From 11ca5f39574ca2e49b22afcff50c39ffdc9752a0 Mon Sep 17 00:00:00 2001 From: Shiji Yang Date: Mon, 27 Apr 2026 19:46:58 +0800 Subject: [PATCH] generic: overlay: disable OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW The Kconfig symbol help text prompts: Disable this to get a possibly more secure configuration, but that might not be backward compatible with previous kernels. If backward compatibility is not an issue, then it is safe and recommended to say N here. For OpenWrt, when updating firmware, we always update the kernel and recreate the overlay partition. Therefore, compatibility is not a problem. Signed-off-by: Shiji Yang Link: https://github.com/openwrt/openwrt/pull/23126 Signed-off-by: Christian Marangi --- target/linux/generic/config-6.12 | 2 +- target/linux/generic/config-6.18 | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/target/linux/generic/config-6.12 b/target/linux/generic/config-6.12 index 98fa67369c..fd4b90aa68 100644 --- a/target/linux/generic/config-6.12 +++ b/target/linux/generic/config-6.12 @@ -4552,7 +4552,7 @@ CONFIG_OVERLAY_FS=y # CONFIG_OVERLAY_FS_DEBUG is not set # CONFIG_OVERLAY_FS_INDEX is not set # CONFIG_OVERLAY_FS_METACOPY is not set -CONFIG_OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW=y +# CONFIG_OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW is not set # CONFIG_OVERLAY_FS_REDIRECT_DIR is not set CONFIG_OVERLAY_FS_XINO_AUTO=y # CONFIG_P54_COMMON is not set diff --git a/target/linux/generic/config-6.18 b/target/linux/generic/config-6.18 index 77657b53e1..fbc54c3d78 100644 --- a/target/linux/generic/config-6.18 +++ b/target/linux/generic/config-6.18 @@ -4709,7 +4709,7 @@ CONFIG_OVERLAY_FS=y # CONFIG_OVERLAY_FS_DEBUG is not set # CONFIG_OVERLAY_FS_INDEX is not set # CONFIG_OVERLAY_FS_METACOPY is not set -CONFIG_OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW=y +# CONFIG_OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW is not set # CONFIG_OVERLAY_FS_REDIRECT_DIR is not set CONFIG_OVERLAY_FS_XINO_AUTO=y # CONFIG_OVMF_DEBUG_LOG is not set