From: Benjamin Coddington <bcodding(a)redhat.com&gt; redhat/configs: NFS: disable UDP, insecure enctypes Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1952863 Upstream-status: RHEL Only There are a few serious problems supporting NFS over UDP, we're disabling to protect customers from running in this configuration. There's also no reason to continue to allow insecure encryption types, let disable that as well. Signed-off-by: Benjamin Coddington <bcodding(a)redhat.com&gt; diff --git a/redhat/configs/common/generic/CONFIG_NFS_DISABLE_UDP_SUPPORT b/redhat/configs/common/generic/CONFIG_NFS_DISABLE_UDP_SUPPORT index blahblah..blahblah 100644 --- a/redhat/configs/common/generic/CONFIG_NFS_DISABLE_UDP_SUPPORT +++ b/redhat/configs/common/generic/CONFIG_NFS_DISABLE_UDP_SUPPORT @@ -1 +1 @@ -# CONFIG_NFS_DISABLE_UDP_SUPPORT is not set +CONFIG_NFS_DISABLE_UDP_SUPPORT=y diff --git a/redhat/configs/common/generic/CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES b/redhat/configs/common/generic/CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES index blahblah..blahblah 100644 --- a/redhat/configs/common/generic/CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES +++ b/redhat/configs/common/generic/CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES @@ -1 +1 @@ -# CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES is not set +CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES=y -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1506