From: Vladis Dronov <vdro...@redhat.com> Embed crypto algos, modes and templates needed in the FIPS mode
Currently a number of FIPS-allowed algorithms are built as modules or are not enabled in Fedora and ARK. This can result in a panic while booting in the FIPS mode. Fix this by embedding the FIPS-allowed algorithms, modes and templates into a kernel, the same way as CTC, CBC and other algorithms already do. Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1947240 Signed-off-by: Vladis Dronov <vdro...@redhat.com> diff a/redhat/configs/ark/generic/CONFIG_CRYPTO_XTS b/redhat/configs/ark/generic/CONFIG_CRYPTO_XTS --- a/redhat/configs/ark/generic/CONFIG_CRYPTO_XTS +++ /dev/null @@ -1 +0,0 @@ -CONFIG_CRYPTO_XTS=m diff a/redhat/configs/common/generic/CONFIG_CRYPTO_AUTHENC b/redhat/configs/common/generic/CONFIG_CRYPTO_AUTHENC --- a/redhat/configs/common/generic/CONFIG_CRYPTO_AUTHENC +++ b/redhat/configs/common/generic/CONFIG_CRYPTO_AUTHENC @@ -1 +1 @@ -CONFIG_CRYPTO_AUTHENC=m +CONFIG_CRYPTO_AUTHENC=y diff a/redhat/configs/common/generic/CONFIG_CRYPTO_CCM b/redhat/configs/common/generic/CONFIG_CRYPTO_CCM --- a/redhat/configs/common/generic/CONFIG_CRYPTO_CCM +++ b/redhat/configs/common/generic/CONFIG_CRYPTO_CCM @@ -1 +1 @@ -CONFIG_CRYPTO_CCM=m +CONFIG_CRYPTO_CCM=y diff a/redhat/configs/common/generic/CONFIG_CRYPTO_CMAC b/redhat/configs/common/generic/CONFIG_CRYPTO_CMAC --- a/redhat/configs/common/generic/CONFIG_CRYPTO_CMAC +++ b/redhat/configs/common/generic/CONFIG_CRYPTO_CMAC @@ -1 +1 @@ -CONFIG_CRYPTO_CMAC=m +CONFIG_CRYPTO_CMAC=y diff a/redhat/configs/fedora/generic/CONFIG_CRYPTO_NULL b/redhat/configs/common/generic/CONFIG_CRYPTO_NULL --- a/redhat/configs/fedora/generic/CONFIG_CRYPTO_NULL +++ b/redhat/configs/common/generic/CONFIG_CRYPTO_NULL diff a/redhat/configs/common/generic/CONFIG_CRYPTO_OFB b/redhat/configs/common/generic/CONFIG_CRYPTO_OFB --- a/redhat/configs/common/generic/CONFIG_CRYPTO_OFB +++ b/redhat/configs/common/generic/CONFIG_CRYPTO_OFB @@ -1 +1 @@ -CONFIG_CRYPTO_OFB=m +CONFIG_CRYPTO_OFB=y diff a/redhat/configs/fedora/generic/CONFIG_CRYPTO_RSA b/redhat/configs/common/generic/CONFIG_CRYPTO_RSA --- a/redhat/configs/fedora/generic/CONFIG_CRYPTO_RSA +++ b/redhat/configs/common/generic/CONFIG_CRYPTO_RSA diff a/redhat/configs/common/generic/CONFIG_CRYPTO_SHA3 b/redhat/configs/common/generic/CONFIG_CRYPTO_SHA3 --- a/redhat/configs/common/generic/CONFIG_CRYPTO_SHA3 +++ b/redhat/configs/common/generic/CONFIG_CRYPTO_SHA3 @@ -1 +1 @@ -CONFIG_CRYPTO_SHA3=m +CONFIG_CRYPTO_SHA3=y diff a/redhat/configs/fedora/generic/CONFIG_CRYPTO_XTS b/redhat/configs/common/generic/CONFIG_CRYPTO_XTS --- a/redhat/configs/fedora/generic/CONFIG_CRYPTO_XTS +++ b/redhat/configs/common/generic/CONFIG_CRYPTO_XTS -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1125 _______________________________________________ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
