crypto: fips - add FIPS test failure notification chain

Crypto test failures in FIPS mode cause an immediate panic, but
on some system the cryptographic boundary extends beyond just
the Linux controlled domain.

Add a simple atomic notification chain to allow interested parties
to register to receive notification prior to us kicking the bucket.

Signed-off-by: Gilad Ben-Yossef <gilad@benyossef.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>

1 files changed, 3 insertions, 1 deletions

diff --git a/crypto/testmgr.c b/crypto/testmgr.c
index d0b5b33806a6..8ba1e75cd973 100644
--- a/crypto/testmgr.c
+++ b/crypto/testmgr.c
@@ -5240,9 +5240,11 @@ int alg_test(const char *driver, const char *alg, u32 type, u32 mask)
                                              type, mask);
 
 test_done:
-        if (rc && (fips_enabled || panic_on_fail))
+        if (rc && (fips_enabled || panic_on_fail)) {
+                fips_fail_notify();
                 panic("alg: self-tests for %s (%s) failed in %s mode!\n",
                       driver, alg, fips_enabled ? "fips" : "panic_on_fail");
+        }
 
         if (fips_enabled && !rc)
                 pr_info("alg: self-tests for %s (%s) passed\n", driver, alg);