Daniel Kopecek e6458e
diff -up ./src/aide.c.orig ./aide-0.16b1/src/aide.c
Daniel Kopecek e6458e
--- ./src/aide.c.orig	2016-07-12 11:10:08.013158385 +0200
Daniel Kopecek e6458e
+++ ./src/aide.c	2016-07-12 11:30:54.867833064 +0200
Daniel Kopecek e6458e
@@ -511,9 +511,28 @@ int main(int argc,char**argv)
Daniel Kopecek 0c33c3
 #endif
Daniel Kopecek 0c33c3
   umask(0177);
Daniel Kopecek 0c33c3
   init_sighandler();
Daniel Kopecek 0c33c3
-
Daniel Kopecek 0c33c3
   setdefaults_before_config();
Daniel Kopecek 0c33c3
 
Daniel Kopecek 0c33c3
+#if WITH_GCRYPT
Daniel Kopecek 0c33c3
+  error(255,"Gcrypt library initialization\n");
Daniel Kopecek 0c33c3
+  /*
Daniel Kopecek 0c33c3
+   *  Initialize libgcrypt as per
Daniel Kopecek 0c33c3
+   *  http://www.gnupg.org/documentation/manuals/gcrypt/Initializing-the-library.html
Daniel Kopecek 0c33c3
+   *
Daniel Kopecek 0c33c3
+   *
Daniel Kopecek 0c33c3
+   */
Daniel Kopecek 0c33c3
+  gcry_control(GCRYCTL_SET_ENFORCED_FIPS_FLAG, 0);
Daniel Kopecek 0c33c3
+  gcry_control(GCRYCTL_INIT_SECMEM, 1);
Daniel Kopecek 0c33c3
+
Daniel Kopecek 0c33c3
+  if(!gcry_check_version(GCRYPT_VERSION)) {
Daniel Kopecek 0c33c3
+      error(0,"libgcrypt version mismatch\n");
Daniel Kopecek 0c33c3
+      exit(VERSION_MISMATCH_ERROR);
Daniel Kopecek 0c33c3
+  }
Daniel Kopecek 0c33c3
+
Daniel Kopecek 0c33c3
+  gcry_control(GCRYCTL_INITIALIZATION_FINISHED, 0);
Daniel Kopecek 0c33c3
+#endif /* WITH_GCRYPT */
Daniel Kopecek 0c33c3
+
Daniel Kopecek 0c33c3
+
Daniel Kopecek 0c33c3
   if(read_param(argc,argv)==RETFAIL){
Daniel Kopecek 0c33c3
     error(0, _("Invalid argument\n") );
Daniel Kopecek 0c33c3
     exit(INVALID_ARGUMENT_ERROR);
Daniel Kopecek e6458e
@@ -646,6 +665,9 @@ int main(int argc,char**argv)
Daniel Kopecek 0c33c3
     }
Daniel Kopecek 0c33c3
 #endif
Daniel Kopecek 0c33c3
   }
Daniel Kopecek 0c33c3
+#ifdef WITH_GCRYPT
Daniel Kopecek 0c33c3
+  gcry_control(GCRYCTL_TERM_SECMEM, 0);
Daniel Kopecek 0c33c3
+#endif /* WITH_GCRYPT */
Daniel Kopecek 0c33c3
   return RETOK;
Daniel Kopecek 0c33c3
 }
Daniel Kopecek 0c33c3
 const char* aide_key_3=CONFHMACKEY_03;
Daniel Kopecek e6458e
diff -up ./src/md.c.orig ./aide-0.16b1/src/md.c
Daniel Kopecek e6458e
--- ./src/md.c.orig	2016-04-15 23:30:16.000000000 +0200
Daniel Kopecek e6458e
+++ ./src/md.c	2016-07-12 11:35:04.007675329 +0200
Daniel Kopecek 0c33c3
@@ -201,14 +201,7 @@ int init_md(struct md_container* md) {
Daniel Kopecek 0c33c3
   }
Daniel Kopecek 0c33c3
 #endif 
Daniel Kopecek 0c33c3
 #ifdef WITH_GCRYPT
Daniel Kopecek 0c33c3
-  error(255,"Gcrypt library initialization\n");
Daniel Kopecek 0c33c3
-  	if(!gcry_check_version(GCRYPT_VERSION)) {
Daniel Kopecek 0c33c3
-		error(0,"libgcrypt version mismatch\n");
Daniel Kopecek 0c33c3
-		exit(VERSION_MISMATCH_ERROR);
Daniel Kopecek 0c33c3
-	}
Daniel Kopecek 0c33c3
-	gcry_control(GCRYCTL_DISABLE_SECMEM, 0);
Daniel Kopecek 0c33c3
-	gcry_control(GCRYCTL_INITIALIZATION_FINISHED, 0);
Daniel Kopecek 0c33c3
-	if(gcry_md_open(&md->mdh,0,0)!=GPG_ERR_NO_ERROR){
Daniel Kopecek e6458e
+        if(gcry_md_open(&md->mdh,0,GCRY_MD_FLAG_SECURE)!=GPG_ERR_NO_ERROR){
Daniel Kopecek 0c33c3
 		error(0,"gcrypt_md_open failed\n");
Daniel Kopecek 0c33c3
 		exit(IO_ERROR);
Daniel Kopecek 0c33c3
 	}
Daniel Kopecek 0c33c3
@@ -299,7 +292,7 @@ int close_md(struct md_container* md) {
Daniel Kopecek 0c33c3
   
Daniel Kopecek 0c33c3
   /*.    There might be more hashes in the library. Add those here..   */
Daniel Kopecek 0c33c3
   
Daniel Kopecek 0c33c3
-  gcry_md_reset(md->mdh);
Daniel Kopecek 0c33c3
+  gcry_md_close(md->mdh);
Daniel Kopecek 0c33c3
 #endif  
Daniel Kopecek 0c33c3
 
Daniel Kopecek 0c33c3
 #ifdef WITH_MHASH
Daniel Kopecek e6458e
diff -up ./src/util.c.orig ./aide-0.16b1/src/util.c
Daniel Kopecek e6458e
--- ./src/util.c.orig	2016-07-12 11:39:17.023437355 +0200
Daniel Kopecek e6458e
+++ ./src/util.c	2016-07-12 11:39:51.618721157 +0200
Daniel Kopecek e6458e
@@ -519,28 +519,5 @@ int syslog_facility_lookup(char *s)
Daniel Kopecek 0c33c3
 	return(AIDE_SYSLOG_FACILITY);
Daniel Kopecek 0c33c3
 }
Daniel Kopecek 0c33c3
 
Daniel Kopecek 0c33c3
-/* We need these dummy stubs to fool the linker into believing that
Daniel Kopecek 0c33c3
-   we do not need them at link time */
Daniel Kopecek 0c33c3
-
Daniel Kopecek 0c33c3
-void* dlopen(char*filename,int flag)
Daniel Kopecek 0c33c3
-{
Daniel Kopecek 0c33c3
-  return NULL;
Daniel Kopecek 0c33c3
-}
Daniel Kopecek 0c33c3
-
Daniel Kopecek 0c33c3
-void* dlsym(void*handle,char*symbol)
Daniel Kopecek 0c33c3
-{
Daniel Kopecek 0c33c3
-  return NULL;
Daniel Kopecek 0c33c3
-}
Daniel Kopecek 0c33c3
-
Daniel Kopecek 0c33c3
-void* dlclose(void*handle)
Daniel Kopecek 0c33c3
-{
Daniel Kopecek 0c33c3
-  return NULL;
Daniel Kopecek 0c33c3
-}
Daniel Kopecek 0c33c3
-
Daniel Kopecek 0c33c3
-const char* dlerror(void)
Daniel Kopecek 0c33c3
-{
Daniel Kopecek 0c33c3
-  return NULL;
Daniel Kopecek 0c33c3
-}
Daniel Kopecek 0c33c3
-
Daniel Kopecek 0c33c3
 const char* aide_key_2=CONFHMACKEY_02;
Daniel Kopecek 0c33c3
 const char* db_key_2=DBHMACKEY_02;