kernel: Deactivate CONFIG_BINFMT_MISC

CONFIG_BINFMT_MISC allows it to add support for new executable formats
to the kernel from user space, the kernel will then detect for example a
java binary and call the java execution program automatically. I am not
aware that this feature is used in OpenWrt and this could be used to
exploit something. Deactivate it for all targets for now.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

diff --git a/target/linux/gemini/config-4.14 b/target/linux/gemini/config-4.14
index 9a7e9240e5048071851da05431674b007be30a10..8dddf020184d75f925fefea0446f0eaff2f3aa7b 100644 (file)
--- a/target/linux/gemini/config-4.14
+++ b/target/linux/gemini/config-4.14
@@ -44,7 +44,6 @@ CONFIG_ATA=y
 CONFIG_ATAGS=y
 CONFIG_ATA_VERBOSE_ERROR=y
 CONFIG_AUTO_ZRELADDR=y
-CONFIG_BINFMT_MISC=y
 CONFIG_BLK_DEV_SD=y
 CONFIG_BLK_MQ_PCI=y
 CONFIG_BLK_SCSI_REQUEST=y

diff --git a/target/linux/gemini/config-4.19 b/target/linux/gemini/config-4.19
index d9b9cd7316dc2c6b5d31597bad693e1af4129a8c..745bad67da18ac452050ea9b3de54207c41a4a31 100644 (file)
--- a/target/linux/gemini/config-4.19
+++ b/target/linux/gemini/config-4.19
@@ -44,7 +44,6 @@ CONFIG_ATA=y
 CONFIG_ATAGS=y
 CONFIG_ATA_VERBOSE_ERROR=y
 CONFIG_AUTO_ZRELADDR=y
-CONFIG_BINFMT_MISC=y
 CONFIG_BLK_DEV_SD=y
 CONFIG_BLK_MQ_PCI=y
 CONFIG_BLK_SCSI_REQUEST=y

diff --git a/target/linux/omap/config-4.14 b/target/linux/omap/config-4.14
index 795ff758e3d7341c26f28fba0765c147fb639c26..67a33d2b2364aee6c2470e5a92b4d65f3e2e3846 100644 (file)
--- a/target/linux/omap/config-4.14
+++ b/target/linux/omap/config-4.14
@@ -68,7 +68,6 @@ CONFIG_BACKLIGHT_LCD_SUPPORT=y
 # CONFIG_BACKLIGHT_PWM is not set
 # CONFIG_BACKLIGHT_TPS65217 is not set
 CONFIG_BCH=y
-CONFIG_BINFMT_MISC=y
 CONFIG_BLK_DEV_LOOP=y
 CONFIG_BLK_DEV_RAM=y
 CONFIG_BLK_DEV_RAM_COUNT=16

diff --git a/target/linux/sunxi/config-4.14 b/target/linux/sunxi/config-4.14
index d7d9f60a6d45030b7f1807dc6009f0282d89baac..ab7dc9c9b8800d2d9ed0fa8fb3ae1320fd956fdb 100644 (file)
--- a/target/linux/sunxi/config-4.14
+++ b/target/linux/sunxi/config-4.14
@@ -65,7 +65,6 @@ CONFIG_AXP20X_POWER=y
 CONFIG_BACKLIGHT_CLASS_DEVICE=y
 CONFIG_BACKLIGHT_LCD_SUPPORT=y
 CONFIG_BACKLIGHT_PWM=y
-CONFIG_BINFMT_MISC=y
 CONFIG_BLK_DEV_LOOP=y
 CONFIG_BLK_DEV_SD=y
 CONFIG_BLK_SCSI_REQUEST=y

diff --git a/target/linux/sunxi/config-4.19 b/target/linux/sunxi/config-4.19
index c684c04e174412bcf6cee5d66bced0c328edf06e..ef5e1b28d31af415165ec9375530d2e154329bc0 100644 (file)
--- a/target/linux/sunxi/config-4.19
+++ b/target/linux/sunxi/config-4.19
@@ -73,7 +73,6 @@ CONFIG_AXP20X_POWER=y
 CONFIG_BACKLIGHT_CLASS_DEVICE=y
 CONFIG_BACKLIGHT_LCD_SUPPORT=y
 CONFIG_BACKLIGHT_PWM=y
-CONFIG_BINFMT_MISC=y
 CONFIG_BLK_DEV_LOOP=y
 CONFIG_BLK_DEV_SD=y
 CONFIG_BLK_SCSI_REQUEST=y

diff --git a/target/linux/uml/config/x86_64 b/target/linux/uml/config/x86_64
index 22fc8fb7e0afa5fce1e0c2b6bb8e2e1bb947c30f..7223edd8a2d977e00543277521b6b11196ec5224 100644 (file)
--- a/target/linux/uml/config/x86_64
+++ b/target/linux/uml/config/x86_64
@@ -10,7 +10,6 @@ CONFIG_ARCH_HAS_KCOV=y
 # CONFIG_ARCH_OPTIONAL_KERNEL_RWX is not set
 # CONFIG_ARCH_OPTIONAL_KERNEL_RWX_DEFAULT is not set
 # CONFIG_ARCH_REUSE_HOST_VSYSCALL_AREA is not set
-CONFIG_BINFMT_MISC=m
 CONFIG_BLK_DEV_COW_COMMON=y
 CONFIG_BLK_DEV_LOOP=y
 CONFIG_BLK_DEV_UBD=y

diff --git a/target/linux/x86/config-4.14 b/target/linux/x86/config-4.14
index c31783eb8ffa411326f77f4fc6e6b27b92b99d40..ae96e4d97a90c7ce754cf961a1720dde4cdea404 100644 (file)
--- a/target/linux/x86/config-4.14
+++ b/target/linux/x86/config-4.14
@@ -54,7 +54,6 @@ CONFIG_ARCH_WANT_IPC_PARSE_VERSION=y
 CONFIG_ATA=y
 CONFIG_ATA_GENERIC=y
 CONFIG_ATA_PIIX=y
-CONFIG_BINFMT_MISC=y
 CONFIG_BLK_DEV_LOOP=y
 CONFIG_BLK_DEV_SD=y
 CONFIG_BLK_MQ_PCI=y

diff --git a/target/linux/x86/config-4.19 b/target/linux/x86/config-4.19
index 80a94b24d39ebb64d555b00b4b245647fd56ea18..d395876955afff427a215cf5eb93eb36a51421c4 100644 (file)
--- a/target/linux/x86/config-4.19
+++ b/target/linux/x86/config-4.19
@@ -53,7 +53,6 @@ CONFIG_ARCH_WANT_IPC_PARSE_VERSION=y
 CONFIG_ATA=y
 CONFIG_ATA_GENERIC=y
 CONFIG_ATA_PIIX=y
-CONFIG_BINFMT_MISC=y
 CONFIG_BLK_DEV_LOOP=y
 CONFIG_BLK_DEV_SD=y
 CONFIG_BLK_MQ_PCI=y