From e34acd64f5da8288bd0dab90265cfe96d21fe01f Mon Sep 17 00:00:00 2001 From: Felix Fietkau Date: Tue, 19 Jan 2016 15:14:51 +0000 Subject: [PATCH] kernel: disable AFS support by default This pulls in CONFIG_KEYS, which bloats up the kernel size and is thus very undesirable. It also currently exposes the kernel to a local root vulnerability Signed-off-by: Felix Fietkau SVN-Revision: 48364 --- package/kernel/linux/modules/fs.mk | 1 + package/kernel/linux/modules/netsupport.mk | 1 + 2 files changed, 2 insertions(+) diff --git a/package/kernel/linux/modules/fs.mk b/package/kernel/linux/modules/fs.mk index 5900a4b140..a47eea909d 100644 --- a/package/kernel/linux/modules/fs.mk +++ b/package/kernel/linux/modules/fs.mk @@ -29,6 +29,7 @@ $(eval $(call KernelPackage,fs-fscache)) define KernelPackage/fs-afs SUBMENU:=$(FS_MENU) TITLE:=Andrew FileSystem client + DEFAULT:=n DEPENDS:=+kmod-rxrpc +kmod-dnsresolver +kmod-fs-fscache KCONFIG:=\ CONFIG_AFS_FS=m \ diff --git a/package/kernel/linux/modules/netsupport.mk b/package/kernel/linux/modules/netsupport.mk index e3fa9d7b5a..b1cce0b2d2 100644 --- a/package/kernel/linux/modules/netsupport.mk +++ b/package/kernel/linux/modules/netsupport.mk @@ -968,6 +968,7 @@ $(eval $(call KernelPackage,dnsresolver)) define KernelPackage/rxrpc SUBMENU:=$(NETWORK_SUPPORT_MENU) TITLE:=AF_RXRPC support + HIDDEN:=1 KCONFIG:= \ CONFIG_AF_RXRPC \ CONFIG_RXKAD=m \ -- 2.25.1