From: Phil Sutter <psutter(a)redhat.com>
[redhat] Disable CONFIG_NETFILTER_XTABLES_COMPAT
This setting seems to have slipped through review process: Before this
symbol was introduced, the relevant feature was always enabled. Since it
is there now, we should use the opportunity to disable it and avoid any
further security holes it may contain in addition to the already fixed
ones.
diff a/redhat/configs/common/generic/CONFIG_NETFILTER_XTABLES_COMPAT
b/redhat/configs/common/generic/CONFIG_NETFILTER_XTABLES_COMPAT
--- a/redhat/configs/common/generic/CONFIG_NETFILTER_XTABLES_COMPAT
+++ b/redhat/configs/common/generic/CONFIG_NETFILTER_XTABLES_COMPAT
@@ -1 +1 @@
-CONFIG_NETFILTER_XTABLES_COMPAT=y
+# CONFIG_NETFILTER_XTABLES_COMPAT is not set
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1126