File 0620-01fips-handle-SHA1-on-machines-without-AVX... of Package dracut.openSUSE_Leap_15.1_Update

Overview Repositories Revisions Requests Users Attributes Meta

File 0620-01fips-handle-SHA1-on-machines-without-AVX.patch of Package dracut.openSUSE_Leap_15.1_Update

From e2b2c9ef43e696e6d3ea4fc88754247531f33b89 Mon Sep 17 00:00:00 2001
From: Daniel Molkentin <dmolkentin@suse.com>
Date: Mon, 2 Mar 2020 17:57:54 +0100
Subject: [PATCH] 01fips: handle SHA1 on machines without AVX

When modules.fips contains "sha1-mb", the alternative is "sha1".
On a machine without AVX, modprobe sha1-mb will fail with "no such
device". So we need to filter -mb as well.

Reference: bsc#1160318
---
 modules.d/01fips/fips.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/modules.d/01fips/fips.sh b/modules.d/01fips/fips.sh
index d6dc8533..bbef0c63 100755
--- a/modules.d/01fips/fips.sh
+++ b/modules.d/01fips/fips.sh
@@ -139,6 +139,9 @@ do_fips()
                         -o  "$_module" == "twofish_x86_64_3way" \
                         -o  "$_module" == "ablk_helper"         \
                         -o  "$_module" == "glue_helper"         \
+                        -o  "$_module" == "sha1-mb"             \
+                        -o  "$_module" == "sha256-mb"           \
+                        -o  "$_module" == "sha512-mb"           \
                     ]; then
                         _found=1
                     fi
-- 
2.16.4

Places

File 0620-01fips-handle-SHA1-on-machines-without-AVX.patch of Package dracut.openSUSE_Leap_15.1_Update

Places