[Swan-dev] how do I really put a test VM in FIPS mode?

[Andrew Cagney]

I'd like to do some testing in true fips mode; no hacks or some such.
I suspect I need to do two things:

- boot the kernel in fips mode
- configure the NSS database directory so that it also goes into fips mode

Andrew

PS: I'm going by this:
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/sect-Security_Guide-Federal_Standards_And_Regulations-Federal_Information_Processing_Standard.html