security: do not crash initramfs ks parsing on failing certificate dump

For example when --dir is pointing to read-only filesystem. Resolves: RHEL-61434
rhinstaller · Jan 17, 2025 · 80c2a46 · 80c2a46
1 parent 49b4979
commit 80c2a46
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/dracut/parse-kickstart b/dracut/parse-kickstart
@@ -438,7 +438,11 @@ def process_certificates(handler):
             log.error("Missing certificate file name, skipping.")
             continue
 
-        _dump_certificate(cert)
+        try:
+            _dump_certificate(cert)
+        except OSError as e:
+            log.error("Dump of certificate %s failed: %s", cert.filename, e)
+            continue
         # Dump for transport to switchroot
         _dump_certificate(cert, root=CERT_TRANSPORT_DIR+"/path/")