[SRU][E][PATCH] Enforce policy for CONFIG_IOMMU_DEBUGFS

[Khalid Elmously]

BugLink: https://bugs.launchpad.net/bugs/1861057

Ignore: yes
Signed-off-by: Khalid Elmously <khalid.elmously at canonical.com>
---
 debian.master/config/annotations | 1 +
 1 file changed, 1 insertion(+)

diff --git a/debian.master/config/annotations b/debian.master/config/annotations
index b84a4bf10c99..f2d3d56e06a4 100644
--- a/debian.master/config/annotations
+++ b/debian.master/config/annotations
@@ -2763,6 +2763,7 @@ CONFIG_VIRTIO_IOMMU                             policy<{'arm64': 'y'}>
 #
 CONFIG_IPMMU_VMSA				note<LP:1718734>
 CONFIG_ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT       mark<ENFORCED> note<LP:1845820>
+CONFIG_IOMMU_DEBUGFS                            mark<ENFORCED> note<Should not be enabled in production, LP #1861057>
 
 # Menu: Device Drivers >> IOMMU Hardware Support >> Generic IOMMU Pagetable Support
 CONFIG_IOMMU_IO_PGTABLE_LPAE                    policy<{'arm64': 'y', 'armhf': 'y'}>
-- 
2.17.1