You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
39 lines
1.0 KiB
39 lines
1.0 KiB
12 months ago
|
#!/bin/sh
|
||
|
|
# Author: Athmane Madjoudj <athmanem@gmail.com>
|
||
|
|
# Note: This was a known issue with CentOS 6.0 GA kernel
|
||
|
|
|
||
|
|
t_Log "Running $0 - check CentOS' Kernel Module GPG key."
|
||
|
|
|
||
|
|
uname_arch=$(uname -m)
|
||
|
|
uname_kernel=$(uname -r)
|
||
|
|
uname_kernel=${uname_kernel:0:6}
|
||
|
|
|
||
|
|
|
||
|
|
if [ "$uname_arch" == "aarch64" ] || [ "$uname_arch" == "armv7l" ] || [ "$uname_arch" == "i686" ]; then
|
||
|
|
t_Log "*** Not testing on Arch: $uname_arch ***"
|
||
|
|
exit 0
|
||
|
|
fi
|
||
|
|
|
||
|
|
if [ "$centos_ver" -ge 7 ] ; then
|
||
|
|
if [ "$centos_ver" -eq 7 ];then
|
||
|
|
if [ "$uname_arch" == "ppc64le" -a "$uname_kernel" == "4.18.0" ];then
|
||
|
|
# power9 with c8 kernel
|
||
|
|
ring=.builtin_trusted_keys
|
||
|
|
else
|
||
|
|
ring=.system_keyring
|
||
|
|
fi
|
||
|
|
else
|
||
|
|
ring=.builtin_trusted_keys
|
||
|
|
fi
|
||
|
|
for id in kpatch "Driver update" kernel
|
||
|
|
do
|
||
|
|
t_Log "Verifying x.509 CentOS ${id}"
|
||
|
|
keyctl list %:$ring | grep -i "CentOS \(Linux \)\?${id} signing key" > /dev/null 2>&1
|
||
|
|
t_CheckExitStatus $?
|
||
|
|
done
|
||
|
|
else
|
||
|
|
grep 'User ID: CentOS (Kernel Module GPG key)' /var/log/dmesg > /dev/null 2>&1
|
||
|
|
t_CheckExitStatus $?
|
||
|
|
fi
|
||
|
|
|