fips: Drop obsolete dependencies

Explicitly require libkcapi-hmaccalc and stop installing NSS/prelink
dependencies that are no longer needed.

diff --git a/dracut.spec b/dracut.spec
index 1d22264973c9dba99c709295b1868a89d2d709cb..5d66e224b50743e85b0ed1aad793fdd038665af8 100644 (file)
--- a/dracut.spec
+++ b/dracut.spec
@@ -93,9 +93,7 @@ Requires: util-linux-ng >= 2.21
 %endif
 
 %if 0%{?fedora} || 0%{?rhel} || 0%{?suse_version}
-Requires: hmaccalc
-Requires: nss
-Requires: nss-softokn-freebl
+Requires: libkcapi-hmaccalc
 %endif
 
 %description

diff --git a/modules.d/01fips/module-setup.sh b/modules.d/01fips/module-setup.sh
index 4b3e322fdd8e5d65ac746355243bd1b1056afb17..7c41f5278d3296401cab941e75322a40ab1ea30e 100755 (executable)
--- a/modules.d/01fips/module-setup.sh
+++ b/modules.d/01fips/module-setup.sh
@@ -42,12 +42,7 @@ install() {
     inst_hook pre-pivot 01 "$moddir/fips-noboot.sh"
     inst_script "$moddir/fips.sh" /sbin/fips.sh
 
-    inst_multiple sha512hmac rmmod insmod mount uname umount fipscheck
-
-    inst_libdir_file libsoftokn3.so libsoftokn3.so \
-        libsoftokn3.chk libfreebl3.so libfreebl3.chk \
-        libssl.so 'hmaccalc/sha512hmac.hmac' libssl.so.10 \
-        libfreeblpriv3.so libfreeblpriv3.chk
+    inst_multiple sha512hmac rmmod insmod mount uname umount
 
     inst_simple /etc/system-fips
     [ -c ${initdir}/dev/random ] || mknod ${initdir}/dev/random c 1 8 \