summaryrefslogtreecommitdiffstats
path: root/appliance/make.sh.in
diff options
context:
space:
mode:
authorRichard W.M. Jones <rjones@redhat.com>2010-11-18 15:32:05 +0000
committerRichard W.M. Jones <rjones@redhat.com>2010-11-18 15:32:05 +0000
commit16e39ac0b8583c60fb1bc3378483b91886ed6f85 (patch)
tree9eb2310137198abe6ec3d7419f5d877247c65b7b /appliance/make.sh.in
parente1ad5afaea3f6a3d3ca4131c259b76792b150d2e (diff)
downloadlibguestfs-16e39ac0b8583c60fb1bc3378483b91886ed6f85.tar.gz
libguestfs-16e39ac0b8583c60fb1bc3378483b91886ed6f85.tar.xz
libguestfs-16e39ac0b8583c60fb1bc3378483b91886ed6f85.zip
Remove FIPS .*.hmac files from the supermin appliance (RHBZ#654638).
Diffstat (limited to 'appliance/make.sh.in')
-rwxr-xr-xappliance/make.sh.in5
1 files changed, 5 insertions, 0 deletions
diff --git a/appliance/make.sh.in b/appliance/make.sh.in
index 36bcd6c9..64bcb5a4 100755
--- a/appliance/make.sh.in
+++ b/appliance/make.sh.in
@@ -128,6 +128,11 @@ if [ "@DIST@" = "REDHAT" ]; then
/var/log/yum.log \
$(cd initramfs && echo usr/sbin/glibc_post_upgrade.*)
+ # Remove all .*.hmac files (RHBZ#654638). These are not used unless
+ # you are using FIPS, and they cause hard dependencies on files
+ # which change whenever a library version is bumped.
+ @FEBOOTSTRAP_RUN@ initramfs -- rm -f $(cd initramfs && find -name '.*.hmac')
+
# Kernel modules take up nearly half of the image. Only include ones
# which are on the whitelist.
exec 5<appliance/kmod.whitelist