From: Benjamin Coddington bcodding@redhat.com

redhat/configs: NFS: disable UDP, insecure enctypes

Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1952863 Upstream-status: RHEL Only

There are a few serious problems supporting NFS over UDP, we're disabling to protect customers from running in this configuration. There's also no reason to continue to allow insecure encryption types, let disable that as well.

Signed-off-by: Benjamin Coddington bcodding@redhat.com

diff --git a/redhat/configs/common/generic/CONFIG_NFS_DISABLE_UDP_SUPPORT b/redhat/configs/common/generic/CONFIG_NFS_DISABLE_UDP_SUPPORT index blahblah..blahblah 100644 --- a/redhat/configs/common/generic/CONFIG_NFS_DISABLE_UDP_SUPPORT +++ b/redhat/configs/common/generic/CONFIG_NFS_DISABLE_UDP_SUPPORT @@ -1 +1 @@ -# CONFIG_NFS_DISABLE_UDP_SUPPORT is not set +CONFIG_NFS_DISABLE_UDP_SUPPORT=y diff --git a/redhat/configs/common/generic/CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES b/redhat/configs/common/generic/CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES index blahblah..blahblah 100644 --- a/redhat/configs/common/generic/CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES +++ b/redhat/configs/common/generic/CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES @@ -1 +1 @@ -# CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES is not set +CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES=y

-- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1506