Commit 7b3133aa authored Feb 08, 2024 by Lukas Bulwahn Committed by Kees Cook Feb 20, 2024

hardening: drop obsolete DRM_LEGACY from config fragment



Commit 94f8f319 ("drm: Remove Kconfig option for legacy support
(CONFIG_DRM_LEGACY)") removes the config DRM_LEGACY, but one reference to
that config is left in the hardening.config fragment.

As there is no drm legacy driver left, we do not need to recommend this
attack surface reduction anymore.

Drop this reference in hardening.config fragment.

Signed-off-by: Lukas Bulwahn <lukas.bulwahn@gmail.com>
Link: https://lore.kernel.org/r/20240208091045.9219-3-lukas.bulwahn@gmail.com


Signed-off-by: Kees Cook <keescook@chromium.org>

parent 006eac3f

kernel/configs/hardening.config

+0 −3

Original line number	Diff line number	Diff line
		@@ -92,6 +92,3 @@ CONFIG_SYN_COOKIES=y

		# Attack surface reduction: Use the modern PTY interface (devpts) only.
		# CONFIG_LEGACY_PTYS is not set

		# Attack surface reduction: Use only modesetting video drivers.
		# CONFIG_DRM_LEGACY is not set