diff options
| author | Richard W.M. Jones <rjones@redhat.com> | 2010-11-18 15:32:05 +0000 |
|---|---|---|
| committer | Richard W.M. Jones <rjones@redhat.com> | 2010-11-18 15:32:05 +0000 |
| commit | 16e39ac0b8583c60fb1bc3378483b91886ed6f85 (patch) | |
| tree | 9eb2310137198abe6ec3d7419f5d877247c65b7b | |
| parent | e1ad5afaea3f6a3d3ca4131c259b76792b150d2e (diff) | |
| download | libguestfs-16e39ac0b8583c60fb1bc3378483b91886ed6f85.tar.gz libguestfs-16e39ac0b8583c60fb1bc3378483b91886ed6f85.tar.xz libguestfs-16e39ac0b8583c60fb1bc3378483b91886ed6f85.zip | |
Remove FIPS .*.hmac files from the supermin appliance (RHBZ#654638).
| -rwxr-xr-x | appliance/make.sh.in | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/appliance/make.sh.in b/appliance/make.sh.in index 36bcd6c9..64bcb5a4 100755 --- a/appliance/make.sh.in +++ b/appliance/make.sh.in @@ -128,6 +128,11 @@ if [ "@DIST@" = "REDHAT" ]; then /var/log/yum.log \ $(cd initramfs && echo usr/sbin/glibc_post_upgrade.*) + # Remove all .*.hmac files (RHBZ#654638). These are not used unless + # you are using FIPS, and they cause hard dependencies on files + # which change whenever a library version is bumped. + @FEBOOTSTRAP_RUN@ initramfs -- rm -f $(cd initramfs && find -name '.*.hmac') + # Kernel modules take up nearly half of the image. Only include ones # which are on the whitelist. exec 5<appliance/kmod.whitelist |