From patchwork Mon Dec 26 19:29:51 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 6332 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4NgntJ3pyQz3wcv for ; Mon, 26 Dec 2022 19:30:00 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail02.haj.ipfire.org", Issuer "R3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4NgntH5Wz3z15G; Mon, 26 Dec 2022 19:29:59 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4NgntH5LMCz2y4g; Mon, 26 Dec 2022 19:29:59 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4NgntH186Tz2xLF for ; Mon, 26 Dec 2022 19:29:59 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384)) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4NgntF31dMzwp for ; Mon, 26 Dec 2022 19:29:56 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1672082999; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=xgJ76IbmUpkstktYuJRi9+2ziGDImAhALMO/mhp0wEo=; b=nfLAdquL7m5wdmVU137fBUv/QRLFzPf59RRlVD2d71ccUFOzXRAH4fV2EOMSHCkFqa4Y7Z XV8CfsIGSUTp7bDw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1672082999; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=xgJ76IbmUpkstktYuJRi9+2ziGDImAhALMO/mhp0wEo=; b=l2032ZhNVDCpNWQKAQBRyjxEuz1ho0zr6MN3s81Ec1Ck2LperAuCCIeno4agqZCCYVIPlj Xc/0T2pq5zAYOzmt6twIlWZZVJF4ZKgZg7aRKpJbECbb47x+YRZgJSHyPqQdzIzhbFUV5V 1gquDqFWFtwS2jK1h2HYMglv25B3pQEOr7xgOfRP/Mqq+IZdR65fFkF2msRcpm8qTpACtF d29oCwb0KnnuwMniN0qyXZyOGpblrqHDwDDURs1hFtzi7oDCij4fcX6AYpv2/TtfUJg1IA 52lwrEKsVIWJjoj2QQ+JuovaFrfxGjqYIr9pYNOI3vD2q3bS34pGMNm5opxDWw== Message-ID: <7897a29a-1dae-0158-f207-f67a3d91ae16@ipfire.org> Date: Mon, 26 Dec 2022 19:29:51 +0000 MIME-Version: 1.0 Subject: [PATCH 16/21] linux: Disable ACPI configfs support Content-Language: en-US To: development@lists.ipfire.org References: <0e60a1de-6210-835e-54a4-ec5e3128e42e@ipfire.org> From: =?utf-8?q?Peter_M=C3=BCller?= In-Reply-To: <0e60a1de-6210-835e-54a4-ec5e3128e42e@ipfire.org> X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFire development talk List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: development-bounces@lists.ipfire.org Sender: "Development" This is disabled in IPFire 3.x, and projects such as grsecurity recommend doing so for security reasons as well. Also, skimming through our source code, there is no point where this ACPI configfs would have been explicitly mounted, which leads to the assumption that we never used it anyway. Signed-off-by: Peter Müller Acked-by: Michael Tremer --- config/kernel/kernel.config.x86_64-ipfire | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel.config.x86_64-ipfire index 763c7c842..5a8a9e14b 100644 --- a/config/kernel/kernel.config.x86_64-ipfire +++ b/config/kernel/kernel.config.x86_64-ipfire @@ -552,7 +552,7 @@ CONFIG_ACPI_APEI_MEMORY_FAILURE=y CONFIG_ACPI_WATCHDOG=y CONFIG_ACPI_EXTLOG=m CONFIG_ACPI_ADXL=y -CONFIG_ACPI_CONFIGFS=m +# CONFIG_ACPI_CONFIGFS is not set CONFIG_PMIC_OPREGION=y # CONFIG_XPOWER_PMIC_OPREGION is not set CONFIG_ACPI_VIOT=y