search

Katello / katello-client-bootstrap

Bootstrap Script for migrating systems to Foreman & Katello
GNU General Public License v2.0
52 stars 63 forks source link

fips check #275

Closed pgera closed 5 years ago

pgera commented 6 years ago

/proc/sys/crypto/fips_enabled needn't exist. There should be a check between these two lines:

fips_file = open("/proc/sys/crypto/fips_enabled", "r") fips_status = fips_file.read(1)

sideangleside commented 6 years ago

Are you stating that on your system that /proc/sys/crypto/fips_enabled doesn't exist on your system?

What OS version are you running (on the client)?

pgera commented 6 years ago

It's a RHEL 7.5 system, but running the mainline kernel from elrepo's kernel-ml. /proc/sys/crypto/fips_enabled seems to be a feature of the downstream RHEL kernel.

evgeni commented 5 years ago

it does exist on my Fedora 29 box (4.19.5-300.fc29.x86_64), but yeah, I think we can still add a check for it.

evgeni commented 5 years ago

@pgera please test https://github.com/Katello/katello-client-bootstrap/pull/279