aboutsummaryrefslogtreecommitdiff
path: root/configs/brsmarc1_defconfig
diff options
context:
space:
mode:
authorPeter Robinson2023-06-14 15:41:10 +0100
committerTom Rini2023-07-14 15:21:07 -0400
commit10de1257079905ac383e7abf346a04221cafa620 (patch)
treed0e91747b9a90ad67b4aca23b864a58ba41402d3 /configs/brsmarc1_defconfig
parent9e70676cf5281f0e37736ea42b59ef2e02907051 (diff)
disable NFS support by default
While NFS is widely used in data centres, and private networks it's quite a nuanced usecase for device firmware. A lot of devices already disable it. Various network protocols should really be opt in, not opt out, because they add extra size and are potential attack vectors from a security PoV. In the NFS case it doesn't really make sense for a lot of devices like tables, SBCs etc. It's also something we don't really want for SystemReady-IR due to security concerns. Signed-off-by: Peter Robinson <pbrobinson@gmail.com> Reviewed-by: Tom Rini <trini@konsulko.com> Reviewed-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
Diffstat (limited to 'configs/brsmarc1_defconfig')
-rw-r--r--configs/brsmarc1_defconfig1
1 files changed, 0 insertions, 1 deletions
diff --git a/configs/brsmarc1_defconfig b/configs/brsmarc1_defconfig
index 1e55ed7c60d..94943fccf1a 100644
--- a/configs/brsmarc1_defconfig
+++ b/configs/brsmarc1_defconfig
@@ -73,7 +73,6 @@ CONFIG_CMD_USB=y
# CONFIG_CMD_ITEST is not set
CONFIG_CMD_DHCP=y
CONFIG_BOOTP_MAY_FAIL=y
-# CONFIG_CMD_NFS is not set
CONFIG_SYS_DISABLE_AUTOLOAD=y
CONFIG_CMD_MII=y
CONFIG_CMD_PING=y