mirror of
https://github.com/SELinuxProject/selinux
synced 2025-01-18 03:10:50 +00:00
sepolgen: do not use md5 when calculating hash signatures
FIPS does not allow md5 as a valid algorithm. Although we don't really care about cryptographic strength since the algorithm isn't allowed to be used at all use something strong, like sha256. Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Dan Walsh <dwalsh@redhat.com>
This commit is contained in:
parent
9b796ead1a
commit
8f3207eda0
@ -506,7 +506,7 @@ def initialize_vars():
|
||||
|
||||
Errorfunc = None # User defined error handler
|
||||
|
||||
Signature = hashlib.md5() # Digital signature of the grammar rules, precedence
|
||||
Signature = hashlib.sha256() # Digital signature of the grammar rules, precedence
|
||||
# and other information. Used to determined when a
|
||||
# parsing table needs to be regenerated.
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user