You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
43 lines
1.2 KiB
43 lines
1.2 KiB
#!/bin/bash |
|
# -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*- |
|
# ex: ts=8 sw=4 sts=4 et filetype=sh |
|
|
|
check() { |
|
return 255 |
|
} |
|
|
|
depends() { |
|
return 0 |
|
} |
|
|
|
installkernel() { |
|
local _fipsmodules _mod |
|
_fipsmodules="aead aes_generic xts aes-x86_64 ansi_cprng cbc ccm chainiv ctr gcm ghash_generic" |
|
_fipsmodules+=" des deflate ecb eseqiv hmac seqiv sha256 sha256_generic sha512 sha512_generic" |
|
_fipsmodules+=" cryptomgr crypto_null tcrypt dm-mod dm-crypt" |
|
|
|
mkdir -m 0755 -p "${initdir}/etc/modprobe.d" |
|
|
|
for _mod in $_fipsmodules; do |
|
if hostonly='' instmods -c -s $_mod; then |
|
echo $_mod >> "${initdir}/etc/fipsmodules" |
|
echo "blacklist $_mod" >> "${initdir}/etc/modprobe.d/fips.conf" |
|
fi |
|
done |
|
} |
|
|
|
install() { |
|
local _dir |
|
inst_hook pre-trigger 01 "$moddir/fips-boot.sh" |
|
inst_hook pre-pivot 01 "$moddir/fips-noboot.sh" |
|
inst_script "$moddir/fips.sh" /sbin/fips.sh |
|
|
|
dracut_install sha512hmac rmmod insmod mount uname umount fipscheck |
|
|
|
inst_libdir_file libsoftokn3.so libsoftokn3.so \ |
|
libsoftokn3.chk libfreebl3.so libfreebl3.chk \ |
|
libssl.so 'hmaccalc/sha512hmac.hmac' |
|
|
|
dracut_install -o prelink |
|
} |
|
|
|
|