From 4e11b0fb25485c6bf67d405cb5fcf681622fd34d Mon Sep 17 00:00:00 2001 From: Dave Jones Date: Jun 27 2011 16:27:32 +0000 Subject: Disable CONFIG_CRYPTO_MANAGER_DISABLE_TESTS, as this also disables FIPS (rhbz 716942) --- diff --git a/config-debug b/config-debug index a1b0ee0..7bbaa0b 100644 --- a/config-debug +++ b/config-debug @@ -89,8 +89,6 @@ CONFIG_PM_ADVANCED_DEBUG=y CONFIG_CEPH_LIB_PRETTYDEBUG=y CONFIG_QUOTA_DEBUG=y -# CONFIG_CRYPTO_MANAGER_DISABLE_TESTS is not set - CONFIG_PCI_DEFAULT_USE_CRS=y CONFIG_KGDB_KDB=y diff --git a/config-generic b/config-generic index e7021fc..909fff2 100644 --- a/config-generic +++ b/config-generic @@ -3859,6 +3859,8 @@ CONFIG_CRYPTO_FIPS=y CONFIG_CRYPTO_USER_API_HASH=y CONFIG_CRYPTO_USER_API_SKCIPHER=y CONFIG_CRYPTO_MANAGER_TESTS=y +# Note, CONFIG_CRYPTO_MANAGER_DISABLE_TESTS needs to be unset, or FIPS will be disabled. +# CONFIG_CRYPTO_MANAGER_DISABLE_TESTS is not set CONFIG_CRYPTO_HW=y CONFIG_CRYPTO_BLKCIPHER=y CONFIG_CRYPTO_MANAGER=m diff --git a/config-nodebug b/config-nodebug index 0cf2110..5730cd1 100644 --- a/config-nodebug +++ b/config-nodebug @@ -89,8 +89,6 @@ CONFIG_PM_ADVANCED_DEBUG=y CONFIG_CEPH_LIB_PRETTYDEBUG=y CONFIG_QUOTA_DEBUG=y -# CONFIG_CRYPTO_MANAGER_DISABLE_TESTS is not set - CONFIG_PCI_DEFAULT_USE_CRS=y CONFIG_KGDB_KDB=y diff --git a/kernel.spec b/kernel.spec index 9537319..db9792d 100644 --- a/kernel.spec +++ b/kernel.spec @@ -1878,6 +1878,9 @@ fi # and build. %changelog +* Mon Jun 27 2011 Dave Jones +- Disable CONFIG_CRYPTO_MANAGER_DISABLE_TESTS, as this also disables FIPS (rhbz 716942) + * Thu Jun 23 2011 Kyle McMartin 3.0-0.rc4.git3.1 - Linux 3.0-rc4-git3 - Drop linux-3.0-fix-uts-release.patch, and instead just perl the Makefile