]> git.dujemihanovic.xyz Git - u-boot.git/commit
disable NFS support by default
authorPeter Robinson <pbrobinson@gmail.com>
Wed, 14 Jun 2023 14:41:10 +0000 (15:41 +0100)
committerTom Rini <trini@konsulko.com>
Fri, 14 Jul 2023 19:21:07 +0000 (15:21 -0400)
commit10de1257079905ac383e7abf346a04221cafa620
treed0e91747b9a90ad67b4aca23b864a58ba41402d3
parent9e70676cf5281f0e37736ea42b59ef2e02907051
disable NFS support by default

While NFS is widely used in data centres, and private
networks it's quite a nuanced usecase for device firmware.
A lot of devices already disable it.

Various network protocols should really be opt in, not opt
out, because they add extra size and are potential attack
vectors from a security PoV. In the NFS case it doesn't
really make sense for a lot of devices like tables, SBCs etc.
It's also something we don't really want for SystemReady-IR
due to security concerns.

Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
Reviewed-by: Tom Rini <trini@konsulko.com>
Reviewed-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
91 files changed:
cmd/Kconfig
configs/10m50_defconfig
configs/3c120_defconfig
configs/CMPC885_defconfig
configs/CMPCPRO_defconfig
configs/apalis-tk1_defconfig
configs/apalis_imx6_defconfig
configs/apalis_t30_defconfig
configs/bayleybay_defconfig
configs/beaver_defconfig
configs/bitmain_antminer_s9_defconfig
configs/brppt1_mmc_defconfig
configs/brppt2_defconfig
configs/brsmarc1_defconfig
configs/brxre1_defconfig
configs/cardhu_defconfig
configs/cei-tk1-som_defconfig
configs/cherryhill_defconfig
configs/chromebook_link64_defconfig
configs/chromebook_link_defconfig
configs/chromebook_samus_defconfig
configs/chromebox_panther_defconfig
configs/cm_t43_defconfig
configs/colibri_imx6_defconfig
configs/colibri_t20_defconfig
configs/colibri_t30_defconfig
configs/colibri_vf_defconfig
configs/conga-qeval20-qa3-e3845-internal-uart_defconfig
configs/conga-qeval20-qa3-e3845_defconfig
configs/coreboot64_defconfig
configs/coreboot_defconfig
configs/corstone1000_defconfig
configs/cougarcanyon2_defconfig
configs/crownbay_defconfig
configs/dalmore_defconfig
configs/dfi-bt700-q7x-151_defconfig
configs/edison_defconfig
configs/efi-x86_payload32_defconfig
configs/efi-x86_payload64_defconfig
configs/galileo_defconfig
configs/gazerbeam_defconfig
configs/ge_bx50v3_defconfig
configs/harmony_defconfig
configs/jetson-tk1_defconfig
configs/malta64_defconfig
configs/malta64el_defconfig
configs/malta_defconfig
configs/maltael_defconfig
configs/medcom-wide_defconfig
configs/minnowmax_defconfig
configs/mscc_jr2_defconfig
configs/mscc_luton_defconfig
configs/mscc_ocelot_defconfig
configs/mscc_serval_defconfig
configs/mscc_servalt_defconfig
configs/mt7620_mt7530_rfb_defconfig
configs/mt7620_rfb_defconfig
configs/mt7621_nand_rfb_defconfig
configs/mt7621_rfb_defconfig
configs/mt7623a_unielec_u7623_02_defconfig
configs/mt7623n_bpir2_defconfig
configs/mt7628_rfb_defconfig
configs/mt7629_rfb_defconfig
configs/nyan-big_defconfig
configs/odroid_defconfig
configs/omap4_panda_defconfig
configs/omap4_sdp4430_defconfig
configs/p2371-0000_defconfig
configs/p2371-2180_defconfig
configs/p2571_defconfig
configs/p2771-0000-000_defconfig
configs/p2771-0000-500_defconfig
configs/p3450-0000_defconfig
configs/paz00_defconfig
configs/plutux_defconfig
configs/qemu-x86_64_defconfig
configs/qemu-x86_defconfig
configs/seaboard_defconfig
configs/smdkv310_defconfig
configs/sniper_defconfig
configs/socrates_defconfig
configs/som-db5800-som-6867_defconfig
configs/tec-ng_defconfig
configs/tec_defconfig
configs/theadorable-x86-conga-qa3-e3845-pcie-x4_defconfig
configs/theadorable-x86-conga-qa3-e3845_defconfig
configs/theadorable-x86-dfi-bt700_defconfig
configs/trimslice_defconfig
configs/venice2_defconfig
configs/ventana_defconfig
configs/vexpress_ca9x4_defconfig