35 lines
1 KiB
Diff
35 lines
1 KiB
Diff
From 31dc49dee987500b0d5b5b536b6da2f3fbfd5b59 Mon Sep 17 00:00:00 2001
|
|
From: Peter Robinson <pbrobinson@gmail.com>
|
|
Date: Tue, 13 Jun 2023 09:36:50 +0100
|
|
Subject: [v1] disable NFS support by default
|
|
|
|
While NFS is widely used in data centres, and private
|
|
networks it's quite a nuanced usecase for device firmware.
|
|
A lot of devices already disable it.
|
|
|
|
Various network protocols should really be opt in, not opt
|
|
out, because they add extra size and are potential attack
|
|
vectors from a security PoV. In the NFS case it doesn't
|
|
really make sense for a lot of devices like tables, SBCs etc.
|
|
It's also something we don't really want for SystemReady-IR
|
|
due to security concerns.
|
|
|
|
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
|
|
---
|
|
|
|
v1: drop RFC tag
|
|
|
|
cmd/Kconfig | 1 -
|
|
|
|
diff --git a/cmd/Kconfig b/cmd/Kconfig
|
|
index 365371fb511..a193929cec4 100644
|
|
--- a/cmd/Kconfig
|
|
+++ b/cmd/Kconfig
|
|
@@ -1848,7 +1848,6 @@ config CMD_RARP
|
|
|
|
config CMD_NFS
|
|
bool "nfs"
|
|
- default y
|
|
help
|
|
Boot image via network using NFS protocol.
|
|
|