2 # -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*-
3 # ex: ts=8 sw=4 sts=4 et filetype=sh
14 local _fipsmodules _mod
15 _fipsmodules
="aead aes_generic aes-x86_64 ansi_cprng arc4 blowfish camellia cast6 cbc ccm "
16 _fipsmodules
+="chainiv crc32c cryptomgr crypto_null ctr cts deflate des des3_ede dm-crypt dm-mod "
17 _fipsmodules
+="ecb eseqiv fcrypt gcm ghash_generic hmac khazad lzo md4 md5 michael_mic rmd128 "
18 _fipsmodules
+="rmd160 rmd256 rmd320 rot13 salsa20 seed seqiv serpent sha1 sha224 sha256 sha256_generic "
19 _fipsmodules
+="sha384 sha512 sha512_generic tcrypt tea tnepres twofish wp256 wp384 wp512 xeta xtea xts zlib"
21 mkdir
-m 0755 -p "${initdir}/etc/modprobe.d"
23 for _mod
in $_fipsmodules; do
24 if hostonly
='' instmods
-c -s $_mod; then
25 echo $_mod >> "${initdir}/etc/fipsmodules"
26 echo "blacklist $_mod" >> "${initdir}/etc/modprobe.d/fips.conf"
33 inst_hook pre-trigger
01 "$moddir/fips-boot.sh"
34 inst_hook pre-pivot
01 "$moddir/fips-noboot.sh"
35 inst_script
"$moddir/fips.sh" /sbin
/fips.sh
37 dracut_install sha512hmac rmmod insmod mount uname umount fipscheck
39 inst_libdir_file libsoftokn3.so libsoftokn3.so \
40 libsoftokn3.chk libfreebl3.so libfreebl3.chk \
41 libssl.so
'hmaccalc/sha512hmac.hmac'
43 dracut_install
-o prelink