--- zzzz-none-000/linux-4.9.279/kernel/sysctl.c	2021-08-08 06:38:54.000000000 +0000
+++ puma7-atom-6591-750/linux-4.9.279/kernel/sysctl.c	2023-02-08 11:43:43.000000000 +0000
@@ -17,6 +17,10 @@
  * The list_for_each() macro wasn't appropriate for the sysctl loop.
  *  Removed it and replaced it with older style, 03/23/00, Bill Wendling
  */
+/*
+ * Includes Intel Corporation's changes dated: 2019.
+ * Changed portions - Copyright 2019, Intel Corporation.
+ */
 
 #include <linux/module.h>
 #include <linux/aio.h>
@@ -95,6 +99,10 @@
 #include <linux/nmi.h>
 #endif
 
+#ifdef CONFIG_INTEL_MOUNT_EXEC_DISABLED
+extern int mount_exec_disabled;
+#endif
+
 #if defined(CONFIG_SYSCTL)
 
 /* External variables not in a header file. */
@@ -666,6 +674,18 @@
 		.maxlen		= sizeof(int),
 		.mode		= 0644,
 		/* only handle a transition from default "0" to "1" */
+		.proc_handler	= proc_dointvec_minmax,
+		.extra1		= &one,
+		.extra2		= &one,
+	},
+#endif
+#ifdef CONFIG_INTEL_MOUNT_EXEC_DISABLED
+	{
+		.procname	= "mount_exec_disabled",
+		.data		= &mount_exec_disabled,
+		.maxlen		= sizeof(int),
+		.mode		= 0644,
+		/* only handle a transition from default "0" to "1" */
 		.proc_handler	= proc_dointvec_minmax,
 		.extra1		= &one,
 		.extra2		= &one,