~hc/RK356X_SDK_RELEASE.git

..	..	@@ -1,3 +1,4 @@
	1	+# SPDX-License-Identifier: GPL-2.0-only
1	2	config SUNRPC
2	3	tristate
3	4	depends on MULTIUSER
..	..	@@ -20,7 +21,6 @@
20	21	depends on SUNRPC && CRYPTO
21	22	depends on CRYPTO_MD5 && CRYPTO_DES && CRYPTO_CBC && CRYPTO_CTS
22	23	depends on CRYPTO_ECB && CRYPTO_HMAC && CRYPTO_SHA1 && CRYPTO_AES
23		- depends on CRYPTO_ARC4
24	24	default y
25	25	select SUNRPC_GSS
26	26	help
..	..	@@ -34,6 +34,22 @@
34	34
35	35	If unsure, say Y.
36	36
	37	+config SUNRPC_DISABLE_INSECURE_ENCTYPES
	38	+ bool "Secure RPC: Disable insecure Kerberos encryption types"
	39	+ depends on RPCSEC_GSS_KRB5
	40	+ default n
	41	+ help
	42	+ Choose Y here to disable the use of deprecated encryption types
	43	+ with the Kerberos version 5 GSS-API mechanism (RFC 1964). The
	44	+ deprecated encryption types include DES-CBC-MD5, DES-CBC-CRC,
	45	+ and DES-CBC-MD4. These types were deprecated by RFC 6649 because
	46	+ they were found to be insecure.
	47	+
	48	+ N is the default because many sites have deployed KDCs and
	49	+ keytabs that contain only these deprecated encryption types.
	50	+ Choosing Y prevents the use of known-insecure encryption types
	51	+ but might result in compatibility problems.
	52	+
37	53	config SUNRPC_DEBUG
38	54	bool "RPC: Enable dprintk debugging"
39	55	depends on SUNRPC && SYSCTL