APPLIED Re: [SRU][O][PATCH 1/1] UBUNTU: [Config] disable CONFIG_TCG_TPM2_HMAC by default

[Timo Aaltonen]

Aaron Ma kirjoitti 11.9.2024 klo 6.27:
> BugLink: https://bugs.launchpad.net/bugs/2080322
> 
> v6.10-rc1 introduce encryption overhead to all kernel to TPM
> transactions, but it has regressions about significant delays
> at bootup and performance loss when extending a TPM PCR.
> 
> Disable it by default until there is a real fix.
> 
> Link: https://bugzilla.kernel.org/show_bug.cgi?id=219229
> Link: https://lore.kernel.org/regressions/0b4a5a86-a9f6-42d1-a9ba-ec565b336d3a@leemhuis.info/
> Signed-off-by: Aaron Ma <aaron.ma at canonical.com>
> ---
>   debian.master/config/annotations | 2 +-
>   1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/debian.master/config/annotations b/debian.master/config/annotations
> index acb82f584f16..cb610de1bfef 100644
> --- a/debian.master/config/annotations
> +++ b/debian.master/config/annotations
> @@ -13921,7 +13921,7 @@ CONFIG_TCG_TIS_ST33ZP24                         policy<{'amd64': 'm', 'arm64': '
>   CONFIG_TCG_TIS_ST33ZP24_I2C                     policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm', 's390x': 'n'}>
>   CONFIG_TCG_TIS_ST33ZP24_SPI                     policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm', 's390x': '-'}>
>   CONFIG_TCG_TIS_SYNQUACER                        policy<{'arm64': 'm'}>
> -CONFIG_TCG_TPM2_HMAC                            policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 'riscv64': 'y', 's390x': 'y'}>
> +CONFIG_TCG_TPM2_HMAC                            policy<{'amd64': 'n', 'arm64': 'n', 'armhf': 'n', 'ppc64el': 'n', 'riscv64': 'n', 's390x': 'n'}>
>   CONFIG_TCG_VTPM_PROXY                           policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm', 's390x': 'm'}>
>   CONFIG_TCG_XEN                                  policy<{'amd64': 'm', 'arm64': 'm', 'armhf': '-'}>
>   CONFIG_TCM_FC                                   policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm', 's390x': 'm'}>

thanks for tracking this down, applied

-- 
t