[OS-BUILD PATCH] [redhat] Disable CONFIG_NETFILTER_XTABLES_COMPAT

From: Phil Sutter <psutter(a)redhat.com&gt; [redhat] Disable CONFIG_NETFILTER_XTABLES_COMPAT This setting seems to have slipped through review process: Before this symbol was introduced, the relevant feature was always enabled. Since it is there now, we should use the opportunity to disable it and avoid any further security holes it may contain in addition to the already fixed ones. diff a/redhat/configs/common/generic/CONFIG_NETFILTER_XTABLES_COMPAT b/redhat/configs/common/generic/CONFIG_NETFILTER_XTABLES_COMPAT --- a/redhat/configs/common/generic/CONFIG_NETFILTER_XTABLES_COMPAT +++ b/redhat/configs/common/generic/CONFIG_NETFILTER_XTABLES_COMPAT @@ -1 +1 @@ -CONFIG_NETFILTER_XTABLES_COMPAT=y +# CONFIG_NETFILTER_XTABLES_COMPAT is not set -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1126