diff --git a/kernel.spec b/kernel.spec index 4d76ae6..ed6f8ee 100644 --- a/kernel.spec +++ b/kernel.spec @@ -1084,13 +1084,15 @@ cp -a %{temp_root} %{buildroot} # Multithreaded verification that every kernel module # has a signature attached to it mkdir -p "%{certs_dir_rnd}" -echo 0 > %{certs_verify_tmp} +touch %{certs_verify_tmp} _verify_signature(){ if [ -z "$1" ] || [ ! -f "$1" ]; then return; fi if hexdump -C "$1" | rev | cut -f 2 -d '|' | rev | tr -d '\n' | \ grep -q '~Module signature appended~' then - echo $(($(cat %{certs_verify_tmp})+1)) > %{certs_verify_tmp} + if [ -f %{certs_verify_tmp} ]; then + rm -f %{certs_verify_tmp} + fi else echo "ERROR: Module $1 has no signature attached to it!" exit 1 @@ -1099,11 +1101,10 @@ _verify_signature(){ export -f _verify_signature find %{target_modules} -name '*.ko' -print0 | sort -u | \ xargs --null -P "$(nproc)" -I {} "$SHELL" -c '_verify_signature "{}"' -if [ "$(cat %{certs_verify_tmp})" -lt 1 ]; then +if [ -f %{certs_verify_tmp} ]; then echo "ERROR: seems that signatures of none modules were verified!" exit 1 fi -cat %{certs_verify_tmp} rm -f %{certs_verify_tmp} %endif