Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-56922

fips-mode-setup --check reports inconsistent state

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • rhel-10.0.beta
    • crypto-policies
    • None
    • Yes
    • Low
    • rhel-sst-security-crypto
    • ssg_security
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • All
    • None

      What were you trying to do that didn't work?

      There is an inconsistent FIPS state on recent RHEL-10-Beta composes reported by fips-mode-setup tool

      Please provide the package NVR for which bug is seen:

      crypto-policies-20240822-1.git367040b.el10.noarch

      dracut-102-2.el10.x86_64

      How reproducible:

      100%

      Steps to reproduce

      1. fips-mode-setup --check

      Expected results (on RHEL-10.0-20240818.0)

      # fips-mode-setup --check
      FIPS mode is disabled.
      Initramfs fips module is disabled.
      The current crypto policy (DEFAULT) neither is the FIPS policy nor is based on the FIPS policy.
      

      Actual results (RHEL-10.0-20240826.1)

      # fips-mode-setup --check
      FIPS mode is disabled.
      Initramfs fips module is enabled.
      The current crypto policy (DEFAULT) neither is the FIPS policy nor is based on the FIPS policy.
      Inconsistent state detected.

              asosedki@redhat.com Alexander Sosedkin
              omoris Ondrej Moris
              Alexander Sosedkin Alexander Sosedkin
              Ondrej Moris Ondrej Moris
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: