--- zzzz-none-000/linux-5.15.111/kernel/sysctl.c	2023-05-11 14:00:40.000000000 +0000
+++ puma7-arm-6670-761/linux-5.15.111/kernel/sysctl.c	2024-02-07 09:28:08.000000000 +0000
@@ -18,6 +18,10 @@
  * The list_for_each() macro wasn't appropriate for the sysctl loop.
  *  Removed it and replaced it with older style, 03/23/00, Bill Wendling
  */
+/*
+ * Includes Intel Corporation's changes dated: 2019.
+ * Changed portions - Copyright 2019, Intel Corporation.
+ */
 
 #include <linux/module.h>
 #include <linux/aio.h>
@@ -106,6 +110,10 @@
 #include <linux/nmi.h>
 #endif
 
+#ifdef CONFIG_INTEL_MOUNT_EXEC_DISABLED
+extern int mount_exec_disabled;
+#endif
+
 #if defined(CONFIG_SYSCTL)
 
 /* Constants used for minimum and  maximum */
@@ -2124,6 +2132,18 @@
 		.extra2		= SYSCTL_ONE,
 	},
 #endif
+#ifdef CONFIG_INTEL_MOUNT_EXEC_DISABLED
+	{
+		.procname       = "mount_exec_disabled",
+		.data           = &mount_exec_disabled,
+		.maxlen         = sizeof(int),
+		.mode           = 0644,
+		/* only handle a transition from default "0" to "1" */
+		.proc_handler   = proc_dointvec_minmax,
+		.extra1         = SYSCTL_ONE,
+		.extra2         = SYSCTL_ONE,
+	},
+#endif
 #ifdef CONFIG_UEVENT_HELPER
 	{
 		.procname	= "hotplug",