From: Prarit Bhargava <pra...@redhat.com>
crypto: fips - make RHEL proc files report fips module name and version
FIPS 140-3 introduced a requirement for the FIPS module to return
information about itself, specifically a name and a version. These
values must match the values reported on FIPS certificates.
Signed-off-by: Simo Sorce <s...@redhat.com>
Signed-off-by: Vladis Dronov <vdro...@redhat.com>
Signed-off-by: Prarit Bhargava <pra...@redhat.com>
diff --git a/redhat/kernel.spec.template b/redhat/kernel.spec.template
index blahblah..blahblah 100755
--- a/redhat/kernel.spec.template
+++ b/redhat/kernel.spec.template
@@ -1522,6 +1522,13 @@ done
%endif
%endif
+# Adjust FIPS module name for RHEL
+%if 0%{?rhel}
+for i in *.config; do
+ sed -i 's/CONFIG_CRYPTO_FIPS_NAME=.*/CONFIG_CRYPTO_FIPS_NAME="Red Hat
Enterprise Linux %{rhel} - Kernel Cryptographic API"/' $i
+done
+%endif
+
cp %{SOURCE81} .
OPTS=""
%if %{with_configchecks}
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2021
_______________________________________________
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
