[Devel] [PATCH RHEL9 COMMIT] mm: enable memfd_secret syscall by default

[Konstantin Khorenko]

The commit is pushed to "branch-rh9-5.14.0-427.77.1.vz9.86.x-ovz" and will appear at git at bitbucket.org:openvz/vzkernel.git
after rh9-5.14.0-427.77.1.vz9.86.10
------>
commit 4c14c4b6e8c1e86c2708c0792f5d6b4d374355f4
Author: Konstantin Khorenko <khorenko at virtuozzo.com>
Date:   Mon Sep 29 10:39:35 2025 +0200

    mm: enable memfd_secret syscall by default
    
    We need this syscall for libtpms-based TPM emulator (SWTPM)
    
    https://virtuozzo.atlassian.net/browse/VSTOR-116416
    https://virtuozzo.atlassian.net/browse/VSTOR-91089
    
    Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>
    
    Feature: mm: QEMU live update
---
 mm/secretmem.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mm/secretmem.c b/mm/secretmem.c
index 04c3ac9448a18..69374acfd7800 100644
--- a/mm/secretmem.c
+++ b/mm/secretmem.c
@@ -35,7 +35,7 @@
 #define SECRETMEM_MODE_MASK	(0x0)
 #define SECRETMEM_FLAGS_MASK	SECRETMEM_MODE_MASK
 
-static bool secretmem_enable __ro_after_init;
+static bool secretmem_enable __ro_after_init = true;
 module_param_named(enable, secretmem_enable, bool, 0400);
 MODULE_PARM_DESC(secretmem_enable,
 		 "Enable secretmem and memfd_secret(2) system call");