UBUNTU: [Config] enable SUNRPC_DISABLE_INSECURE_ENCTYPES

Turning off crypto algorithms always has a regression potential, but the RFC
that deprecated these algorithms in kerberos is nine years old and the config
option in the kernel has been available since 5.1: if someone is relying on
these algorithms, their setup is (or can be) broken in other ways.

Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>

diff --git a/debian.master/config/annotations b/debian.master/config/annotations
index 9b824a0e413dee3ed110df8ad32554c0a6d05924..edf9223ecf10be6863f403bab32feb62b680e8f5 100644 (file)
--- a/debian.master/config/annotations
+++ b/debian.master/config/annotations
@@ -11018,7 +11018,7 @@ CONFIG_NFSD                                     policy<{'amd64': 'm', 'arm64': '
 CONFIG_NFSD_V3                                  policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 's390x': 'y'}>
 CONFIG_NFSD_V3_ACL                              policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 's390x': 'y'}>
 CONFIG_RPCSEC_GSS_KRB5                          policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 's390x': 'm'}>
-CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES         policy<{'amd64': 'n', 'arm64': 'n', 'armhf': 'n', 'ppc64el': 'n', 's390x': 'n'}>
+CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES         policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 's390x': 'y'}>
 CONFIG_SUNRPC_DEBUG                             policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 's390x': 'y'}>
 CONFIG_SUNRPC_XPRT_RDMA                         policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 's390x': 'm'}>
 CONFIG_CODA_FS                                  policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 's390x': 'm'}>

diff --git a/debian.master/config/config.common.ubuntu b/debian.master/config/config.common.ubuntu
index 9407cb5a1d1e9595e518dfa5466fea14edffd716..ce219685190ff853187adfc8376abffeffde5896 100644 (file)
--- a/debian.master/config/config.common.ubuntu
+++ b/debian.master/config/config.common.ubuntu
@@ -10819,7 +10819,7 @@ CONFIG_SUNGEM_PHY=m
 CONFIG_SUNRPC=m
 CONFIG_SUNRPC_BACKCHANNEL=y
 CONFIG_SUNRPC_DEBUG=y
-# CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES is not set
+CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES=y
 CONFIG_SUNRPC_GSS=m
 CONFIG_SUNRPC_SWAP=y
 CONFIG_SUNRPC_XPRT_RDMA=m