From 75d6e4366a9de82c4d87841c99e00c90d333b0ba Mon Sep 17 00:00:00 2001

From: =?UTF-8?q?Renaud=20M=C3=A9trich?= <rmetrich@redhat.com>

Date: Fri, 19 Oct 2018 13:21:37 +0200

Subject: [PATCH] fips: check fips integrity just before mounting local

 filesystems in /sysroot

MIME-Version: 1.0

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

Signed-off-by: Renaud Métrich <rmetrich@redhat.com>

Cherry-picked from: e54ab383f7529f340d69536709624dffb30046a1

Resolves: #1640981

---

 modules.d/01fips/module-setup.sh | 2 +-

 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules.d/01fips/module-setup.sh b/modules.d/01fips/module-setup.sh

index ff72bb9b..242d4dd9 100755

--- a/modules.d/01fips/module-setup.sh

+++ b/modules.d/01fips/module-setup.sh

@@ -40,7 +40,7 @@ installkernel() {

 install() {

     local _dir

-    inst_hook pre-trigger 01 "$moddir/fips-boot.sh"

+    inst_hook pre-mount 01 "$moddir/fips-boot.sh"

     inst_hook pre-pivot 01 "$moddir/fips-noboot.sh"

     inst_script "$moddir/fips.sh" /sbin/fips.sh