* NEWS: Add note about FIPS mode. Wording suggested by Roland

McGrath.
This commit is contained in:
Alexandre Oliva 2012-10-10 07:06:03 -03:00
parent e745142509
commit 89a3ad0b6e
2 changed files with 11 additions and 0 deletions

View File

@ -1,3 +1,8 @@
2012-10-10 Alexandre Oliva <aoliva@redhat.com>
* NEWS: Add note about FIPS mode. Wording suggested by Roland
McGrath.
2012-10-10 Alexandre Oliva <aoliva@redhat.com>
* crypt/crypt-entry.c: Include fips-private.h.

6
NEWS
View File

@ -48,6 +48,12 @@ Version 2.17
the tty file descriptor in /dev/pts or /dev if /proc is not available. This
allows creation of chroots without the procfs mounted on /proc.
* The `crypt' function now fails if passed salt bytes that violate the
specification for those values. On Linux, the `crypt' function will
consult /proc/sys/crypto/fips_enabled to determine if "FIPS mode" is
enabled, and fail on encrypted strings using the MD5 or DES algorithm
when the mode is enabled.
Version 2.16