Skip to content
Snippets Groups Projects
Commit 335dfda9 authored by Scott Weaver's avatar Scott Weaver
Browse files

Merge: redhat/configs: automotive: Disable IPsec Protocols and XFRM

MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/merge_requests/6238

# Merge Request Required Information

## Summary of Changes
Disable The IPsec Protocols and XFRM (IPSec) Networking Security Hooks and it's related dependencies.

CONFIG_XFRM\_\* has a dependency on CONFIG_INET\_\* and CONFIG_IPV6. Hence, the following: CONFIG_INET_AH CONFIG_INET6_AH CONFIG_INET6_ESP CONFIG_INET6_IPCOMP CONFIG_INET6_XFRM_TUNNEL CONFIG_NET_KEY needs to be disabled in automotive.

This is needed to satisfy a requirement of FuSa efforts for RHIVOS.

## Approved Development Ticket(s)
JIRA: https://issues.redhat.com/browse/RHEL-75561

Upstream-status: RHEL-only: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3617



Signed-off-by: default avatarDorinda Bassey <dbassey@redhat.com>

<details><summary>Click for formatting instructions</summary>
Please follow the CentOS Stream [contribution documentation](https://docs.centos.org/en-US/stream-contrib/quickstart/

) for how to file this ticket and have it approved.

List tickets each on their own line of this description using the format "Resolves: RHEL-1234", "Related: RHEL-2345" or "Reverts: RHEL-3456", as appropriate.
</details>

Approved-by: default avatarJiri Benc <jbenc@redhat.com>
Approved-by: default avatarBrian Masney <bmasney@redhat.com>
Approved-by: default avatarCKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>

Merged-by: default avatarScott Weaver <scweaver@redhat.com>
parents 263ff134 7860dc8e
No related branches found
No related tags found
No related merge requests found
Showing
with 12 additions and 0 deletions
# CONFIG_INET6_AH is not set
# CONFIG_INET6_ESP is not set
# CONFIG_INET6_IPCOMP is not set
# CONFIG_INET_AH is not set
# CONFIG_INET_ESP is not set
# CONFIG_INET_IPCOMP is not set
# CONFIG_IPV6_MIP6 is not set
# CONFIG_IPV6_VTI is not set
# CONFIG_NET_IPVTI is not set
# CONFIG_NET_KEY is not set
# CONFIG_XFRM_INTERFACE is not set
# CONFIG_XFRM_USER is not set
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment