Skip to content
Snippets Groups Projects
Commit 7860dc8e authored by Dorinda Bassey's avatar Dorinda Bassey
Browse files

redhat/configs: automotive: Disable IPsec Protocols and XFRM

JIRA: https://issues.redhat.com/browse/RHEL-75561

Disable The IPsec Protocols and XFRM (IPSec) Networking
Security Hooks and it's related dependencies.

CONFIG_XFRM_* has a dependency on CONFIG_INET_*, CONFIG_IPV6
and CONFIG_NET_KEY. Hence, the following:
CONFIG_INET_AH
CONFIG_INET_ESP
CONFIG_INET_IPCOMP
CONFIG_NET_IPVTI
CONFIG_INET6_AH
CONFIG_INET6_ESP
CONFIG_INET6_IPCOMP
CONFIG_IPV6_VTI
CONFIG_IPV6_MIP6
needs to be disabled in automotive.

Upstream status: kernel-ark.git commit 75bff0bf3e67

commit 75bff0bf3e675bafb4e5039092ba3188788f9e10
Author: Dorinda Bassey <dbassey@redhat.com>
Date:   Tue Jan 21 18:43:28 2025 +0100

    redhat/configs: automotive: Disable IPsec Protocols and XFRM

    Upstream Status: RHEL only

    Disable The IPsec Protocols and XFRM (IPSec) Networking
    Security Hooks and it's related dependencies.

    CONFIG_XFRM_* has a dependency on CONFIG_INET_* and
    CONFIG_IPV6. Hence, the following:
    CONFIG_INET_AH
    CONFIG_INET_ESP
    CONFIG_INET_IPCOMP
    CONFIG_NET_IPVTI
    CONFIG_INET6_AH
    CONFIG_INET6_ESP
    CONFIG_INET6_IPCOMP
    CONFIG_IPV6_VTI
    CONFIG_IPV6_MIP6
    needs to be disabled in automotive.

    This is needed to satisfy a requirement of FuSa efforts
    for RHIVOS.

    Link: https://issues.redhat.com/browse/RHEL-75561



Signed-off-by: default avatarDorinda Bassey <dbassey@redhat.com>

Signed-off-by: default avatarDorinda Bassey <dbassey@redhat.com>
parent d5cba862
No related branches found
No related tags found
No related merge requests found
Showing
with 12 additions and 0 deletions
# CONFIG_INET6_AH is not set
# CONFIG_INET6_ESP is not set
# CONFIG_INET6_IPCOMP is not set
# CONFIG_INET_AH is not set
# CONFIG_INET_ESP is not set
# CONFIG_INET_IPCOMP is not set
# CONFIG_IPV6_MIP6 is not set
# CONFIG_IPV6_VTI is not set
# CONFIG_NET_IPVTI is not set
# CONFIG_NET_KEY is not set
# CONFIG_XFRM_INTERFACE is not set
# CONFIG_XFRM_USER is not set
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment