]> git.ipfire.org Git - thirdparty/dracut.git/commit
01fips: run sha512hmac from directory HMAC file directory
authorJonathan Lebon <jonathan@jlebon.com>
Tue, 29 Oct 2019 20:47:34 +0000 (16:47 -0400)
committerLukáš Nykrýn <lnykryn@redhat.com>
Thu, 31 Oct 2019 10:12:36 +0000 (11:12 +0100)
commitba813779bf3d613b841fef2e127b2605fafbaa0c
tree2667c93ee1d0ae74fd1fce519cbd1043ad7c3fb1
parent9e759aa9696704809df6a147cb091ea052dd208d
01fips: run sha512hmac from directory HMAC file directory

That way, the HMAC file can contain a relative path instead of an
absolute one. The issue is that right now the kernel RPM bakes the
`/boot/vmlinuz-${kver}` path into the HMAC file which poses an issue for
rpm-ostree systems (and any other system where the kernel isn't simply
in the top-level `/boot`.

For now, we're hacking around this in rpm-ostree:
https://github.com/coreos/rpm-ostree/pull/1934

Though I'd like to propose the same change in the kernel spec file.
modules.d/01fips/fips.sh