summaryrefslogtreecommitdiffstats
path: root/modules.d/01fips/fips-load-crypto.sh
diff options
context:
space:
mode:
Diffstat (limited to 'modules.d/01fips/fips-load-crypto.sh')
-rwxr-xr-xmodules.d/01fips/fips-load-crypto.sh14
1 files changed, 14 insertions, 0 deletions
diff --git a/modules.d/01fips/fips-load-crypto.sh b/modules.d/01fips/fips-load-crypto.sh
new file mode 100755
index 0000000..6ef42b9
--- /dev/null
+++ b/modules.d/01fips/fips-load-crypto.sh
@@ -0,0 +1,14 @@
+#!/bin/sh
+
+type getarg > /dev/null 2>&1 || . /lib/dracut-lib.sh
+
+if ! fipsmode=$(getarg fips) || [ "$fipsmode" = "0" ]; then
+ rm -f -- /etc/modprobe.d/fips.conf > /dev/null 2>&1
+elif [ -z "$fipsmode" ]; then
+ die "FIPS mode have to be enabled by 'fips=1' not just 'fips'"
+else
+ . /sbin/fips.sh
+ fips_info "fips-load-crypto: start"
+ fips_load_crypto || die "FIPS integrity test failed"
+ fips_info "fips-load-crypto: done!"
+fi