From: Fedora Kernel Team kernel-team@fedoraproject.org

Hi,

As part of the ongoing rebase effort, the following configuration options need to be reviewed.

As a reminder, the ARK configuration flow involves moving unreviewed configuration options from the pending directory to the ark directory. In the diff below, options are removed from the pending directory and added to the ark hierarchy. The final options that need to be ACKed are the files that are being added to the ark hierarchy.

If the value for a file that is added should be changed, please reply with a better option.

CONFIG_PPC_RTAS_FILTER:

The RTAS syscall API has security issues that could be used to compromise system integrity. This option enforces restrictions on the RTAS calls and arguments passed by userspace programs to mitigate these issues.

Say Y unless you know what you are doing and the filter is causing problems for you.

Symbol: PPC_RTAS_FILTER [=y] Type : bool Defined at arch/powerpc/Kconfig:991 Prompt: Enable filtering of RTAS syscalls Depends on: PPC_RTAS [=y] Location: -> Kernel options

---

Cc: kernel-patches@redhat.com Signed-off-by: Fedora Kernel Team kernel-team@fedoraproject.org --- .../common/generic/CONFIG_PPC_RTAS_FILTER | 1 + .../generic/CONFIG_PPC_RTAS_FILTER | 21 ------------------- 2 files changed, 1 insertion(+), 21 deletions(-) create mode 100644 redhat/configs/common/generic/CONFIG_PPC_RTAS_FILTER delete mode 100644 redhat/configs/pending-common/generic/CONFIG_PPC_RTAS_FILTER

diff --git a/redhat/configs/common/generic/CONFIG_PPC_RTAS_FILTER b/redhat/configs/common/generic/CONFIG_PPC_RTAS_FILTER new file mode 100644 index 000000000000..7470f4d4f0fe --- /dev/null +++ b/redhat/configs/common/generic/CONFIG_PPC_RTAS_FILTER @@ -0,0 +1 @@ +CONFIG_PPC_RTAS_FILTER=y diff --git a/redhat/configs/pending-common/generic/CONFIG_PPC_RTAS_FILTER b/redhat/configs/pending-common/generic/CONFIG_PPC_RTAS_FILTER deleted file mode 100644 index 6105fa8baae5..000000000000 --- a/redhat/configs/pending-common/generic/CONFIG_PPC_RTAS_FILTER +++ /dev/null @@ -1,21 +0,0 @@ -# CONFIG_PPC_RTAS_FILTER: -# -# The RTAS syscall API has security issues that could be used to -# compromise system integrity. This option enforces restrictions on the -# RTAS calls and arguments passed by userspace programs to mitigate -# these issues. -# -# Say Y unless you know what you are doing and the filter is causing -# problems for you. -# -# Symbol: PPC_RTAS_FILTER [=y] -# Type : bool -# Defined at arch/powerpc/Kconfig:991 -# Prompt: Enable filtering of RTAS syscalls -# Depends on: PPC_RTAS [=y] -# Location: -# -> Kernel options -# -# -# -CONFIG_PPC_RTAS_FILTER=y