From: Herton R. Krzesinski <herton@xxxxxxxxxx>
rpmspec: revert/drop content hash for kernel-headers
This was a change done in the RHEL 8 kernel package, with the purpose
of providing means to other tools to determine if the kernel-headers
changed between package updates. For example, linux containers that
only install kernel-headers would not be flagged for the need of CVE
updates if kernel-headers didn't change, in case of kernel CVEs that
didn't affect the headers.
But this content hash ended up never being used and AFAIK there
were no users. The need to avoid kernel CVEs flagging containers needing
updates only because of kernel-headers installed but not affected,
was handled through changes made in Red Hat's errata tool, and the
content hash here has no use anymore.
Signed-off-by: Herton R. Krzesinski <herton@xxxxxxxxxx>
diff a/redhat/kernel.spec.template b/redhat/kernel.spec.template
--- a/redhat/kernel.spec.template
+++ b/redhat/kernel.spec.template
@@ -2385,18 +2385,6 @@ find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/
popd
%endif
-# We have to do the headers checksum calculation after the tools install because
-# these might end up installing their own set of headers on top of kernel's
-%if %{with_headers}
-# compute a content hash to export as Provides: kernel-headers-checksum
-HEADERS_CHKSUM=$(export LC_ALL=C; find $RPM_BUILD_ROOT/usr/include -type f -name "*.h" \
- ! -path $RPM_BUILD_ROOT/usr/include/linux/version.h | \
- sort | xargs cat | sha1sum - | cut -f 1 -d ' ');
-# export the checksum via usr/include/linux/version.h, so the dynamic
-# find-provides can grab the hash to update it accordingly
-echo "#define KERNEL_HEADERS_CHECKSUM \"$HEADERS_CHKSUM\"" >> $RPM_BUILD_ROOT/usr/include/linux/version.h
-%endif
-
###
### clean
###
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1135
_______________________________________________
kernel mailing list -- kernel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to kernel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/kernel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
