Commit 8b856a09 authored by Andrew Donnellan's avatar Andrew Donnellan Committed by Michael Ellerman

powerpc/configs: Disable SCOM_DEBUGFS in powernv_defconfig

SCOM_DEBUGFS is really not needed for anything other than low-level
hardware debugging.

mpe: It also introduces a large and poorly documented/understood
attack surface. Although the interface is only available to root, the
kernel still aspires to restrict root to accessing hardware through
well defined interfaces, which this is not.

opal-prd uses its own interface (/dev/prd) for SCOM access, so it
doesn't need SCOM_DEBUGFS.

At some point in the future we'll introduce a debug config fragment
where this can go instead.
Signed-off-by: default avatarAndrew Donnellan <ajd@linux.ibm.com>
Signed-off-by: default avatarMichael Ellerman <mpe@ellerman.id.au>
Link: https://lore.kernel.org/r/20190509051119.7694-5-ajd@linux.ibm.com
parent 8c98db8d
...@@ -38,7 +38,7 @@ CONFIG_MODULE_UNLOAD=y ...@@ -38,7 +38,7 @@ CONFIG_MODULE_UNLOAD=y
CONFIG_MODVERSIONS=y CONFIG_MODVERSIONS=y
CONFIG_MODULE_SRCVERSION_ALL=y CONFIG_MODULE_SRCVERSION_ALL=y
CONFIG_PARTITION_ADVANCED=y CONFIG_PARTITION_ADVANCED=y
CONFIG_SCOM_DEBUGFS=y # CONFIG_SCOM_DEBUGFS is not set
CONFIG_OPAL_PRD=y CONFIG_OPAL_PRD=y
CONFIG_PPC_MEMTRACE=y CONFIG_PPC_MEMTRACE=y
# CONFIG_PPC_PSERIES is not set # CONFIG_PPC_PSERIES is not set
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment