#acupoftea - mail.ontime-ae.com

System	:	Linux server1.ontime-gulf.com 4.18.0-553.5.1.el8_10.x86_64 #1 SMP Wed Jun 5 09:12:13 EDT 2024 x86_64
Software	:	Apache
Server	:	162.0.230.206
Domains	:	40 Domain
Permission	:	[ drwxr-xr-x ]
	:	/ lib / dracut / modules.d / 01fips /

216.73.216.155

Home

File module-setup.sh

#!/bin/bash

# called by dracut
check() {
    return 0
}

# called by dracut
depends() {
    return 0
}

# called by dracut
installkernel() {
    local _fipsmodules _mod _bootfstype
    if [[ -f "${srcmods}/modules.fips" ]]; then
        _fipsmodules="$(cat "${srcmods}/modules.fips")"
    else
        _fipsmodules=""

# Hashes:
        _fipsmodules+="sha1 sha224 sha256 sha384 sha512 "
        _fipsmodules+="sha3-224 sha3-256 sha3-384 sha3-512 "
        _fipsmodules+="crc32c crct10dif ghash "

# Ciphers:
        _fipsmodules+="cipher_null des3_ede aes cfb dh ecdh "

# Modes/templates:
        _fipsmodules+="ecb cbc ctr xts gcm ccm authenc hmac cmac "

# Compression algs:
        _fipsmodules+="deflate lzo zlib "

# PRNG algs:
        _fipsmodules+="ansi_cprng "

# Misc:
        _fipsmodules+="aead cryptomgr tcrypt crypto_user "
    fi

mkdir -m 0755 -p "${initdir}/etc/modprobe.d"

for _mod in $_fipsmodules; do
        if hostonly='' instmods -c -s $_mod; then
            echo $_mod >> "${initdir}/etc/fipsmodules"
            echo "blacklist $_mod" >> "${initdir}/etc/modprobe.d/fips.conf"
        fi
    done

# with hostonly_default_device fs module for /boot is not installed by default
    if [[ $hostonly ]] && [[ "$hostonly_default_device" == "no" ]]; then
        _bootfstype=$(find_mp_fstype /boot)
        if [[ -n "$_bootfstype" ]]; then
            hostonly='' instmods $_bootfstype
        else
            dwarning "Can't determine fs type for /boot, FIPS check may fail."
        fi
    fi
}

# called by dracut
install() {
    local _dir
    inst_hook pre-trigger 01 "$moddir/fips-boot.sh"
    inst_hook pre-pivot 01 "$moddir/fips-noboot.sh"
    inst_hook pre-udev 01 "$moddir/fips-load-crypto.sh"
    inst_script "$moddir/fips.sh" /sbin/fips.sh

inst_multiple sha512hmac rmmod insmod mount uname umount grep sort

inst_simple /etc/system-fips
    [ -c ${initdir}/dev/random ] || mknod ${initdir}/dev/random c 1 8 \
        || {
            dfatal "Cannot create /dev/random"
            dfatal "To create an initramfs with fips support, dracut has to run as root"
            return 1
        }
    [ -c ${initdir}/dev/urandom ] || mknod ${initdir}/dev/urandom c 1 9 \
        || {
            dfatal "Cannot create /dev/random"
            dfatal "To create an initramfs with fips support, dracut has to run as root"
            return 1
        }
}

Name	Type	Size	Permission	Last Modified	Actions
.	DIR	-	drwxr-xr-x	2025-12-22 10:57:46
..	DIR	-	drwxr-xr-x	2025-12-17 06:54:53
fips-boot.sh	text/x-shellscript	265 B	-rwxr-xr-x	2018-10-08 01:38:33
fips-load-crypto.sh	text/x-shellscript	209 B	-rw-r--r--	2025-12-17 06:54:45
fips-noboot.sh	text/x-shellscript	244 B	-rwxr-xr-x	2018-10-08 01:38:33
fips.sh	text/x-shellscript	5.53 KB	-rwxr-xr-x	2025-12-17 06:54:47
module-setup.sh	text/x-shellscript	2.39 KB	-rwxr-xr-x	2025-12-17 06:54:47

~ ACUPOFTEA - mail.ontime-ae.com