What were you trying to do that didn't work?

In RHEL-9 we didn't allowed enabling or disabling FIPS mode by fips-mode-setup tool by non-root users but we allowed to check the state of FIPS mode. On RHEL-10 not even check is allowed. This is a regression when compared to RHEL-9.

Please provide the package NVR for which bug is seen:

crypto-policies-20240522-1.git77963ab.el10

How reproducible:

100%

Steps to reproduce

# useradd testuser
# su -c 'fips-mode-setup --check' -- testuser'

Expected results

Passes as follows:

FIPS mode is disabled.
Initramfs fips module is disabled.
The current crypto policy (DEFAULT) neither is the FIPS policy nor is based on the FIPS policy.

Actual results

Fails as follows:

You must be root to run fips-mode-setup