Daniel Molkentin
d00cfc2a7b
Remove obsolete prelinking functionality
7 years ago
Ondrej Mosnacek
935dd5746a
fips: add sha3_generic and sm3_generic modules
...
SHA-3 and SM3 have been added to the tcrypt module recently, so without
them the 'modprobe tcrypt' step causes a kernel panic.
7 years ago
Lukas Nykryn
0a50111ab3
01fips: add authenec module
...
Resolves : #1465946
8 years ago
Lukas Nykryn
63c7b358f5
fips: add cmac kernel module
...
cmac is now marked as fips_allowed
Resolves: rhbz#1460865
8 years ago
Harald Hoyer
7c29d205f4
fips: use /lib/modules/$(uname -r)/modules.fips
...
if /lib/modules/$(uname -r)/modules.fips exists, use that list instead
of the hardcoded dracut module list.
8 years ago
Harald Hoyer
1d832b4bf4
fips: precreate /dev/random /dev/urandom
...
otherwise libgcrypt might be unhappy, if used before devtmpfs is mounted
https://bugzilla.redhat.com/show_bug.cgi?id=1401444
8 years ago
Lukas Nykryn
1c132d39a6
fips-module: add missing space
9 years ago
Harald Hoyer
c97209fe69
fips: add authenc and authencesn kernel modules
...
https://bugzilla.redhat.com/show_bug.cgi?id=1115112#c5
9 years ago
Harald Hoyer
822a7ae504
fips: add some s390 kernel modules
10 years ago
Harald Hoyer
7e9341434f
fips: add drbg kernel module
10 years ago
Harald Hoyer
4089949033
fips: remove c&p "and"
10 years ago
Harald Hoyer
3659d64df3
fips: add libfreeblpriv3.so and libfreeblpriv3.chk
10 years ago
Harald Hoyer
967cc19ab1
remove all vim and emacs code format comments
11 years ago
Harald Hoyer
185e940e27
fips: also install /etc/system-fips in the initramfs
11 years ago
Kyle McMartin
0a8e91bb24
fips: include crct10dif_generic
...
Resolves: rhbz#1024455
11 years ago
Harald Hoyer
8bcfd683bd
*/module-setup.sh: add comments for dracut called functions
12 years ago
Harald Hoyer
af11946054
dracut-functions.sh: inst_multiple == dracut_install
12 years ago
Baoquan He
15b93069bb
01fips/module-setup.sh: add libssl.so.10 to make kdump work with fips mode
...
FIPS can work well in 1st kernel, but failed in kdump kernel. the
libssl.so.10 and related hmac file are needed. Now add it and it
works.
Signed-off-by: Baoquan He <bhe@redhat.com>
12 years ago
Harald Hoyer
6f4c2dada4
fixed fips mode
...
- preserve timestamps
- copy /lib*/hmaccalc files
- run sha512hmac after kernel module loading
- add more fips kernel modules
12 years ago
Harald Hoyer
1161f03777
fips: add lzo module
12 years ago
Harald Hoyer
0fc0dcff60
bye bye iscsi_wait_scan ... officially gone for kernel 3.6
13 years ago
Milan Broz
104727ad6e
Require fipscheck and libssl in FIPS module
...
To properly perform verification in FIPS mode,
we need to install fipscheck and libssl explicitly.
(cryptsetup seems to be the first user of this verification in ramdisk...)
Signed-off-by: Milan Broz <mbroz@redhat.com>
13 years ago
Milan Broz
4ee59ab3ed
Fix fips module list.
...
If dracut is build only with fips/fips-aesni (no crypto module),
FIPS mode fails because of missing GCM modules.
Just add proper modules to list (kernel have both maker as FIPS compliant already).
Signed-off-by: Milan Broz <mbroz@redhat.com>
13 years ago
Harald Hoyer
338b43cd6a
fips: add instmods silent check mode "-c -s"
13 years ago
Harald Hoyer
0251fcd400
fips: change module list
13 years ago
Harald Hoyer
0d339e7ffb
fips/module-setup.sh: s/aes-xts/xts
13 years ago
Harald Hoyer
53fe81e752
modules.d/*/module-setup.sh: combine and specify type for installs
...
To speedup image creation, combine dracut_install calls and specify the exact type.
E.g. inst_script instead of the generic inst.
13 years ago
Harald Hoyer
d77540c8e4
get rid of libdir and usrlibdir
13 years ago
Harald Hoyer
51153fb18c
removed scsi_wait_scan from standard install
13 years ago
Jon Ander Hernandez
c9143a63fe
Debian multiarch support
...
Another solution could be searching in directories found at
/etc/ld.so.conf.d/*.conf or adding a new parameter. Here is a patch
which adds a new --libdirs parameter, and also a new inst_libdir_file
function which will try to expand metacharacters on each lib
directory:
inst_libdir_file "libdevmapper-event-lvm*.so"
13 years ago
Harald Hoyer
078acb598b
fips: fixed aes_generic module typo
13 years ago
Harald Hoyer
814fa9a58f
01fips/installkernel: add dm-mod and dm-crypt to the fipsmodules
...
https://bugzilla.redhat.com/show_bug.cgi?id=707609
14 years ago
Harald Hoyer
29b10e65b1
dracut-functions: make local vars local and prefix with "_"
14 years ago
Harald Hoyer
3b403b32fc
removed trailing whitespaces
14 years ago
Harald Hoyer
4257798f8a
fips: forward port RHEL-6 fips changes
...
- also support FIPS on separate LVM partition
- use small settle loop to get /boot
- "set -e" has no effect, if we use "||"
- make fips work with encrypted root and seperate boot
- moved to pre-pivot to support /boot in /
14 years ago
Harald Hoyer
d125a47061
mkdir always with -m 0755
14 years ago
Harald Hoyer
71df3c4329
renamed module-info.sh to module-setup.sh
14 years ago
Harald Hoyer
e6752f1a6c
fips: add aes-xts module
14 years ago
Harald Hoyer
95d2dabc25
replaced check,install,installkernel with module-info.sh
14 years ago