[OS-BUILD PATCHv3 1/2] Embed crypto algos, modes and templates needed in the FIPS mode

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



From: Vladis Dronov <vdronov@xxxxxxxxxx>

Embed crypto algos, modes and templates needed in the FIPS mode

Currently a number of FIPS-allowed algorithms are built as modules or are
not enabled in Fedora and ARK. This can result in a panic while booting
in the FIPS mode. Fix this by embedding the FIPS-allowed algorithms, modes
and templates into a kernel, the same way as CTC, CBC and other algorithms
already do.

Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1947240
Signed-off-by: Vladis Dronov <vdronov@xxxxxxxxxx>

diff a/redhat/configs/ark/generic/CONFIG_CRYPTO_XTS b/redhat/configs/ark/generic/CONFIG_CRYPTO_XTS
--- a/redhat/configs/ark/generic/CONFIG_CRYPTO_XTS
+++ /dev/null
@@ -1 +0,0 @@
-CONFIG_CRYPTO_XTS=m
diff a/redhat/configs/common/generic/CONFIG_CRYPTO_AUTHENC b/redhat/configs/common/generic/CONFIG_CRYPTO_AUTHENC
--- a/redhat/configs/common/generic/CONFIG_CRYPTO_AUTHENC
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_AUTHENC
@@ -1 +1 @@
-CONFIG_CRYPTO_AUTHENC=m
+CONFIG_CRYPTO_AUTHENC=y
diff a/redhat/configs/common/generic/CONFIG_CRYPTO_CCM b/redhat/configs/common/generic/CONFIG_CRYPTO_CCM
--- a/redhat/configs/common/generic/CONFIG_CRYPTO_CCM
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_CCM
@@ -1 +1 @@
-CONFIG_CRYPTO_CCM=m
+CONFIG_CRYPTO_CCM=y
diff a/redhat/configs/common/generic/CONFIG_CRYPTO_CMAC b/redhat/configs/common/generic/CONFIG_CRYPTO_CMAC
--- a/redhat/configs/common/generic/CONFIG_CRYPTO_CMAC
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_CMAC
@@ -1 +1 @@
-CONFIG_CRYPTO_CMAC=m
+CONFIG_CRYPTO_CMAC=y
diff a/redhat/configs/fedora/generic/CONFIG_CRYPTO_NULL b/redhat/configs/common/generic/CONFIG_CRYPTO_NULL
--- a/redhat/configs/fedora/generic/CONFIG_CRYPTO_NULL
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_NULL
diff a/redhat/configs/common/generic/CONFIG_CRYPTO_OFB b/redhat/configs/common/generic/CONFIG_CRYPTO_OFB
--- a/redhat/configs/common/generic/CONFIG_CRYPTO_OFB
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_OFB
@@ -1 +1 @@
-CONFIG_CRYPTO_OFB=m
+CONFIG_CRYPTO_OFB=y
diff a/redhat/configs/fedora/generic/CONFIG_CRYPTO_RSA b/redhat/configs/common/generic/CONFIG_CRYPTO_RSA
--- a/redhat/configs/fedora/generic/CONFIG_CRYPTO_RSA
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_RSA
diff a/redhat/configs/common/generic/CONFIG_CRYPTO_SHA3 b/redhat/configs/common/generic/CONFIG_CRYPTO_SHA3
--- a/redhat/configs/common/generic/CONFIG_CRYPTO_SHA3
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_SHA3
@@ -1 +1 @@
-CONFIG_CRYPTO_SHA3=m
+CONFIG_CRYPTO_SHA3=y
diff a/redhat/configs/fedora/generic/CONFIG_CRYPTO_XTS b/redhat/configs/common/generic/CONFIG_CRYPTO_XTS
--- a/redhat/configs/fedora/generic/CONFIG_CRYPTO_XTS
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_XTS

--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1125
_______________________________________________
kernel mailing list -- kernel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to kernel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/kernel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure




[Index of Archives]     [Fedora General Discussion]     [Older Fedora Users Archive]     [Fedora Advisory Board]     [Fedora Security]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Mentors]     [Fedora Package Announce]     [Fedora Package Review]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Coolkey]     [Yum Users]     [Tux]     [Yosemite News]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [USB]     [Asterisk PBX]

  Powered by Linux