Skip to content

Commit 11ca5f3

Browse files
DragonBluepAnsuel
authored andcommitted
generic: overlay: disable OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW
The Kconfig symbol help text prompts: Disable this to get a possibly more secure configuration, but that might not be backward compatible with previous kernels. If backward compatibility is not an issue, then it is safe and recommended to say N here. For OpenWrt, when updating firmware, we always update the kernel and recreate the overlay partition. Therefore, compatibility is not a problem. Signed-off-by: Shiji Yang <yangshiji66@outlook.com> Link: openwrt/openwrt#23126 Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
1 parent 052665b commit 11ca5f3

2 files changed

Lines changed: 2 additions & 2 deletions

File tree

target/linux/generic/config-6.12

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4552,7 +4552,7 @@ CONFIG_OVERLAY_FS=y
45524552
# CONFIG_OVERLAY_FS_DEBUG is not set
45534553
# CONFIG_OVERLAY_FS_INDEX is not set
45544554
# CONFIG_OVERLAY_FS_METACOPY is not set
4555-
CONFIG_OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW=y
4555+
# CONFIG_OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW is not set
45564556
# CONFIG_OVERLAY_FS_REDIRECT_DIR is not set
45574557
CONFIG_OVERLAY_FS_XINO_AUTO=y
45584558
# CONFIG_P54_COMMON is not set

target/linux/generic/config-6.18

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4709,7 +4709,7 @@ CONFIG_OVERLAY_FS=y
47094709
# CONFIG_OVERLAY_FS_DEBUG is not set
47104710
# CONFIG_OVERLAY_FS_INDEX is not set
47114711
# CONFIG_OVERLAY_FS_METACOPY is not set
4712-
CONFIG_OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW=y
4712+
# CONFIG_OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW is not set
47134713
# CONFIG_OVERLAY_FS_REDIRECT_DIR is not set
47144714
CONFIG_OVERLAY_FS_XINO_AUTO=y
47154715
# CONFIG_OVMF_DEBUG_LOG is not set

0 commit comments

Comments
 (0)