mirror of
https://github.com/ansible-lockdown/RHEL9-CIS.git
synced 2025-12-24 14:23:05 +00:00
16 lines
393 B
YAML
16 lines
393 B
YAML
|
---
|
||
|
|
|
||
|
|
- name: "1.10 | L1 | PATCH | Ensure system-wide crypto policy is not legacy"
|
||
|
|
shell: |
|
||
|
|
update-crypto-policies --set "{{ rhel9cis_crypto_policy }}"
|
||
|
|
update-crypto-policies
|
||
|
|
when:
|
||
|
|
- rhel9cis_rule_1_10
|
||
|
|
- system_wide_crypto_policy['stdout'] == 'LEGACY'
|
||
|
|
tags:
|
||
|
|
- level1-server
|
||
|
|
- level1-workstation
|
||
|
|
- no system_is_ec2
|
||
|
|
- patch
|
||
|
|
- rule_1.10
|