From: Harald Hoyer <harald@redhat.com>
Date: Wed, 6 Apr 2011 09:32:24 +0000 (+0200)
Subject: fips: add "rd.fips.skipkernel" boot option
X-Git-Tag: 011~127
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=02c1bd6bb63dc548cf4fae9e0999a92798284072;p=platform%2Fupstream%2Fdracut.git

fips: add "rd.fips.skipkernel" boot option
---

diff --git a/modules.d/01fips/fips.sh b/modules.d/01fips/fips.sh
index 857c355..f9bdfdf 100755
--- a/modules.d/01fips/fips.sh
+++ b/modules.d/01fips/fips.sh
@@ -1,9 +1,9 @@
 #!/bin/sh
 # -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*-
 # ex: ts=8 sw=4 sts=4 et filetype=sh
-do_fips()
+
+do_fipskernel()
 {
-    FIPSMODULES=$(cat /etc/fipsmodules)
     boot=$(getarg boot=)
     KERNEL=$(uname -r)
     case "$boot" in
@@ -48,7 +48,15 @@ do_fips()
 
     info "Umounting /boot"
     umount /boot
+}
 
+do_fips()
+{
+    FIPSMODULES=$(cat /etc/fipsmodules)
+
+    if ! getarg rd.fips.skipkernel >/dev/null; then
+	do_fipskernel
+    fi
     info "Loading and integrity checking all crypto modules"
     for module in $FIPSMODULES; do
         if [ "$module" != "tcrypt" ]; then