Review Results

Comment

The change only narrows the test suite during check() by excluding OpenSSL's AF_ALG test (`make TESTS=-test_afalg test`). This is a build-time test adjustment motivated by a documented kernel/sysctl incompatibility and does not affect the packaged artifacts, install scripts, dependencies, or runtime behavior. No suspicious network access, privilege escalation, or persistence mechanisms are introduced. Risk is therefore very low.

@@ -225,7 +225,9 @@ check() {
 	# revert this patch for make test
 	patch -p0 -R -i "$srcdir/ca-dir.patch"
 
-	make test
+	# https://github.com/openssl/openssl/issues/12242
+	# https://docs.kernel.org/admin-guide/sysctl/crypto.html#af-alg-restrict
+	make TESTS=-test_afalg test
 
 	patch -p0 -i "$srcdir/ca-dir.patch"
 	# re-run make to re-generate CA.pl from th patched .in file.