summaryrefslogtreecommitdiffstats
path: root/0015-dracut.sh-do-not-strip-in-FIPS-mode.patch
diff options
context:
space:
mode:
authorHarald Hoyer <harald@redhat.com>2013-08-20 15:25:09 +0200
committerHarald Hoyer <harald@redhat.com>2013-08-20 15:25:09 +0200
commitb6aad2a9c88b5822b30c1686ce66dd31e2fb1a80 (patch)
treeed0d6ecdbdec525f596bcc3e53c1aede68162c99 /0015-dracut.sh-do-not-strip-in-FIPS-mode.patch
parentec64c91ce1db407933595f4299f6c4f01adcce0f (diff)
downloaddracut-b6aad2a9c88b5822b30c1686ce66dd31e2fb1a80.tar.gz
dracut-b6aad2a9c88b5822b30c1686ce66dd31e2fb1a80.tar.xz
dracut-b6aad2a9c88b5822b30c1686ce66dd31e2fb1a80.zip
dracut-032-1
- fix for kdump in FIPS mode Resolves: rhbz#920931 - fixed iBFT booting Resolves: rhbz#989944 - fixed FIPS mode initramfs creation Resolves: rhbz#990250 - shutdown: fixed killall_proc_mountpoint() Resolves: rhbz#996549 - disable lvmetad in the initramfs Resolves: rhbz#996627 - require dhclient
Diffstat (limited to '0015-dracut.sh-do-not-strip-in-FIPS-mode.patch')
-rw-r--r--0015-dracut.sh-do-not-strip-in-FIPS-mode.patch43
1 files changed, 0 insertions, 43 deletions
diff --git a/0015-dracut.sh-do-not-strip-in-FIPS-mode.patch b/0015-dracut.sh-do-not-strip-in-FIPS-mode.patch
deleted file mode 100644
index 32c4ca3..0000000
--- a/0015-dracut.sh-do-not-strip-in-FIPS-mode.patch
+++ /dev/null
@@ -1,43 +0,0 @@
-From 5ae33613ab3145db12f21bca491d97832160cc1a Mon Sep 17 00:00:00 2001
-From: Harald Hoyer <harald@redhat.com>
-Date: Tue, 6 Aug 2013 11:43:58 +0200
-Subject: [PATCH] dracut.sh: do not strip in FIPS mode
-
----
- dracut.sh | 22 ++++------------------
- 1 file changed, 4 insertions(+), 18 deletions(-)
-
-diff --git a/dracut.sh b/dracut.sh
-index e119bd2..4ef71f3 100755
---- a/dracut.sh
-+++ b/dracut.sh
-@@ -1209,25 +1209,11 @@ if [[ $do_strip = yes ]] ; then
- done
- fi
-
--if [[ $do_strip = yes ]] ; then
-+if [[ $do_strip = yes ]] && ! [[ $DRACUT_FIPS_MODE ]]; then
- dinfo "*** Stripping files ***"
-- if [[ $DRACUT_FIPS_MODE ]]; then
-- find "$initdir" -type f \
-- -executable -not -path '*/lib/modules/*.ko' -print0 \
-- | while read -r -d $'\0' f; do
-- if ! [[ -e "${f%/*}/.${f##*/}.hmac" ]] \
-- && ! [[ -e "/lib/hmaccalc/${f##*/}.hmac" ]] \
-- && ! [[ -e "/lib64/hmaccalc/${f##*/}.hmac" ]] \
-- && ! [[ -e "/lib/fipscheck/${f##*/}.hmac" ]] \
-- && ! [[ -e "/lib64/fipscheck/${f##*/}.hmac" ]]; then
-- printf "%s\000" "$f";
-- fi
-- done | xargs -r -0 strip -g 2>/dev/null
-- else
-- find "$initdir" -type f \
-- -executable -not -path '*/lib/modules/*.ko' -print0 \
-- | xargs -r -0 strip -g 2>/dev/null
-- fi
-+ find "$initdir" -type f \
-+ -executable -not -path '*/lib/modules/*.ko' -print0 \
-+ | xargs -r -0 strip -g 2>/dev/null
-
- # strip kernel modules, but do not touch signed modules
- find "$initdir" -type f -path '*/lib/modules/*.ko' -print0 \