Accepting request 236896 from home:msmeissn:branches:Base:System

- include the several hmacs needed for FIPS integrity checking
  of cryptsetup, libgcrypt, libfipscheck1. Also add the openssl
  HMACs too as someone else seems to use those too.

OBS-URL: https://build.opensuse.org/request/show/236896
OBS-URL: https://build.opensuse.org/package/show/Base:System/dracut?expand=0&rev=158

dracut.changes

@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Wed Jun 11 12:49:44 UTC 2014 - meissner@suse.com
+
+- include the several hmacs needed for FIPS integrity checking
+  of cryptsetup, libgcrypt, libfipscheck1. Also add the openssl
+  HMACs too as someone else seems to use those too.
+
 -------------------------------------------------------------------
 Wed Jun  4 14:58:55 CEST 2014 - hare@suse.de
 

dracut.spec

@@ -83,6 +83,8 @@ Patch54:        0054-95iscsi-update-commandline-printing.patch
 Patch55:        0055-95fcoe-Only-install-fcoe-module-if-required.patch
 Patch56:        0056-81cio_ignore-handle-cio_ignore-commandline.patch
 
+Patch57:        more-fips-adjustments.patch
+
 BuildRequires:  asciidoc
 BuildRequires:  bash
 BuildRequires:  docbook-xsl-stylesheets
@@ -179,6 +181,7 @@ and its cryptography during startup.
 %patch54 -p1
 %patch55 -p1
 %patch56 -p1
+%patch57 -p1
 
 %build
 %configure\

more-fips-adjustments.patch

@@ -0,0 +1,17 @@
+Index: dracut-037/modules.d/01fips/module-setup.sh
+===================================================================
+--- dracut-037.orig/modules.d/01fips/module-setup.sh
++++ dracut-037/modules.d/01fips/module-setup.sh
+@@ -46,7 +46,11 @@ install() {
+ 
+     inst_libdir_file libsoftokn3.so libsoftokn3.so \
+         libsoftokn3.chk libfreebl3.so libfreebl3.chk \
+-        libssl.so 'hmaccalc/sha512hmac.hmac' libssl.so.10
++        libssl.so 'hmaccalc/sha512hmac.hmac' libssl.so.10 \
++        .libcrypto.so.1.0.0.hmac .libssl.so.1.0.0.hmac \
++        .libcryptsetup.so.4.5.0.hmac .libcryptsetup.so.4.hmac \
++        .libgcrypt.so.20.hmac \
++        .libfipscheck.so.1.hmac .libfipscheck.so.1.1.0.hmac
+ 
+     # we do not use prelink at SUSE
+     #inst_multiple -o prelink