From 10de1257079905ac383e7abf346a04221cafa620 Mon Sep 17 00:00:00 2001 From: Peter Robinson Date: Wed, 14 Jun 2023 15:41:10 +0100 Subject: disable NFS support by default While NFS is widely used in data centres, and private networks it's quite a nuanced usecase for device firmware. A lot of devices already disable it. Various network protocols should really be opt in, not opt out, because they add extra size and are potential attack vectors from a security PoV. In the NFS case it doesn't really make sense for a lot of devices like tables, SBCs etc. It's also something we don't really want for SystemReady-IR due to security concerns. Signed-off-by: Peter Robinson Reviewed-by: Tom Rini Reviewed-by: Ilias Apalodimas --- configs/trimslice_defconfig | 1 - 1 file changed, 1 deletion(-) (limited to 'configs/trimslice_defconfig') diff --git a/configs/trimslice_defconfig b/configs/trimslice_defconfig index d94a0b408b..9ec08bda88 100644 --- a/configs/trimslice_defconfig +++ b/configs/trimslice_defconfig @@ -35,7 +35,6 @@ CONFIG_CMD_PCI=y CONFIG_CMD_SPI=y CONFIG_CMD_USB=y # CONFIG_CMD_SETEXPR is not set -# CONFIG_CMD_NFS is not set CONFIG_CMD_EXT4_WRITE=y # CONFIG_SPL_DOS_PARTITION is not set # CONFIG_SPL_EFI_PARTITION is not set -- cgit v1.2.3