cf721d6c46
Add KMI_SYMBOL_LIST_ADD_ONLY=1 to build.config.gki.aarch64.fips140, then
regenerate the fips140 symbol list and ABI XML as follows:
BUILD_CONFIG=common/build.config.gki.aarch64.fips140 build/build_abi.sh --update-symbol-list
BUILD_CONFIG=common/build.config.gki.aarch64 build/build_abi.sh --update --print-report
Leaf changes summary: 7 artifacts changed
Changed leaf types summary: 0 leaf type changed
Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 7 Added functions
Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 0 Added variable
7 Added functions:
[A] 'function int ahash_register_instance(crypto_template*, ahash_instance*)'
[A] 'function int crypto_grab_spawn(crypto_spawn*, crypto_instance*, const char*, u32, u32)'
[A] 'function int crypto_register_aeads(aead_alg*, int)'
[A] 'function int crypto_register_ahashes(ahash_alg*, int)'
[A] 'function int crypto_register_rng(rng_alg*)'
[A] 'function crypto_tfm* crypto_spawn_tfm(crypto_spawn*, u32, u32)'
[A] 'function void crypto_unregister_rng(rng_alg*)'
Bug: 188620248
Change-Id: Ibc066a431decc123f428ecf5ae0b51b1ad838a8a
Signed-off-by: Eric Biggers <ebiggers@google.com>
19 lines
638 B
Plaintext
19 lines
638 B
Plaintext
. ${ROOT_DIR}/${KERNEL_DIR}/build.config.gki.aarch64
|
|
|
|
FILES="${FILES}
|
|
crypto/fips140.ko
|
|
"
|
|
|
|
if [ "${LTO}" = "none" ]; then
|
|
echo "The FIPS140 module needs LTO to be enabled."
|
|
exit 1
|
|
fi
|
|
|
|
MODULES_ORDER=android/gki_aarch64_fips140_modules
|
|
|
|
DEFCONFIG=fips140_gki_defconfig
|
|
KMI_SYMBOL_LIST=android/abi_gki_aarch64_fips140
|
|
PRE_DEFCONFIG_CMDS="cat ${ROOT_DIR}/${KERNEL_DIR}/arch/arm64/configs/gki_defconfig ${ROOT_DIR}/${KERNEL_DIR}/arch/arm64/configs/fips140_gki.fragment > ${ROOT_DIR}/${KERNEL_DIR}/arch/arm64/configs/${DEFCONFIG};"
|
|
POST_DEFCONFIG_CMDS="rm ${ROOT_DIR}/${KERNEL_DIR}/arch/arm64/configs/${DEFCONFIG}"
|
|
KMI_SYMBOL_LIST_ADD_ONLY=1
|