From a894b420e4f32f42d13bdcccc9059fc9122aab42 Mon Sep 17 00:00:00 2001 From: Felix Fietkau Date: Tue, 19 Jan 2016 15:15:11 +0000 Subject: [PATCH] kernel: disable AFS support by default This pulls in CONFIG_KEYS, which bloats up the kernel size and is thus very undesirable. It also currently exposes the kernel to a local root vulnerability Signed-off-by: Felix Fietkau Backport of r48364 SVN-Revision: 48365 --- package/kernel/linux/modules/fs.mk | 1 + package/kernel/linux/modules/netsupport.mk | 1 + 2 files changed, 2 insertions(+) diff --git a/package/kernel/linux/modules/fs.mk b/package/kernel/linux/modules/fs.mk index ca529ff424..fa182375ea 100644 --- a/package/kernel/linux/modules/fs.mk +++ b/package/kernel/linux/modules/fs.mk @@ -29,6 +29,7 @@ $(eval $(call KernelPackage,fs-fscache)) define KernelPackage/fs-afs SUBMENU:=$(FS_MENU) TITLE:=Andrew FileSystem client + DEFAULT:=n DEPENDS:=+kmod-rxrpc +kmod-dnsresolver +kmod-fs-fscache KCONFIG:=\ CONFIG_AFS_FS=m \ diff --git a/package/kernel/linux/modules/netsupport.mk b/package/kernel/linux/modules/netsupport.mk index b1899da5f9..cea8e47a65 100644 --- a/package/kernel/linux/modules/netsupport.mk +++ b/package/kernel/linux/modules/netsupport.mk @@ -989,6 +989,7 @@ $(eval $(call KernelPackage,dnsresolver)) define KernelPackage/rxrpc SUBMENU:=$(NETWORK_SUPPORT_MENU) TITLE:=AF_RXRPC support + HIDDEN:=1 KCONFIG:= \ CONFIG_AF_RXRPC \ CONFIG_RXKAD=m \ -- 2.30.2