Adjust integrity check creation to match upstream (#2073018)
This commit is contained in:
parent
7b71c161dd
commit
e7354685a2
@ -101,12 +101,12 @@ LIBGCRYPT_FORCE_FIPS_MODE=1 make check
|
|||||||
%{?__debug_package:%{__debug_install_post}} \
|
%{?__debug_package:%{__debug_install_post}} \
|
||||||
%{__arch_install_post} \
|
%{__arch_install_post} \
|
||||||
%{__os_install_post} \
|
%{__os_install_post} \
|
||||||
dd if=/dev/zero of=%{libpath}.hmac bs=32 count=1 \
|
pushd src \
|
||||||
objcopy --update-section .note.fdo.integrity=%{libpath}.hmac %{libpath} %{libpath}.empty \
|
sed -i -e 's|FILE=.*|FILE=\\\$1|' gen-note-integrity.sh \
|
||||||
src/hmac256 --binary %{hmackey} %{libpath}.empty > %{libpath}.hmac \
|
READELF=readelf AWK=awk ECHO_N="-n" bash gen-note-integrity.sh %{libpath} > %{libpath}.hmac \
|
||||||
objcopy --update-section .note.fdo.integrity=%{libpath}.hmac %{libpath}.empty %{libpath}.new \
|
objcopy --update-section .note.fdo.integrity=%{libpath}.hmac %{libpath} new \
|
||||||
mv -f %{libpath}.new %{libpath} \
|
mv -f new %{libpath} \
|
||||||
rm -f %{libpath}.hmac %{libpath}.empty
|
rm -f %{libpath}.hmac \
|
||||||
%{nil}
|
%{nil}
|
||||||
|
|
||||||
%install
|
%install
|
||||||
|
Loading…
Reference in New Issue
Block a user