[SRU][D][PATCH] Enforce policy for CONFIG_IOMMU_DEBUGFS

[Khalid Elmously]

BugLink: https://bugs.launchpad.net/bugs/1861057

Ignore: yes
Signed-off-by: Khalid Elmously <khalid.elmously at canonical.com>
---
 debian.master/config/annotations | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/debian.master/config/annotations b/debian.master/config/annotations
index 09c5fba97ed6..2db3c64efd24 100644
--- a/debian.master/config/annotations
+++ b/debian.master/config/annotations
@@ -10161,6 +10161,9 @@ CONFIG_CPA_DEBUG                                policy<{'amd64': 'n', 'i386': 'n
 CONFIG_DEBUG_ENTRY                              policy<{'amd64': 'n', 'i386': 'n'}>
 CONFIG_DEBUG_NMI_SELFTEST                       policy<{'amd64': 'n', 'i386': 'n'}>
 CONFIG_X86_DEBUG_FPU                            policy<{'amd64': 'y', 'i386': 'y'}>
+
+CONFIG_IOMMU_DEBUGFS                              mark<ENFORCED> note<Should not be enabled in production, LP #1861057>
+
 #
 CONFIG_X86_DECODER_SELFTEST                     flag<TESTING>
 CONFIG_X86_DEBUG_FPU                            flag<REVIEW>
-- 
2.17.1