Skip to content

Commit f23a468

Browse files
committed
config: mitigate Copy Fail by disabling the AEAD userspace interface
This config was not vulnerable to Dirty Frag already, since both related kernel modules were disabled already. Signed-off-by: MichaIng <micha@dietpi.com>
1 parent bab1c21 commit f23a468

2 files changed

Lines changed: 3 additions & 1 deletion

File tree

arch/arm64/boot/dts/rockchip/rk3566-radxa-zero-3e.dts

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,8 @@
2828
&gmac1m1_rgmii_clk
2929
&gmac1m1_rgmii_bus
3030
&gmac1m1_clkinout>;
31+
tx_delay = <0x47>;
32+
rx_delay = <0x27>;
3133
status = "okay";
3234
};
3335

dietpi_visionfive2_defconfig

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,7 @@ CONFIG_CRYPTO_DEV_VIRTIO=n
7373
CONFIG_CRYPTO_SHA1=y
7474
CONFIG_CRYPTO_TEST=m
7575
CONFIG_CRYPTO_USER=y
76-
CONFIG_CRYPTO_USER_API_AEAD=y
76+
CONFIG_CRYPTO_USER_API_AEAD=n
7777
CONFIG_CRYPTO_USER_API_HASH=y
7878
CONFIG_CRYPTO_USER_API_RNG=y
7979
CONFIG_CRYPTO_USER_API_SKCIPHER=y

0 commit comments

Comments
 (0)