mirror of
https://sourceware.org/git/glibc.git
synced 2024-12-04 19:00:09 +00:00
5a82c74822
Also, change sources.redhat.com to sourceware.org.
This patch was automatically generated by running the following shell
script, which uses GNU sed, and which avoids modifying files imported
from upstream:
sed -ri '
s,(http|ftp)(://(.*\.)?(gnu|fsf|sourceware)\.org($|[^.]|\.[^a-z])),https\2,g
s,(http|ftp)(://(.*\.)?)sources\.redhat\.com($|[^.]|\.[^a-z]),https\2sourceware.org\4,g
' \
$(find $(git ls-files) -prune -type f \
! -name '*.po' \
! -name 'ChangeLog*' \
! -path COPYING ! -path COPYING.LIB \
! -path manual/fdl-1.3.texi ! -path manual/lgpl-2.1.texi \
! -path manual/texinfo.tex ! -path scripts/config.guess \
! -path scripts/config.sub ! -path scripts/install-sh \
! -path scripts/mkinstalldirs ! -path scripts/move-if-change \
! -path INSTALL ! -path locale/programs/charmap-kw.h \
! -path po/libc.pot ! -path sysdeps/gnu/errlist.c \
! '(' -name configure \
-execdir test -f configure.ac -o -f configure.in ';' ')' \
! '(' -name preconfigure \
-execdir test -f preconfigure.ac ';' ')' \
-print)
and then by running 'make dist-prepare' to regenerate files built
from the altered files, and then executing the following to cleanup:
chmod a+x sysdeps/unix/sysv/linux/riscv/configure
# Omit irrelevant whitespace and comment-only changes,
# perhaps from a slightly-different Autoconf version.
git checkout -f \
sysdeps/csky/configure \
sysdeps/hppa/configure \
sysdeps/riscv/configure \
sysdeps/unix/sysv/linux/csky/configure
# Omit changes that caused a pre-commit check to fail like this:
# remote: *** error: sysdeps/powerpc/powerpc64/ppc-mcount.S: trailing lines
git checkout -f \
sysdeps/powerpc/powerpc64/ppc-mcount.S \
sysdeps/unix/sysv/linux/s390/s390-64/syscall.S
# Omit change that caused a pre-commit check to fail like this:
# remote: *** error: sysdeps/sparc/sparc64/multiarch/memcpy-ultra3.S: last line does not end in newline
git checkout -f sysdeps/sparc/sparc64/multiarch/memcpy-ultra3.S
75 lines
2.0 KiB
C
75 lines
2.0 KiB
C
/* FIPS compliance status test for GNU/Linux systems.
|
|
Copyright (C) 2012-2019 Free Software Foundation, Inc.
|
|
This file is part of the GNU C Library.
|
|
|
|
The GNU C Library is free software; you can redistribute it and/or
|
|
modify it under the terms of the GNU Lesser General Public
|
|
License as published by the Free Software Foundation; either
|
|
version 2.1 of the License, or (at your option) any later version.
|
|
|
|
The GNU C Library is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Lesser General Public License for more details.
|
|
|
|
You should have received a copy of the GNU Lesser General Public
|
|
License along with the GNU C Library; if not, see
|
|
<https://www.gnu.org/licenses/>. */
|
|
|
|
#ifndef _FIPS_PRIVATE_H
|
|
#define _FIPS_PRIVATE_H
|
|
|
|
#include <errno.h>
|
|
#include <fcntl.h>
|
|
#include <stdlib.h>
|
|
#include <unistd.h>
|
|
#include <not-cancel.h>
|
|
#include <stdbool.h>
|
|
|
|
/* Return true if FIPS mode is enabled. See
|
|
sysdeps/generic/fips-private.h for more information. */
|
|
|
|
static bool
|
|
fips_enabled_p (void)
|
|
{
|
|
static enum
|
|
{
|
|
FIPS_UNTESTED = 0,
|
|
FIPS_ENABLED = 1,
|
|
FIPS_DISABLED = -1,
|
|
FIPS_TEST_FAILED = -2
|
|
} checked;
|
|
|
|
if (checked == FIPS_UNTESTED)
|
|
{
|
|
int fd = __open_nocancel ("/proc/sys/crypto/fips_enabled", O_RDONLY);
|
|
|
|
if (fd != -1)
|
|
{
|
|
/* This is more than enough, the file contains a single integer. */
|
|
char buf[32];
|
|
ssize_t n;
|
|
n = TEMP_FAILURE_RETRY (__read_nocancel (fd, buf, sizeof (buf) - 1));
|
|
__close_nocancel_nostatus (fd);
|
|
|
|
if (n > 0)
|
|
{
|
|
/* Terminate the string. */
|
|
buf[n] = '\0';
|
|
|
|
char *endp;
|
|
long int res = strtol (buf, &endp, 10);
|
|
if (endp != buf && (*endp == '\0' || *endp == '\n'))
|
|
checked = (res > 0) ? FIPS_ENABLED : FIPS_DISABLED;
|
|
}
|
|
}
|
|
|
|
if (checked == FIPS_UNTESTED)
|
|
checked = FIPS_TEST_FAILED;
|
|
}
|
|
|
|
return checked == FIPS_ENABLED;
|
|
}
|
|
|
|
#endif /* _FIPS_PRIVATE_H */
|