Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

disable kernel support for unused filesystems #2235

Closed
bcressey opened this issue Jun 22, 2022 · 0 comments · Fixed by #2274
Closed

disable kernel support for unused filesystems #2235

bcressey opened this issue Jun 22, 2022 · 0 comments · Fixed by #2274
Assignees
@bcressey
Milestone
1.9.0

Comments

@bcressey
Copy link
Contributor

bcressey commented Jun 22, 2022 •
edited
Loading

What I'd like:
All of the unused filesystems mentioned in the CIS Distribution Independent Linux Benchmark should be removed:

  • CONFIG_CRAMFS=n
  • CONFIG_HFS_FS=n
  • CONFIG_HFSPLUS_FS=n
  • CONFIG_JFFS2_FS=n
  • CONFIG_UDF_FS=n

Any alternatives you've considered:
Keep the filesystems around, but that adds unnecessary surface area to the kernel.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@bcressey bcressey

Labels
None yet
Projects
No open projects
1.9.0
Status: Done
Milestone
1.9.0
Development

Successfully merging a pull request may close this issue.

add support for blocking kernel modules bcressey/bottlerocket
1 participant
@bcressey