Re: [rhel6-branch] Add libraries needed for fips mode to initrd on s390 (#692825)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Martin, I applied this to rhel6-branch so I could do a build before the
latest compose starts.

Martin Gracik <mgracik@xxxxxxxxxx> wrote:

> sshd is started before we get the stage2 on s390, so we need
> to have these libraries in the initrd to get the sshd working
> in fips mode.
> ---
>  scripts/mk-images |    6 ++++++
>  1 files changed, 6 insertions(+), 0 deletions(-)
>
> diff --git a/scripts/mk-images b/scripts/mk-images
> index 850d802..80ed24a 100755
> --- a/scripts/mk-images
> +++ b/scripts/mk-images
> @@ -656,6 +656,12 @@ makeinitrd() {
>                     lsreipl lsdasd dasdview dasdinfo lszfcp ; do
>              instbin $IMGPATH /usr/sbin/$cmd $MBD_DIR /sbin/$cmd
>          done
> +
> +        # libraries required for ssh in fips mode
> +        cp $IMGPATH/usr/$LIBDIR/.libcrypto.so.* $MBD_DIR/usr/$LIBDIR
> +        cp $IMGPATH/usr/$LIBDIR/.libssl.so.* $MBD_DIR/usr/$LIBDIR
> +        cp $IMGPATH/usr/$LIBDIR/libcrypto.so.* $MBD_DIR/usr/$LIBDIR
> +        cp $IMGPATH/usr/$LIBDIR/libssl.so.* $MBD_DIR/usr/$LIBDIR
>      fi
>  
>      if [ -n "$INITRDMODULES" ]; then
> -- 
> 1.7.3.2
>
> _______________________________________________
> Anaconda-devel-list mailing list
> Anaconda-devel-list@xxxxxxxxxx
> https://www.redhat.com/mailman/listinfo/anaconda-devel-list

-- 
David Cantrell <dcantrell@xxxxxxxxxx>
Supervisor, Installer Engineering Team
Red Hat, Inc. | Honolulu, HI | UTC-10

_______________________________________________
Anaconda-devel-list mailing list
Anaconda-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/anaconda-devel-list


[Index of Archives]     [Kickstart]     [Fedora Users]     [Fedora Legacy List]     [Fedora Maintainers]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]
  Powered by Linux