967cc19ab1
remove all vim and emacs code format comments
2014-08-29 13:38:47 +02:00
928da57447
fips: fix RHEV vmlinuz check
2013-12-03 16:21:04 +01:00
4d7c18c7c0
Handle crypto modules with and without modaliases
...
If new kernels have modules split out, handle the case, where modules
have to modalias and just install them.
Also add the crypto drivers and names to host_modalias.
2013-10-30 12:24:37 +01:00
190047f161
fips: handle checksum checks for RHEV kernels
...
https://bugzilla.redhat.com/show_bug.cgi?id=947729
2013-07-31 11:31:13 +02:00
748867d177
fips: cope with module aliases, when checking modules
...
Also do not fail, if module aliases try to load CPU specific modules
like crc32c_intel.
2013-07-31 11:26:46 +02:00
1e057b352a
add PARTLABEL and PARTUUID
2013-07-05 15:32:38 +02:00
32bd2fbb4c
use "rm --" to guard against filenames beginning with "-"
2013-06-28 10:31:18 +02:00
26a077fc7e
fips: do not fail immediatly after loading the crypto modules
...
Fail only if tcrypt insmod failed.
2013-04-29 11:34:26 +02:00
6f4c2dada4
fixed fips mode
...
- preserve timestamps
- copy /lib*/hmaccalc files
- run sha512hmac after kernel module loading
- add more fips kernel modules
2013-04-25 19:44:01 +02:00
0fc0dcff60
bye bye iscsi_wait_scan ... officially gone for kernel 3.6
2012-09-18 13:39:54 +02:00
c9a9968dfc
fips: set /boot as symlink to /sysroot/boot if no boot= parameter
...
otherwise sha512hmac will error out with:
sha512hmac -c /sysroot/boot/.vmlinuz-2.6.32-220.el6.x86_64.hmac
Error opening "/boot/vmlinuz-2.6.32-220.el6.x86_64": No such file or directory.
2012-08-21 18:46:20 +02:00
4257798f8a
fips: forward port RHEL-6 fips changes
...
- also support FIPS on separate LVM partition
- use small settle loop to get /boot
- "set -e" has no effect, if we use "||"
- make fips work with encrypted root and seperate boot
- moved to pre-pivot to support /boot in /
2011-05-02 11:15:46 +02:00
d125a47061
mkdir always with -m 0755
2011-04-08 10:39:46 +02:00
02c1bd6bb6
fips: add "rd.fips.skipkernel" boot option
2011-04-08 10:27:32 +02:00
01583ae4ad
fips: fixed "boot=<dev>" handling
2011-03-30 14:57:01 +02:00
10b5dca0f7
fips/fips.sh: do not load tcrypt with "noexit" parameter
...
"noexit=1" is the default mode for the tcrypt module now.
[forward ported 7e7308158c9149c33309c0d36a6e1126e690fb58]
2011-03-07 13:37:20 +01:00
b60d5e90a5
fips/fips.sh: die(), if boot=<device> is not present or has wrong format
2011-03-07 13:37:19 +01:00
674bdee804
fips/fips.sh: only trigger udev, if device node of boot is not present
2011-03-07 13:37:19 +01:00
e2d86d001a
fips: s/==/=
2011-01-03 09:48:37 +01:00
cc02093d69
reformat source code
...
removed tabs and set indention to 4 spaces
added emacs and vi format headers
2010-09-10 15:34:36 +02:00
719cc30626
fips: udev trigger with action=add
2010-08-05 08:47:17 +02:00
c2bcc5be2f
fips: add shebang to fips.sh
2009-11-27 14:31:05 +01:00
03d8ec2601
add module fips
2009-11-12 14:59:28 +01:00
Harald Hoyer