From: Mark Langsdorf <mlangsdo(a)redhat.com>
redhat: enable CONFIG_DEVTMPFS_SAFE
Include the MS_NOEXEC and MS_NOSUID mount flags when mounting devtmpfs.
Signed-off-by: Mark Langsdorf <mlangsdo(a)redhat.com>
diff --git a/redhat/configs/common/generic/CONFIG_DEVTMPFS_SAFE
b/redhat/configs/common/generic/CONFIG_DEVTMPFS_SAFE
index blahblah..blahblah 100644
--- a/redhat/configs/common/generic/CONFIG_DEVTMPFS_SAFE
+++ b/redhat/configs/common/generic/CONFIG_DEVTMPFS_SAFE
@@ -1 +1 @@
-# CONFIG_DEVTMPFS_SAFE is not set
+CONFIG_DEVTMPFS_SAFE=y
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1890