tmakin/tegra-linux-noble
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

UBUNTU: SAUCE: Enable fips mode by default, in FIPS kernels only

Browse Source 
BugLink: https://bugs.launchpad.net/bugs/2049082

Ensure that kernels built with CONFIG_CRYPTO_FIPS=y default to fips
mode. Such that testing FIPS kernels in FIPS mode requires no
additional bootloader configuration. This will ease testing,
deployment, downgrades/upgrades, certification.

Tested by building unstable kernel with a minimal FIPS configuration
enabled, and observing that default boot goes into fips mode, as well
as when fips=1 passed on the cmdline. Also verified that fips=0 turns
off fips mode correctly.

Signed-off-by: Dimitri John Ledkov <dimitri.ledkov@canonical.com>
Acked-by: Andrei Gherzan <andrei.gherzan@canonical.com>
Acked-by: Tim Gardner <tim.gardner@canonical.com>
Signed-off-by: Dimitri John Ledkov <dimitri.ledkov@canonical.com>
This commit is contained in:
Dimitri John Ledkov
2024-02-01 13:19:35 +00:00
committed by Paolo Pisati
parent 2938ff8390
commit fe947da0d5
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crypto/fips.c
+2 -1
View File
@@ -14,7 +14,8 @@
#include <linux/notifier.h>
#include <generated/utsrelease.h>
int fips_enabled;
/* LP: #2049082 UBUNTU: SAUCE: FIPS kernels default to FIPS mode */
int fips_enabled = 1;
EXPORT_SYMBOL_GPL(fips_enabled);
ATOMIC_NOTIFIER_HEAD(fips_fail_notif_chain);