[SRU][O][PATCH 1/1] UBUNTU: [Config] disable CONFIG_TCG_TPM2_HMAC by default

Aaron Ma aaron.ma at canonical.com
Wed Sep 11 03:27:40 UTC 2024


BugLink: https://bugs.launchpad.net/bugs/2080322

v6.10-rc1 introduce encryption overhead to all kernel to TPM
transactions, but it has regressions about significant delays
at bootup and performance loss when extending a TPM PCR.

Disable it by default until there is a real fix.

Link: https://bugzilla.kernel.org/show_bug.cgi?id=219229
Link: https://lore.kernel.org/regressions/0b4a5a86-a9f6-42d1-a9ba-ec565b336d3a@leemhuis.info/
Signed-off-by: Aaron Ma <aaron.ma at canonical.com>
---
 debian.master/config/annotations | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/debian.master/config/annotations b/debian.master/config/annotations
index acb82f584f16..cb610de1bfef 100644
--- a/debian.master/config/annotations
+++ b/debian.master/config/annotations
@@ -13921,7 +13921,7 @@ CONFIG_TCG_TIS_ST33ZP24                         policy<{'amd64': 'm', 'arm64': '
 CONFIG_TCG_TIS_ST33ZP24_I2C                     policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm', 's390x': 'n'}>
 CONFIG_TCG_TIS_ST33ZP24_SPI                     policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm', 's390x': '-'}>
 CONFIG_TCG_TIS_SYNQUACER                        policy<{'arm64': 'm'}>
-CONFIG_TCG_TPM2_HMAC                            policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 'riscv64': 'y', 's390x': 'y'}>
+CONFIG_TCG_TPM2_HMAC                            policy<{'amd64': 'n', 'arm64': 'n', 'armhf': 'n', 'ppc64el': 'n', 'riscv64': 'n', 's390x': 'n'}>
 CONFIG_TCG_VTPM_PROXY                           policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm', 's390x': 'm'}>
 CONFIG_TCG_XEN                                  policy<{'amd64': 'm', 'arm64': 'm', 'armhf': '-'}>
 CONFIG_TCM_FC                                   policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm', 's390x': 'm'}>
-- 
2.43.0




More information about the kernel-team mailing list