lockdown mode stopped working (because at the time setup_arch() calls security_lock_kernel_down(), the LSM hooks are not yet initialized). Fix this by making security_lock_kernel_down() a normal function directly defined in security/lockdown/lockdown.c (there is no reason to make it an LSM hook, anyway), which allows it to be called before early_security_init()/security_init() gets called. CVE: CVE-2025-1272 Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2333706 RH-Fixes: 77b644c39d6a ("init/main.c: Initialize early LSMs after arch code, static keys and calls") Upstream Status: RHEL only Signed-off-by: Ondrej Mosnacek <omosnace(a)redhat.com> diff --git a/include/linux/lsm_hook_defs.h b/include/linux/lsm_hook_defs.h index blahblah..blahblah 100644 --- a/include/linux/lsm_hook_defs.h +++ b/include/linux/lsm_hook_defs.h @@ -443,7 +443,6 @@ LSM_HOOK(int, 0, bpf_token_capable, const struct bpf_token *token, int cap) #endif /* CONFIG_BPF_SYSCALL */ LSM_HOOK(int, 0, locked_down, enum lockdown_reason what) -LSM_HOOK(int, 0, lock_kernel_down, const char *where, enum lockdown_reason level) #ifdef CONFIG_PERF_EVENTS diff --git a/include/linux/security.h b/include/linux/security.h index blahblah..blahblah 100644 --- a/include/linux/security.h +++ b/include/linux/security.h @@ -574,7 +574,6 @@ int security_inode_notifysecctx(struct inode *inode, void *ctx, u32 ctxlen); int security_inode_setsecctx(struct dentry *dentry, void *ctx, u32 ctxlen); int security_inode_getsecctx(struct inode *inode, struct lsm_context *cp); int security_locked_down(enum lockdown_reason what); -int security_lock_kernel_down(const char *where, enum lockdown_reason level); int lsm_fill_user_ctx(struct lsm_ctx __user *uctx, u32 *uctx_len, void *val, size_t val_len, u64 id, u64 flags); int security_bdev_alloc(struct block_device *bdev); @@ -1581,10 +1580,6 @@ static inline int security_locked_down(enum lockdown_reason what) { return 0; } -static inline int security_lock_kernel_down(const char *where, enum lockdown_reason level) -{ - return 0; -} static inline int lsm_fill_user_ctx(struct lsm_ctx __user *uctx, u32 *uctx_len, void *val, size_t val_len, u64 id, u64 flags) @@ -2391,4 +2386,13 @@ static inline void security_initramfs_populated(void) } #endif /* CONFIG_SECURITY */ +#ifdef CONFIG_SECURITY_LOCKDOWN_LSM +extern int security_lock_kernel_down(const char *where, enum lockdown_reason level); +#else +static inline int security_lock_kernel_down(const char *where, enum lockdown_reason level) +{ + return 0; +} +#endif /* CONFIG_SECURITY_LOCKDOWN_LSM */ + #endif /* ! __LINUX_SECURITY_H */ diff --git a/security/lockdown/lockdown.c b/security/lockdown/lockdown.c index blahblah..blahblah 100644 --- a/security/lockdown/lockdown.c +++ b/security/lockdown/lockdown.c @@ -72,9 +72,19 @@ static int lockdown_is_locked_down(enum lockdown_reason what) return 0; } +/** + * security_lock_kernel_down() - Put the kernel into lock-down mode. + * + * @where: Where the lock-down is originating from (e.g. command line option) + * @level: The lock-down level (can only increase) + */ +int security_lock_kernel_down(const char *where, enum lockdown_reason level) +{ + return lock_kernel_down(where, level); +} + static struct security_hook_list lockdown_hooks[] __ro_after_init = { LSM_HOOK_INIT(locked_down, lockdown_is_locked_down), - LSM_HOOK_INIT(lock_kernel_down, lock_kernel_down), }; static const struct lsm_id lockdown_lsmid = { diff --git a/security/security.c b/security/security.c index blahblah..blahblah 100644 --- a/security/security.c +++ b/security/security.c @@ -5801,18 +5801,6 @@ int security_locked_down(enum lockdown_reason what) } EXPORT_SYMBOL(security_locked_down); -/** - * security_lock_kernel_down() - Put the kernel into lock-down mode. - * - * @where: Where the lock-down is originating from (e.g. command line option) - * @level: The lock-down level (can only increase) - */ -int security_lock_kernel_down(const char *where, enum lockdown_reason level) -{ - return call_int_hook(lock_kernel_down, where, level); -} -EXPORT_SYMBOL(security_lock_kernel_down); - /** * security_bdev_alloc() - Allocate a block device LSM blob * @bdev: block device -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3694

1 0

vboxsf and vboxguest seem missing from 42/43 kernels
by Ian Laurie 14 Feb '25

14 Feb '25

The package virtualbox-guest-additions is available now for 42 and 43 but they don't actually *work* because it looks like the required kernel bits are missing. If I boot a 6.13 release candidate I see vboxsf and vboxguest in an "lsmod | grep vbox" but not with 6.14. Is this because the drivers are breaking with GCC 15? I see they are still in the source tree upstream. Ian -- Ian Laurie FAS: nixuser | IRC: nixuser TZ: Australia/Sydney

2 2

[OS-BUILD PATCH] fedora: Update vbox drivers
by pbrobinson (via Email Bridge) 14 Feb '25

14 Feb '25

From: Peter Robinson <pbrobinson(a)gmail.com> fedora: Update vbox drivers The VBOXGUEST was already enabled on x86 but not dropped from pending, so clean that up, also enable the vbox drivers on aarch64 as they're supported there now (except GPU). Signed-off-by: Peter Robinson <pbrobinson(a)gmail.com> diff --git a/redhat/configs/fedora/generic/arm/aarch64/CONFIG_VBOXGUEST b/redhat/configs/fedora/generic/arm/aarch64/CONFIG_VBOXGUEST new file mode 100644 index blahblah..blahblah 100644 --- /dev/null +++ b/redhat/configs/fedora/generic/arm/aarch64/CONFIG_VBOXGUEST @@ -0,0 +1 @@ +CONFIG_VBOXGUEST=m diff --git a/redhat/configs/fedora/generic/arm/aarch64/CONFIG_VBOXSF_FS b/redhat/configs/fedora/generic/arm/aarch64/CONFIG_VBOXSF_FS new file mode 100644 index blahblah..blahblah 100644 --- /dev/null +++ b/redhat/configs/fedora/generic/arm/aarch64/CONFIG_VBOXSF_FS @@ -0,0 +1 @@ +CONFIG_VBOXSF_FS=m diff --git a/redhat/configs/pending-fedora/generic/CONFIG_VBOXGUEST b/redhat/configs/pending-fedora/generic/CONFIG_VBOXGUEST deleted file mode 100644 index blahblah..blahblah 0 --- a/redhat/configs/pending-fedora/generic/CONFIG_VBOXGUEST +++ /dev/null @@ -1,14 +0,0 @@ -# Symbol: VBOXGUEST [=n] -# Type : tristate -# Defined at drivers/virt/vboxguest/Kconfig:2 -# Prompt: Virtual Box Guest integration support -# Depends on: VIRT_DRIVERS [=y] && (ARM64 [=y] || X86) && PCI [=y] && INPUT [=y] -# Location: -# -> Device Drivers -# -> Virtualization drivers (VIRT_DRIVERS [=y]) -# -> Virtual Box Guest integration support (VBOXGUEST [=n]) -# -# -# -# Commit: 0ba002bc4393 (virt: Add vboxguest driver for Virtual Box Guest integration) -# CONFIG_VBOXGUEST is not set -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3692

1 0

[OS-BUILD PATCH] fedora: arm64: enable RT5616 codec
by Marcin “hrw” Juszkiewicz (via Email Bridge) 13 Feb '25

13 Feb '25

From: Marcin Juszkiewicz <marcin(a)juszkiewicz.com.pl> fedora: arm64: enable RT5616 codec FriendlyELEC NanoPC-T6 SBC uses RT5616 codec for audio. Signed-off-by: Marcin Juszkiewicz <marcin(a)juszkiewicz.com.pl> diff --git a/redhat/configs/fedora/generic/arm/aarch64/CONFIG_SND_SOC_RT5616 b/redhat/configs/fedora/generic/arm/aarch64/CONFIG_SND_SOC_RT5616 new file mode 100644 index blahblah..blahblah 100644 --- /dev/null +++ b/redhat/configs/fedora/generic/arm/aarch64/CONFIG_SND_SOC_RT5616 @@ -0,0 +1 @@ +CONFIG_SND_SOC_RT5616=m -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3691

1 0

[OS-BUILD PATCH] [redhat] New configs in samples/damon
by CKI ARK Bot (via Email Bridge) 13 Feb '25

13 Feb '25

From: Fedora Kernel Team <kernel-team(a)fedoraproject.org> [redhat] New configs in samples/damon Hi, As part of the ongoing rebase effort, the following configuration options need to be reviewed. As a reminder, the ARK configuration flow involves moving unreviewed configuration options from the pending directory to the ark directory. In the diff below, options are removed from the pending directory and added to the ark hierarchy. The final options that need to be ACKed are the files that are being added to the ark hierarchy. If the value for a file that is added should be changed, please reply with a better option. Symbol: SAMPLE_DAMON_PRCL [=n] Type : bool Defined at samples/damon/Kconfig:17 Prompt: DAMON sameple module for access-aware proactive reclamation Depends on: SAMPLES [=y] && DAMON [=y] && DAMON_VADDR [=y] Location: -> Kernel hacking -> Sample kernel code (SAMPLES [=y]) -> DAMON Samples -> DAMON sameple module for access-aware proactive reclamation (SAMPLE_DAMON_PRCL [=n]) Commit: 2aca254620a8 (samples/damon: introduce a skeleton of a smaple DAMON module for proactive reclamation) --- Symbol: SAMPLE_DAMON_WSSE [=n] Type : bool Defined at samples/damon/Kconfig:5 Prompt: DAMON sameple module for working set size estimation Depends on: SAMPLES [=y] && DAMON [=y] && DAMON_VADDR [=y] Location: -> Kernel hacking -> Sample kernel code (SAMPLES [=y]) -> DAMON Samples -> DAMON sameple module for working set size estimation (SAMPLE_DAMON_WSSE [=n]) Commit: 19d7c3adfdd4 (samples: add a skeleton of a sample DAMON module for working set size estimation) --- Signed-off-by: Fedora Kernel Team <kernel-team(a)fedoraproject.org> diff --git a/redhat/configs/pending-rhel/generic/CONFIG_SAMPLE_DAMON_PRCL b/redhat/configs/pending-rhel/generic/CONFIG_SAMPLE_DAMON_PRCL deleted file mode 100644 index blahblah..blahblah 0 --- a/redhat/configs/pending-rhel/generic/CONFIG_SAMPLE_DAMON_PRCL +++ /dev/null @@ -1,15 +0,0 @@ -# Symbol: SAMPLE_DAMON_PRCL [=n] -# Type : bool -# Defined at samples/damon/Kconfig:17 -# Prompt: DAMON sameple module for access-aware proactive reclamation -# Depends on: SAMPLES [=y] && DAMON [=y] && DAMON_VADDR [=y] -# Location: -# -> Kernel hacking -# -> Sample kernel code (SAMPLES [=y]) -# -> DAMON Samples -# -> DAMON sameple module for access-aware proactive reclamation (SAMPLE_DAMON_PRCL [=n]) -# -# -# -# Commit: 2aca254620a8 (samples/damon: introduce a skeleton of a smaple DAMON module for proactive reclamation) -# CONFIG_SAMPLE_DAMON_PRCL is not set diff --git a/redhat/configs/pending-rhel/generic/CONFIG_SAMPLE_DAMON_WSSE b/redhat/configs/pending-rhel/generic/CONFIG_SAMPLE_DAMON_WSSE deleted file mode 100644 index blahblah..blahblah 0 --- a/redhat/configs/pending-rhel/generic/CONFIG_SAMPLE_DAMON_WSSE +++ /dev/null @@ -1,15 +0,0 @@ -# Symbol: SAMPLE_DAMON_WSSE [=n] -# Type : bool -# Defined at samples/damon/Kconfig:5 -# Prompt: DAMON sameple module for working set size estimation -# Depends on: SAMPLES [=y] && DAMON [=y] && DAMON_VADDR [=y] -# Location: -# -> Kernel hacking -# -> Sample kernel code (SAMPLES [=y]) -# -> DAMON Samples -# -> DAMON sameple module for working set size estimation (SAMPLE_DAMON_WSSE [=n]) -# -# -# -# Commit: 19d7c3adfdd4 (samples: add a skeleton of a sample DAMON module for working set size estimation) -# CONFIG_SAMPLE_DAMON_WSSE is not set diff --git a/redhat/configs/rhel/generic/CONFIG_SAMPLE_DAMON_PRCL b/redhat/configs/rhel/generic/CONFIG_SAMPLE_DAMON_PRCL new file mode 100644 index blahblah..blahblah 100644 --- /dev/null +++ b/redhat/configs/rhel/generic/CONFIG_SAMPLE_DAMON_PRCL @@ -0,0 +1 @@ +# CONFIG_SAMPLE_DAMON_PRCL is not set diff --git a/redhat/configs/rhel/generic/CONFIG_SAMPLE_DAMON_WSSE b/redhat/configs/rhel/generic/CONFIG_SAMPLE_DAMON_WSSE new file mode 100644 index blahblah..blahblah 100644 --- /dev/null +++ b/redhat/configs/rhel/generic/CONFIG_SAMPLE_DAMON_WSSE @@ -0,0 +1 @@ +# CONFIG_SAMPLE_DAMON_WSSE is not set -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3651

2 1

[OS-BUILD PATCH 0/4] nvme: revert RHEL-only patches that improved dm-multipath on nvme
by Benjamin Marzinski (via Email Bridge) 13 Feb '25

13 Feb '25

From: Benjamin Marzinski on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3690 Upstream Status: RHEL-only Since RHEL no longer supports non-native NVMe multipathing and there even patches upstream to remove the ability of dm-multipath to work on nvme devices, (https://lore.kernel.org/linux- nvme/20250204211158.43126-1-bgurney(a)redhat.com/T/#u) we no longer need to carry these RHEL-only patchs improving dm-multipath on NVMe devices. Signed-off-by: Benjamin Marzinski <bmarzins(a)redhat.com> --- drivers/nvme/host/core.c | 22 +++------------------- drivers/nvme/host/multipath.c | 19 +++++++------------ drivers/nvme/host/nvme.h | 4 ---- 3 files changed, 10 insertions(+), 35 deletions(-)

2 5

[OS-BUILD PATCHv7 0/25] redhat/configs: automotive: Disable various network-related Kconfigs
by Dorinda Bassey (via Email Bridge) 13 Feb '25

13 Feb '25

From: Dorinda Bassey on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3652 Disable various network-related protocols listed below and it's related dependencies. excluding: the ICMP and IPv4 protocols, the AF_CAN, AF_UNIX, AF_NETLINK and AF_INET socket families, and the SOCK_STREAM and SOCK_DGRAM, SOCK_PACKET, SOCK_SEQPACKET and AF_PACKET socket protocols. This is needed to satisfy a requirement of FuSa efforts for RHIVOS. Link: https://issues.redhat.com/browse/RHEL-75816 Signed-off-by: Dorinda Bassey <dbassey(a)redhat.com> --- redhat/configs/rhel/automotive/generic/CONFIG_BLK_DEV_RNBD | 1 + redhat/configs/rhel/automotive/generic/CONFIG_BLK_DEV_RNBD_CLIENT | 1 + redhat/configs/rhel/automotive/generic/CONFIG_BLK_DEV_RNBD_SERVER | 1 + redhat/configs/rhel/automotive/generic/CONFIG_BPF_STREAM_PARSER | 1 + redhat/configs/rhel/automotive/generic/CONFIG_DCB | 1 + redhat/configs/rhel/automotive/generic/CONFIG_IEEE802154 | 1 + redhat/configs/rhel/automotive/generic/CONFIG_IP_SET | 1 + redhat/configs/rhel/automotive/generic/CONFIG_IP_VS | 1 + redhat/configs/rhel/automotive/generic/CONFIG_ISCSI_TARGET | 1 + redhat/configs/rhel/automotive/generic/CONFIG_ISCSI_TARGET_CXGB4 | 1 + redhat/configs/rhel/automotive/generic/CONFIG_LWTUNNEL_BPF | 1 + redhat/configs/rhel/automotive/generic/CONFIG_MLXSW_CORE | 1 + redhat/configs/rhel/automotive/generic/CONFIG_MPLS | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NETDEVSIM | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NETLABEL | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NET_9P_RDMA | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NET_CLS | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NET_CLS_ACT | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NET_CLS_BPF | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NET_CLS_CGROUP | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NET_CLS_FLOW | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NET_CLS_FLOWER | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NET_CLS_FW | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NET_CLS_MATCHALL | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NET_CLS_U32 | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NET_NSH | 2 +- redhat/configs/rhel/automotive/generic/CONFIG_NET_PKTGEN | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NET_SWITCHDEV | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NET_VENDOR_MYRI | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NVME_KEYRING | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NVME_RDMA | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NVME_TARGET_RDMA | 1 + redhat/configs/rhel/automotive/generic/CONFIG_OPENVSWITCH | 1 + redhat/configs/rhel/automotive/generic/CONFIG_PCPU_DEV_REFCNT | 1 + redhat/configs/rhel/automotive/generic/CONFIG_PSAMPLE | 1 + redhat/configs/rhel/automotive/generic/CONFIG_QRTR | 1 + redhat/configs/rhel/automotive/generic/CONFIG_SMBFS | 1 + redhat/configs/rhel/automotive/generic/CONFIG_SOCK_VALIDATE_XMIT | 1 + redhat/configs/rhel/automotive/generic/CONFIG_TCP_CONG_ADVANCED | 1 + redhat/configs/rhel/automotive/generic/CONFIG_TLS | 1 + redhat/configs/rhel/automotive/generic/CONFIG_USB4_NET | 1 + redhat/configs/rhel/automotive/generic/CONFIG_VLAN_8021Q_GVRP | 1 + redhat/configs/rhel/automotive/generic/CONFIG_XDP_SOCKETS | 1 + 43 files changed, 43 insertions(+), 1 deletions(-)

1 25

[OS-BUILD PATCHv4 0/22] redhat/configs: automotive: Disable various network-related Kconfigs
by Dorinda Bassey (via Email Bridge) 13 Feb '25

13 Feb '25

From: Dorinda Bassey on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3652 Disable various network-related protocols listed below and it's related dependencies. excluding: the ICMP and IPv4 protocols, the AF_CAN, AF_UNIX, AF_NETLINK and AF_INET socket families, and the SOCK_STREAM and SOCK_DGRAM, SOCK_PACKET, SOCK_SEQPACKET and AF_PACKET socket protocols. This is needed to satisfy a requirement of FuSa efforts for RHIVOS. Link: https://issues.redhat.com/browse/RHEL-75816 Signed-off-by: Dorinda Bassey <dbassey(a)redhat.com> --- redhat/configs/rhel/automotive/generic/CONFIG_BLK_DEV_RNBD | 1 + redhat/configs/rhel/automotive/generic/CONFIG_BLK_DEV_RNBD_CLIENT | 1 + redhat/configs/rhel/automotive/generic/CONFIG_BLK_DEV_RNBD_SERVER | 1 + redhat/configs/rhel/automotive/generic/CONFIG_BPF_STREAM_PARSER | 1 + redhat/configs/rhel/automotive/generic/CONFIG_IP_SET | 1 + redhat/configs/rhel/automotive/generic/CONFIG_IP_VS | 1 + redhat/configs/rhel/automotive/generic/CONFIG_ISCSI_TARGET | 1 + redhat/configs/rhel/automotive/generic/CONFIG_ISCSI_TARGET_CXGB4 | 1 + redhat/configs/rhel/automotive/generic/CONFIG_LRU_CACHE | 1 + redhat/configs/rhel/automotive/generic/CONFIG_LWTUNNEL_BPF | 1 + redhat/configs/rhel/automotive/generic/CONFIG_MLXSW_CORE | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NETDEVSIM | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NETLABEL | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NET_9P_RDMA | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NET_CLS_ACT | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NET_NSH | 2 +- redhat/configs/rhel/automotive/generic/CONFIG_NET_PKTGEN | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NET_SWITCHDEV | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NET_VENDOR_MYRI | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NVME_KEYRING | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NVME_RDMA | 1 + redhat/configs/rhel/automotive/generic/CONFIG_NVME_TARGET_RDMA | 1 + redhat/configs/rhel/automotive/generic/CONFIG_OBJAGG | 1 + redhat/configs/rhel/automotive/generic/CONFIG_OPENVSWITCH | 1 + redhat/configs/rhel/automotive/generic/CONFIG_PARMAN | 1 + redhat/configs/rhel/automotive/generic/CONFIG_PSAMPLE | 1 + redhat/configs/rhel/automotive/generic/CONFIG_SMBFS | 1 + redhat/configs/rhel/automotive/generic/CONFIG_SOCK_VALIDATE_XMIT | 1 + redhat/configs/rhel/automotive/generic/CONFIG_TCP_CONG_ADVANCED | 1 + redhat/configs/rhel/automotive/generic/CONFIG_TEST_KMOD | 1 + redhat/configs/rhel/automotive/generic/CONFIG_TLS | 1 + redhat/configs/rhel/automotive/generic/CONFIG_USB4_NET | 1 + redhat/configs/rhel/automotive/generic/CONFIG_XDP_SOCKETS | 1 + 33 files changed, 33 insertions(+), 1 deletions(-)

2 33

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

kernel February 2025