While kernel enable fips, the rng-tools takes a high cpu performance
which Operation not permitted
...
Oct 12 06:08:23 qemux86-64 rngd[122]: RNDADDENTROPY failed: Operation not
permitted
...
Signed-off-by: Hongxu Jia <hongxu....@windriver.com>
---
recipes-connectivity/openssh/openssh_fips.inc | 2 ++
1 file changed, 2 insertions(+)
diff --git a/recipes-connectivity/openssh/openssh_fips.inc
b/recipes-connectivity/openssh/openssh_fips.inc
index 38db03b..0eafb98 100644
--- a/recipes-connectivity/openssh/openssh_fips.inc
+++ b/recipes-connectivity/openssh/openssh_fips.inc
@@ -3,6 +3,8 @@ DEPENDS += " \
openssl-fips \
fipscheck \
"
+RRECOMMENDS_${PN}-sshd_remove = "rng-tools"
+
SRC_URI += " \
file://0001-openssh-8.0p1-fips.patch \
file://0001-conditional-enable-fips-mode.patch \
--
2.7.4
--
_______________________________________________
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto
