aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMark H Weaver <mhw@netris.org>2017-05-21 01:47:09 -0400
committerMark H Weaver <mhw@netris.org>2017-05-21 01:47:09 -0400
commita08691dfbbb34c425bc06b8106c4ce116e745789 (patch)
tree542a4c28cb4fbf02f0368f990ed1b3ed4833f6a6
parent519fd6c36738e2f7d675d04fb504773e71f715f4 (diff)
downloadpatches-a08691dfbbb34c425bc06b8106c4ce116e745789.tar
patches-a08691dfbbb34c425bc06b8106c4ce116e745789.tar.gz
gnu: linux-libre: Remove CONFIG_SMC from x86 kernel configurations.
This removes support for the "shared memory communications over RDMA" (SMC-R) networking protocol, which was added in 4.11 without the knowledge of the RDMA maintainers, and which is thought to contain significant security flaws. For details, see <https://lwn.net/Articles/723081> and <https://lwn.net/Articles/723070>. * gnu/packages/aux-files/linux-libre/4.11-x86_64.conf, gnu/packages/aux-files/linux-libre/4.11-i686.conf: Disable CONFIG_SMC. 723# 0001-gnu-libevent-2.0-Add-fix-from-upstream.patch
-rw-r--r--gnu/packages/aux-files/linux-libre/4.11-i686.conf3
-rw-r--r--gnu/packages/aux-files/linux-libre/4.11-x86_64.conf3
2 files changed, 2 insertions, 4 deletions
diff --git a/gnu/packages/aux-files/linux-libre/4.11-i686.conf b/gnu/packages/aux-files/linux-libre/4.11-i686.conf
index 6234a980ae..93c1f1747b 100644
--- a/gnu/packages/aux-files/linux-libre/4.11-i686.conf
+++ b/gnu/packages/aux-files/linux-libre/4.11-i686.conf
@@ -935,8 +935,7 @@ CONFIG_XFRM_STATISTICS=y
CONFIG_XFRM_IPCOMP=m
CONFIG_NET_KEY=m
# CONFIG_NET_KEY_MIGRATE is not set
-CONFIG_SMC=m
-CONFIG_SMC_DIAG=m
+# CONFIG_SMC is not set
CONFIG_INET=y
CONFIG_IP_MULTICAST=y
CONFIG_IP_ADVANCED_ROUTER=y
diff --git a/gnu/packages/aux-files/linux-libre/4.11-x86_64.conf b/gnu/packages/aux-files/linux-libre/4.11-x86_64.conf
index d47a5d1226..ea6e5cc899 100644
--- a/gnu/packages/aux-files/linux-libre/4.11-x86_64.conf
+++ b/gnu/packages/aux-files/linux-libre/4.11-x86_64.conf
@@ -919,8 +919,7 @@ CONFIG_XFRM_STATISTICS=y
CONFIG_XFRM_IPCOMP=m
CONFIG_NET_KEY=m
# CONFIG_NET_KEY_MIGRATE is not set
-CONFIG_SMC=m
-CONFIG_SMC_DIAG=m
+# CONFIG_SMC is not set
CONFIG_INET=y
CONFIG_IP_MULTICAST=y
CONFIG_IP_ADVANCED_ROUTER=y