Merge pull request #2255 from bcressey/disable-unused

disable uncommon filesystems and network protocols
bottlerocket-os · Jul 7, 2022 · 9ccbf6a · 9ccbf6a
2 parents e86aa00 + dfe344d
commit 9ccbf6a
Show file tree

Hide file tree

Showing 2 changed files with 60 additions and 0 deletions.
diff --git a/packages/kernel-5.10/config-bottlerocket b/packages/kernel-5.10/config-bottlerocket
@@ -96,3 +96,33 @@ CONFIG_BOOT_CONFIG=y
 
 # Enables support for checkpoint/restore
 CONFIG_CHECKPOINT_RESTORE=y
+
+# Disable unused filesystems.
+CONFIG_AFS_FS=n
+CONFIG_CRAMFS=n
+CONFIG_ECRYPT_FS=n
+CONFIG_EXT2_FS=n
+CONFIG_EXT3_FS=n
+CONFIG_EXT4_USE_FOR_EXT2=y
+CONFIG_GFS2_FS=n
+CONFIG_HFS_FS=n
+CONFIG_HFSPLUS_FS=n
+CONFIG_JFS_FS=n
+CONFIG_JFFS2_FS=n
+CONFIG_NFS_V2=n
+CONFIG_NILFS2_FS=n
+CONFIG_NTFS_FS=n
+CONFIG_ROMFS_FS=n
+CONFIG_UFS_FS=n
+CONFIG_ZONEFS_FS=n
+
+# Disable unused network protocols.
+CONFIG_AF_RXRPC=n
+CONFIG_ATM=n
+CONFIG_CAN=n
+CONFIG_HSR=n
+CONFIG_IP_DCCP=n
+CONFIG_L2TP=n
+CONFIG_RDS=n
+CONFIG_RFKILL=n
+CONFIG_TIPC=n
diff --git a/packages/kernel-5.4/config-bottlerocket b/packages/kernel-5.4/config-bottlerocket
@@ -85,3 +85,33 @@ CONFIG_MOUSE_PS2=m
 
 # Enables support for checkpoint/restore
 CONFIG_CHECKPOINT_RESTORE=y
+
+# Disable unused filesystems.
+CONFIG_AFS_FS=n
+CONFIG_CRAMFS=n
+CONFIG_ECRYPT_FS=n
+CONFIG_EXT2_FS=n
+CONFIG_EXT3_FS=n
+CONFIG_EXT4_USE_FOR_EXT2=y
+CONFIG_GFS2_FS=n
+CONFIG_HFS_FS=n
+CONFIG_HFSPLUS_FS=n
+CONFIG_JFS_FS=n
+CONFIG_JFFS2_FS=n
+CONFIG_NFS_V2=n
+CONFIG_NILFS2_FS=n
+CONFIG_NTFS_FS=n
+CONFIG_ROMFS_FS=n
+CONFIG_UFS_FS=n
+CONFIG_ZONEFS_FS=n
+
+# Disable unused network protocols.
+CONFIG_AF_RXRPC=n
+CONFIG_ATM=n
+CONFIG_CAN=n
+CONFIG_HSR=n
+CONFIG_IP_DCCP=n
+CONFIG_L2TP=n
+CONFIG_RDS=n
+CONFIG_RFKILL=n
+CONFIG_TIPC=n