diff --git a/products/rhel10/profiles/ism_o.profile b/products/rhel10/profiles/ism_o.profile index e30bbdbb37a..1ea97f86008 100644 --- a/products/rhel10/profiles/ism_o.profile +++ b/products/rhel10/profiles/ism_o.profile @@ -42,3 +42,5 @@ selections: - '!rpm_verify_hashes' # this rule should not be needed anymore on RHEL 10, but investigation is recommended - '!openssl_use_strong_entropy' + # Currently not working RHEL 10, changes are being made to FIPS mode. Investigation is recommended. + - '!enable_dracut_fips_module' diff --git a/products/rhel10/profiles/ism_o_secret.profile b/products/rhel10/profiles/ism_o_secret.profile index 798f670b3b6..5870e034f54 100644 --- a/products/rhel10/profiles/ism_o_secret.profile +++ b/products/rhel10/profiles/ism_o_secret.profile @@ -44,3 +44,5 @@ selections: - '!rpm_verify_hashes' # this rule should not be needed anymore on RHEL 10, but investigation is recommended - '!openssl_use_strong_entropy' + # Currently not working RHEL 10, changes are being made to FIPS mode. Investigation is recommended. + - '!enable_dracut_fips_module' diff --git a/products/rhel10/profiles/ism_o_top_secret.profile b/products/rhel10/profiles/ism_o_top_secret.profile index 1c72abd64fe..e73fbb7088a 100644 --- a/products/rhel10/profiles/ism_o_top_secret.profile +++ b/products/rhel10/profiles/ism_o_top_secret.profile @@ -42,3 +42,5 @@ selections: - '!rpm_verify_hashes' # this rule should not be needed anymore on RHEL 10, but investigation is recommended - '!openssl_use_strong_entropy' + # Currently not working RHEL 10, changes are being made to FIPS mode. Investigation is recommended. + - '!enable_dracut_fips_module' diff --git a/products/rhel10/profiles/ospp.profile b/products/rhel10/profiles/ospp.profile index 33ba7ea5b23..9abfd024e29 100644 --- a/products/rhel10/profiles/ospp.profile +++ b/products/rhel10/profiles/ospp.profile @@ -22,3 +22,5 @@ selections: - ospp:all - '!package_screen_installed' - '!package_dnf-plugin-subscription-manager_installed' + # Currently not working RHEL 10, changes are being made to FIPS mode. Investigation is recommended. + - '!enable_dracut_fips_module' diff --git a/products/rhel10/profiles/stig.profile b/products/rhel10/profiles/stig.profile index 1cb3caa2f5e..23f0b9d026f 100644 --- a/products/rhel10/profiles/stig.profile +++ b/products/rhel10/profiles/stig.profile @@ -20,3 +20,5 @@ description: |- selections: - srg_gpos:all + # Currently not working RHEL 10, changes are being made to FIPS mode. Investigation is recommended. + - '!enable_dracut_fips_module' diff --git a/products/rhel10/profiles/stig_gui.profile b/products/rhel10/profiles/stig_gui.profile index 609256d1916..979b5b083b9 100644 --- a/products/rhel10/profiles/stig_gui.profile +++ b/products/rhel10/profiles/stig_gui.profile @@ -32,3 +32,5 @@ selections: - '!sysctl_user_max_user_namespaces' # locking of idle sessions is handled by screensaver when GUI is present, the following rule is therefore redundant - '!logind_session_timeout' + # Currently not working RHEL 10, changes are being made to FIPS mode. Investigation is recommended. + - '!enable_dracut_fips_module'