1e057b352a
add PARTLABEL and PARTUUID
2013-07-05 15:32:38 +02:00
32bd2fbb4c
use "rm --" to guard against filenames beginning with "-"
2013-06-28 10:31:18 +02:00
26a077fc7e
fips: do not fail immediatly after loading the crypto modules
...
Fail only if tcrypt insmod failed.
2013-04-29 11:34:26 +02:00
6f4c2dada4
fixed fips mode
...
- preserve timestamps
- copy /lib*/hmaccalc files
- run sha512hmac after kernel module loading
- add more fips kernel modules
2013-04-25 19:44:01 +02:00
0fc0dcff60
bye bye iscsi_wait_scan ... officially gone for kernel 3.6
2012-09-18 13:39:54 +02:00
c9a9968dfc
fips: set /boot as symlink to /sysroot/boot if no boot= parameter
...
otherwise sha512hmac will error out with:
sha512hmac -c /sysroot/boot/.vmlinuz-2.6.32-220.el6.x86_64.hmac
Error opening "/boot/vmlinuz-2.6.32-220.el6.x86_64": No such file or directory.
2012-08-21 18:46:20 +02:00
4257798f8a
fips: forward port RHEL-6 fips changes
...
- also support FIPS on separate LVM partition
- use small settle loop to get /boot
- "set -e" has no effect, if we use "||"
- make fips work with encrypted root and seperate boot
- moved to pre-pivot to support /boot in /
2011-05-02 11:15:46 +02:00
d125a47061
mkdir always with -m 0755
2011-04-08 10:39:46 +02:00
02c1bd6bb6
fips: add "rd.fips.skipkernel" boot option
2011-04-08 10:27:32 +02:00
01583ae4ad
fips: fixed "boot=<dev>" handling
2011-03-30 14:57:01 +02:00
10b5dca0f7
fips/fips.sh: do not load tcrypt with "noexit" parameter
...
"noexit=1" is the default mode for the tcrypt module now.
[forward ported 7e7308158c9149c33309c0d36a6e1126e690fb58]
2011-03-07 13:37:20 +01:00
b60d5e90a5
fips/fips.sh: die(), if boot=<device> is not present or has wrong format
2011-03-07 13:37:19 +01:00
674bdee804
fips/fips.sh: only trigger udev, if device node of boot is not present
2011-03-07 13:37:19 +01:00
e2d86d001a
fips: s/==/=
2011-01-03 09:48:37 +01:00
cc02093d69
reformat source code
...
removed tabs and set indention to 4 spaces
added emacs and vi format headers
2010-09-10 15:34:36 +02:00
719cc30626
fips: udev trigger with action=add
2010-08-05 08:47:17 +02:00
c2bcc5be2f
fips: add shebang to fips.sh
2009-11-27 14:31:05 +01:00
03d8ec2601
add module fips
2009-11-12 14:59:28 +01:00
Harald Hoyer