From 73cf135d804f18b7a1c51ad30004cab9636d2fe8 Mon Sep 17 00:00:00 2001

From: Harald Hoyer <harald@redhat.com>

Date: Wed, 30 Nov 2016 13:54:20 +0100

Subject: [PATCH] fips/module-setup.sh: also blacklist the alias resolved

 modules

---

 modules.d/01fips/module-setup.sh | 6 +++++-

 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/modules.d/01fips/module-setup.sh b/modules.d/01fips/module-setup.sh

index dc476347..3bf6c332 100755

--- a/modules.d/01fips/module-setup.sh

+++ b/modules.d/01fips/module-setup.sh

@@ -11,7 +11,7 @@ depends() {

 }

 installkernel() {

-    local _fipsmodules _mod

+    local _fipsmodules _mod i

     if [[ -f "${srcmods}/modules.fips" ]]; then

         _fipsmodules="$(cat "${srcmods}/modules.fips")"

@@ -30,6 +30,10 @@ installkernel() {

         if hostonly='' instmods -c -s $_mod; then

             echo $_mod >> "${initdir}/etc/fipsmodules"

             echo "blacklist $_mod" >> "${initdir}/etc/modprobe.d/fips.conf"

+            for i in $(modprobe --resolve-alias $_mod 2>/dev/null); do

+                [[ $i == $_mod ]] && continue

+                echo "blacklist $i" >> "${initdir}/etc/modprobe.d/fips.conf"

+            done

         fi

     done

 }