Fix fips module list.
If dracut is build only with fips/fips-aesni (no crypto module), FIPS mode fails because of missing GCM modules. Just add proper modules to list (kernel have both maker as FIPS compliant already). Signed-off-by: Milan Broz <mbroz@redhat.com>master
parent
0f283709c9
commit
4ee59ab3ed
|
|
@ -12,7 +12,7 @@ depends() {
|
|||
|
||||
installkernel() {
|
||||
local _fipsmodules _mod
|
||||
_fipsmodules="aead aes_generic xts aes-x86_64 ansi_cprng cbc ccm chainiv ctr"
|
||||
_fipsmodules="aead aes_generic xts aes-x86_64 ansi_cprng cbc ccm chainiv ctr gcm ghash_generic"
|
||||
_fipsmodules+=" des deflate ecb eseqiv hmac seqiv sha256 sha256_generic sha512 sha512_generic"
|
||||
_fipsmodules+=" cryptomgr crypto_null tcrypt dm-mod dm-crypt"
|
||||
|
||||
|
|
|
|||
|
|
@ -12,7 +12,7 @@ depends() {
|
|||
|
||||
installkernel() {
|
||||
local _fipsmodules _mod
|
||||
_fipsmodules="aesni-intel"
|
||||
_fipsmodules="aesni-intel ghash_clmulni_intel"
|
||||
|
||||
mkdir -m 0755 -p "${initdir}/etc/modprobe.d"
|
||||
|
||||
|
|
|
|||
Loading…
Reference in New Issue