Attachment 606674 Details for Bug 851185 – Proposed patch to make fipscheck really work in initramfs

[patch] Proposed patch to make fipscheck really work in initramfs

0002-Require-fipscheck-and-libssl-in-FIPS-module.patch (text/plain), 1.21 KB, created by Milan Broz on 2012-08-23 17:59:20 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Milan Broz

Created: 2012-08-23 17:59:20 UTC

Size: 1.21 KB

patch

obsolete

>From 426ca25840bc71f200626c4ff3760b318e7616cb Mon Sep 17 00:00:00 2001
>From: Milan Broz <mbroz@redhat.com>
>Date: Thu, 23 Aug 2012 19:48:06 +0200
>Subject: [PATCH 2/2] Require fipscheck and libssl in FIPS module
>
>To properly perform verification in FIPS mode,
>we need to install fipscheck and libssl explicitly.
>
>(cryptsetup seems to be the first user of this verification in ramdisk...)
>
>Signed-off-by: Milan Broz <mbroz@redhat.com>
>---
> modules.d/01fips/module-setup.sh |    4 ++--
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
>diff --git a/modules.d/01fips/module-setup.sh b/modules.d/01fips/module-setup.sh
>index 2517964..103a479 100755
>--- a/modules.d/01fips/module-setup.sh
>+++ b/modules.d/01fips/module-setup.sh
>@@ -33,11 +33,11 @@ install() {
>     inst_hook pre-pivot 01 "$moddir/fips-noboot.sh"
>     inst_script "$moddir/fips.sh" /sbin/fips.sh
> 
>-    dracut_install sha512hmac rmmod insmod mount uname umount
>+    dracut_install sha512hmac rmmod insmod mount uname umount fipscheck
> 
>     inst_libdir_file libsoftokn3.so libsoftokn3.so \
>         libsoftokn3.chk libfreebl3.so libfreebl3.chk \
>-        'hmaccalc/sha512hmac.hmac'
>+        libssl.so 'hmaccalc/sha512hmac.hmac'
> 
>     dracut_install -o prelink
> }
>-- 
>1.7.10.4
>

Actions: View | Diff

Attachments on bug 851185: 606558 | 606673 | 606674