From 75eb8a146de8db0240e2eb3434074c700da2ba3c Mon Sep 17 00:00:00 2001 From: Hauke Mehrtens Date: Sun, 7 Apr 2019 19:08:18 +0200 Subject: kernel: Deactivate CONFIG_BINFMT_MISC CONFIG_BINFMT_MISC allows it to add support for new executable formats to the kernel from user space, the kernel will then detect for example a java binary and call the java execution program automatically. I am not aware that this feature is used in OpenWrt and this could be used to exploit something. Deactivate it for all targets for now. Signed-off-by: Hauke Mehrtens --- target/linux/x86/config-4.14 | 1 - target/linux/x86/config-4.19 | 1 - 2 files changed, 2 deletions(-) (limited to 'target/linux/x86') diff --git a/target/linux/x86/config-4.14 b/target/linux/x86/config-4.14 index c31783eb8f..ae96e4d97a 100644 --- a/target/linux/x86/config-4.14 +++ b/target/linux/x86/config-4.14 @@ -54,7 +54,6 @@ CONFIG_ARCH_WANT_IPC_PARSE_VERSION=y CONFIG_ATA=y CONFIG_ATA_GENERIC=y CONFIG_ATA_PIIX=y -CONFIG_BINFMT_MISC=y CONFIG_BLK_DEV_LOOP=y CONFIG_BLK_DEV_SD=y CONFIG_BLK_MQ_PCI=y diff --git a/target/linux/x86/config-4.19 b/target/linux/x86/config-4.19 index 80a94b24d3..d395876955 100644 --- a/target/linux/x86/config-4.19 +++ b/target/linux/x86/config-4.19 @@ -53,7 +53,6 @@ CONFIG_ARCH_WANT_IPC_PARSE_VERSION=y CONFIG_ATA=y CONFIG_ATA_GENERIC=y CONFIG_ATA_PIIX=y -CONFIG_BINFMT_MISC=y CONFIG_BLK_DEV_LOOP=y CONFIG_BLK_DEV_SD=y CONFIG_BLK_MQ_PCI=y -- cgit v1.2.3