Accepting request 1226528 from system:install:head

OBS-URL: https://build.opensuse.org/request/show/1226528
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/patterns-base?expand=0&rev=114
This commit is contained in:
Ana Guerrero 2024-11-27 21:05:21 +00:00 committed by Git OBS Bridge
commit cfdea02182
2 changed files with 19 additions and 20 deletions

View File

@ -1,3 +1,12 @@
-------------------------------------------------------------------
Tue Nov 26 13:17:40 UTC 2024 - Dirk Müller <dmueller@suse.com>
- fips: change description from 140-2 to 140-3
- fips: require crypto-policies-scripts when openssh is used
(bsc#1224802)
- fips: drop -hmac packages as they have been merged into the main
package (bsc#1185116)
------------------------------------------------------------------- -------------------------------------------------------------------
Tue Nov 5 16:29:38 UTC 2024 - Cathy Hu <cathy.hu@suse.com> Tue Nov 5 16:29:38 UTC 2024 - Cathy Hu <cathy.hu@suse.com>

View File

@ -543,26 +543,17 @@ This is the enhanced base runtime system with lots of convenience packages.
%package fips %package fips
%pattern_primaryfunctions %pattern_primaryfunctions
Summary: FIPS 140-2 specific packages Summary: FIPS 140-3 specific packages
Group: Metapackages Group: Metapackages
Provides: pattern() = fips Provides: pattern() = fips
Provides: pattern-icon() = pattern-basis-addon Provides: pattern-icon() = pattern-basis-addon
Provides: pattern-order() = 3010 Provides: pattern-order() = 3010
Provides: pattern-visible() Provides: pattern-visible()
Requires: (crypto-policies-scripts if openssh-clients)
Requires: (crypto-policies-scripts if openssh-common)
Requires: (crypto-policies-scripts if openssh-server)
Requires: (dracut-fips if dracut) Requires: (dracut-fips if dracut)
Requires: (libcryptsetup12-hmac if libcryptsetup12)
Requires: (libcryptsetup12-hmac-32bit if libcryptsetup12-32bit)
Requires: (libfreebl3-hmac if libfreebl3)
Requires: (libfreebl3-hmac-32bit if libfreebl3-32bit)
Requires: (libgcrypt20-hmac if libgcrypt20)
Requires: (libgnutls30-hmac if libgnutls30)
Requires: (libgnutls30-hmac-32bit if libgnutls30-32bit)
Requires: (libopenssl-3-fips-provider if libopenssl3) Requires: (libopenssl-3-fips-provider if libopenssl3)
Requires: (libopenssl-fips-provider if libopenssl)
Requires: (libopenssl1_1-hmac if libopenssl1_1)
Requires: (libopenssl1_1-hmac-32bit if libopenssl1_1-32bit)
Requires: (libsoftokn3-hmac if libsoftokn3)
Requires: (libsoftokn3-hmac-32bit if libsoftokn3-32bit)
Requires: (openssh-fips if openssh-clients) Requires: (openssh-fips if openssh-clients)
Requires: (openssh-fips if openssh-server) Requires: (openssh-fips if openssh-server)
Requires: (strongswan-hmac if strongswan) Requires: (strongswan-hmac if strongswan)
@ -574,14 +565,13 @@ Provides: patterns-server-enterprise-fips-32bit = %{version}
Obsoletes: patterns-server-enterprise-fips-32bit < %{version} Obsoletes: patterns-server-enterprise-fips-32bit < %{version}
%description fips %description fips
This pattern installs the FIPS 140-2 specific packages that complete the various This pattern installs the FIPS 140-3 specific packages that are required
cryptographic modules in use. It is required if you want to run the if you want to run the machine with "fips=1".
machine with "fips=1".
Please note that this pattern only enables FIPS 140-2 compliant operation, it does Please note that this pattern only enables FIPS 140-3 compliant operation, it does
not directly make the system FIPS 140-2 certified nor validated. not directly make the system FIPS 140-3 certified nor validated.
Please refer to SUSE official statements on the state of FIPS 140-2 certification. Please refer to SUSE official statements on the state of FIPS 140-3 certification.
%files fips %files fips
%dir %{_docdir}/patterns %dir %{_docdir}/patterns