RHEL9-CIS/tasks/section_1/cis_1.11.yml

---

- name: "1.11 | L2 | PATCH | Ensure system-wide crypto policy is FUTURE or FIPS"
  shell: |
      update-crypto-policies --set "{{ rhel9cis_crypto_policy }}"
      update-crypto-policies
  args:
      warn: false
  when:
      - rhel9cis_rule_1_11
      - system_wide_crypto_policy['stdout'] not in rhel9cis_allowed_crypto_policies
  tags:
      - level2-server
      - level2-workstation
      - not system_is_ec2
      - patch
      - rule_1.11
Initial Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> 2022-01-07 09:06:18 +00:00			`---`

			`- name: "1.11 \| L2 \| PATCH \| Ensure system-wide crypto policy is FUTURE or FIPS"`
			`shell: \|`
			`update-crypto-policies --set "{{ rhel9cis_crypto_policy }}"`
			`update-crypto-policies`
added args warn for shell Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> 2022-01-13 12:08:30 +00:00			`args:`
			`warn: false`
Initial Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> 2022-01-07 09:06:18 +00:00			`when:`
			`- rhel9cis_rule_1_11`
			`- system_wide_crypto_policy['stdout'] not in rhel9cis_allowed_crypto_policies`
			`tags:`
			`- level2-server`
			`- level2-workstation`
			`- not system_is_ec2`
			`- patch`
			`- rule_1.11`