Check disabling XFS_SUPPORT_V4 for cutting attack surface
authorAlexander Popov <alex.popov@linux.com>
Tue, 4 Jul 2023 11:20:20 +0000 (14:20 +0300)
committerAlexander Popov <alex.popov@linux.com>
Tue, 4 Jul 2023 11:20:20 +0000 (14:20 +0300)
commit78675ceec3da0a4e99fe9cf5389078e50c14ef95
treec205435a1dfbcae13a7c8670280f97a3f0bf3b8a
parent940be276dfedf56d92ca08beac320a37426922c7
Check disabling XFS_SUPPORT_V4 for cutting attack surface

The XFS V4 format is deprecated:
https://elixir.bootlin.com/linux/v6.3.11/source/fs/xfs/Kconfig#L25

Quote:
The V4 filesystem format lacks certain features that are supported
by the V5 format, such as metadata checksumming, strengthened
metadata verification, and the ability to store timestamps past the
year 2038. Because of this, the V4 format is deprecated. All users
should upgrade by backing up their files, reformatting, and restoring
from the backup... To close off an attack surface, say N.
kconfig_hardened_check/checks.py