Bug 745571

Description of problem: 
Reported by Rich Megginson

>>>  modutil -dbdir /etc/dirsrv/slapd-inst -fips true
>>>  FIPS mode enabled.
>>>
>>>  When FIPS mode is disabled, everything works fine, no AVCs.
>>>
>>>  Bob/Elio - any idea why this is happening?  Has NSS FIPS mode been
>>>  tested with SELinux set to Enforcing?
>>  NSS is launching prelink  in FIPS mode. NSS needs to validate the
>> shared
>>  library, but prelink may have modified it. NSS needs to launch prelink
>>  to get the unmodified shared library bits to validate in FIPS mode.
>>  You'll need to add whatever policy you need to allow /usr/sbin/prelink
>>  to run if you are using NSS.

> I can't even test this on F-14 and later (NSS 3.12.10)
> $ mkdir /var/tmp/junk
> $ certutil -d /var/tmp/junk -N
> ##### create database with 8 character password
> $ modutil -dbdir /var/tmp/junk -fips true
> security library: invalid arguments.
> ERROR: Unable to switch FIPS modes.
> # modutil -force gives the same error
> # setenforce Permissive - gives the same error
> I get this same error on both F-14 and F-16 (using NSS 3.12.10) - the
> same set of commands work fine on RHEL 6 (NSS 3.12.9)

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1. mkdir /var/tmp/junk
2. certutil -d /var/tmp/junk -N 
(enter a password twice as prompted with)
3. modutil -dbdir /var/tmp/junk -fips true
Actual results:
  ERROR: Unable to switch FIPS modes.

Expected results:
  FIPS mode enabled.

Additional info: