Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 639483 Details for
Bug 873796
dracut is stripping off kernel module signatures
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
Don't strip kernel modules in the initramfs
0001-Don-t-strip-kernel-modules-in-the-initramfs.patch (text/plain), 4.04 KB, created by
Josh Boyer
on 2012-11-06 18:11:04 UTC
(
hide
)
Description:
Don't strip kernel modules in the initramfs
Filename:
MIME Type:
Creator:
Josh Boyer
Created:
2012-11-06 18:11:04 UTC
Size:
4.04 KB
patch
obsolete
>From db1f9a695cb40b286600482e02ab340b995082ee Mon Sep 17 00:00:00 2001 >From: Josh Boyer <jwboyer@redhat.com> >Date: Tue, 6 Nov 2012 13:07:01 -0500 >Subject: [PATCH] Don't strip kernel modules in the initramfs > >--- > 0005-Add-kmod-strip-option.patch | 59 ++++++++++++++++++++++++++++++++++++++++ > dracut.spec | 6 +++- > 2 files changed, 64 insertions(+), 1 deletion(-) > create mode 100644 0005-Add-kmod-strip-option.patch > >diff --git a/0005-Add-kmod-strip-option.patch b/0005-Add-kmod-strip-option.patch >new file mode 100644 >index 0000000..25ad868 >--- /dev/null >+++ b/0005-Add-kmod-strip-option.patch >@@ -0,0 +1,59 @@ >+From a3cd7a5d62477ba9db4e82dea99ba8f9b4e1d505 Mon Sep 17 00:00:00 2001 >+From: Josh Boyer <jwboyer@redhat.com> >+Date: Tue, 6 Nov 2012 12:29:09 -0500 >+Subject: [PATCH] Add --kmod-strip option >+ >+With the inclusion of signed modules in the upstream kernel, we need to >+tell dracut whether or not to strip the modules when building the initramfs. >+The strip utility will strip the signatures off of the modules, causing >+either a 'forced' module insertion or failure to load depending on the >+kernel's signed module settings. >+ >+This adds a separate option for stripping the kernel modules. It defaults >+to disabled, as most distributions already strip the modules optimally >+before installing them. >+--- >+ dracut.sh | 6 +++++- >+ 1 file changed, 5 insertions(+), 1 deletion(-) >+ >+diff --git a/dracut.sh b/dracut.sh >+index e463404..1a79ed2 100755 >+--- a/dracut.sh >++++ b/dracut.sh >+@@ -92,6 +92,7 @@ Creates initial ramdisk images for preloading modules >+ --kernel-cmdline [PARAMETERS] Specify default kernel command line parameters >+ --strip Strip binaries in the initramfs (default) >+ --nostrip Do not strip binaries in the initramfs >++ --kmod-strip Strip kernel modules in the initramfs >+ --hardlink Hardlink files in the initramfs (default) >+ --nohardlink Do not hardlink files in the initramfs >+ --prefix [DIR] Prefix initramfs files with [DIR] >+@@ -347,6 +348,7 @@ while :; do >+ --no-kernel) kernel_only="no"; no_kernel="yes";; >+ --strip) do_strip_l="yes";; >+ --nostrip) do_strip_l="no";; >++ --kmod-strip) do_kmod_strip_l="yes";; >+ --hardlink) do_hardlink_l="yes";; >+ --nohardlink) do_hardlink_l="no";; >+ --noprefix) prefix_l="/";; >+@@ -552,6 +554,8 @@ stdloglvl=$((stdloglvl + verbosity_mod_l)) >+ [[ $drivers_dir_l ]] && drivers_dir=$drivers_dir_l >+ [[ $do_strip_l ]] && do_strip=$do_strip_l >+ [[ $do_strip ]] || do_strip=yes >++[[ $do_kmod_strip_l ]] && do_kmod_strip=$do_kmod_strip_l >++[[ $do_kmod_strip ]] || do_kmod_strip=no >+ [[ $do_hardlink_l ]] && do_hardlink=$do_hardlink_l >+ [[ $do_hardlink ]] || do_hardlink=yes >+ [[ $prefix_l ]] && prefix=$prefix_l >+@@ -1037,7 +1041,7 @@ if [[ $do_strip = yes ]] ; then >+ done >+ fi >+ >+-if [[ $do_strip = yes ]] ; then >++if [[ $do_kmod_strip = yes ]] ; then >+ dinfo "*** Stripping files ***" >+ if [[ $DRACUT_FIPS_MODE ]]; then >+ find "$initdir" -type f \ >+-- >+1.7.12.1 >+ >diff --git a/dracut.spec b/dracut.spec >index 7354cc7..c9050e7 100644 >--- a/dracut.spec >+++ b/dracut.spec >@@ -10,7 +10,7 @@ > > Name: dracut > Version: 024 >-Release: 5.git20121019%{?dist} >+Release: 6.git20121019%{?dist} > > Summary: Initramfs generator using udev > %if 0%{?fedora} || 0%{?rhel} >@@ -33,6 +33,7 @@ Patch1: 0001-dracut.sh-only-save-kernel_cmdline-if-set.patch > Patch2: 0002-dracut.conf.d-fedora.conf.example-s-kernelcmdline-ke.patch > Patch3: 0003-40network-ifup.sh-do_static-and-do_ipv6auto-return-0.patch > Patch4: 0004-dracut.sh-only-warn-not-error-if-we-don-t-strip.patch >+Patch5: 0005-Add-kmod-strip-option.patch > > > BuildRequires: dash bash git >@@ -366,6 +367,9 @@ rm -rf $RPM_BUILD_ROOT > %dir /var/lib/dracut/overlay > > %changelog >+* Tue Nov 06 2012 Josh Boyer <jwboyer@redhat.com> 024-6.git20121019 >+- Don't strip kernel modules in the initramfs >+ > * Fri Oct 19 2012 Harald Hoyer <harald@redhat.com> 024-5.git20121019 > - only 'warn' not 'error', if we don't strip the initramfs > >-- >1.7.12.1 >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 873796
: 639483 |
649483