On Sat, Oct 17, 2026 at 02:32:08PM +0000, [email protected] wrote: >[Severity: Low] >Does this new exported variable also need to be added to the SPDX SBOM >environment allowlist? > >Currently, KBUILD_USERCFLAGS and KBUILD_USERLDFLAGS are explicitly tracked >in KERNEL_BUILD_VARIABLES_ALLOWLIST in scripts/sbom/sbom/environment.py: [...] >Leaving KBUILD_USERABI off this list means its value will not be captured >in the SPDX SBOM generated by scripts/sbom, resulting in incomplete build >metadata documentation for the userspace ABI configuration.
KBUILD_USERABI is appended to both KBUILD_USERCFLAGS and KBUILD_USERLDFLAGS, which are on that list, so its flags are already in the SBOM. Listing it as well would only record the same flags again. -- Thanks, Sasha
