modules.d/01fips/module-setup.sh

   1 #!/bin/bash
   2 # -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*-
   3 # ex: ts=8 sw=4 sts=4 et filetype=sh
   4
   5 check() {
   6     return 255
   7 }
   8
   9 depends() {
  10     return 0
  11 }
  12
  13 installkernel() {
  14     FIPSMODULES="aead aes_generici aes-xts aes-x86_64 ansi_cprng cbc ccm chainiv ctr"
  15     FIPSMODULES="$FIPSMODULES des deflate ecb eseqiv hmac seqiv sha256 sha512"
  16     FIPSMODULES="$FIPSMODULES cryptomgr crypto_null tcrypt"
  17
  18     mkdir -p "${initdir}/etc/modprobe.d"
  19
  20     for mod in $FIPSMODULES; do
  21         if instmods $mod; then
  22             echo $mod >> "${initdir}/etc/fipsmodules"
  23             echo "blacklist $mod" >> "${initdir}/etc/modprobe.d/fips.conf"
  24         fi
  25     done
  26 }
  27
  28 install() {
  29     inst_hook pre-trigger 01 "$moddir/fips.sh"
  30     dracut_install sha512hmac rmmod insmod mount uname umount
  31
  32     for dir in "$usrlibdir" "$libdir"; do
  33         [[ -e $dir/libsoftokn3.so ]] && \
  34             dracut_install $dir/libsoftokn3.so $dir/libsoftokn3.chk \
  35             $dir/libfreebl3.so $dir/libfreebl3.chk && \
  36             break
  37     done
  38
  39     dracut_install $usrlibdir/hmaccalc/sha512hmac.hmac
  40 }
  41