Currently, the uninstall action is disabled on FIPS systems by this line because the default uninstall process relies on comparing MD5 hashes of the module that's being uninstalled. Josh Cooper had suggestions for how to enable this command on FIPS without running into MD5 issues. Namely, the suggestions are enabling the command so that a user can pass the force or ignore_changes options, which will bypass the MD5-related parts of the uninstall process, and updating the command so that when it is called on a FIPS system without either of those options, a message is emitted telling the user that changes will be ignored and then setting the @ignore_changes option itself. |