From: Shiji Yang Date: Mon, 27 Apr 2026 11:46:58 +0000 (+0800) Subject: generic: overlay: disable OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F23126%2Fhead;p=thirdparty%2Fopenwrt.git generic: overlay: disable OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW The Kconfig symbol help text prompts: Disable this to get a possibly more secure configuration, but that might not be backward compatible with previous kernels. If backward compatibility is not an issue, then it is safe and recommended to say N here. For OpenWrt, when updating firmware, we always update the kernel and recreate the overlay partition. Therefore, compatibility is not a problem. Signed-off-by: Shiji Yang Link: https://github.com/openwrt/openwrt/pull/23126 Signed-off-by: Christian Marangi --- diff --git a/target/linux/generic/config-6.12 b/target/linux/generic/config-6.12 index 98fa67369c8..fd4b90aa681 100644 --- a/target/linux/generic/config-6.12 +++ b/target/linux/generic/config-6.12 @@ -4552,7 +4552,7 @@ CONFIG_OVERLAY_FS=y # CONFIG_OVERLAY_FS_DEBUG is not set # CONFIG_OVERLAY_FS_INDEX is not set # CONFIG_OVERLAY_FS_METACOPY is not set -CONFIG_OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW=y +# CONFIG_OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW is not set # CONFIG_OVERLAY_FS_REDIRECT_DIR is not set CONFIG_OVERLAY_FS_XINO_AUTO=y # CONFIG_P54_COMMON is not set diff --git a/target/linux/generic/config-6.18 b/target/linux/generic/config-6.18 index 77657b53e11..fbc54c3d780 100644 --- a/target/linux/generic/config-6.18 +++ b/target/linux/generic/config-6.18 @@ -4709,7 +4709,7 @@ CONFIG_OVERLAY_FS=y # CONFIG_OVERLAY_FS_DEBUG is not set # CONFIG_OVERLAY_FS_INDEX is not set # CONFIG_OVERLAY_FS_METACOPY is not set -CONFIG_OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW=y +# CONFIG_OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW is not set # CONFIG_OVERLAY_FS_REDIRECT_DIR is not set CONFIG_OVERLAY_FS_XINO_AUTO=y # CONFIG_OVMF_DEBUG_LOG is not set