mirror of
https://github.com/ansible-lockdown/RHEL9-CIS-Audit.git
synced 2026-06-01 18:40:41 +00:00
Mark Bolwell
21 lines
449 B
YAML
21 lines
449 B
YAML
{{ if .Vars.rhel9cis_rule_1_10 }}
|
|
command:
|
|
crypto_policies_config:
|
|
title: 1.10 | Ensure system-wide crypto policy is not legacy
|
|
exec: cat /etc/crypto-policies/config
|
|
exit-status: 0
|
|
stdout:
|
|
- '/^(|\s+)(DEFAULT|FUTURE|FIPS)/'
|
|
- '!/^(|\s+)LEGACY/'
|
|
meta:
|
|
server: 1
|
|
workstation: 1
|
|
CIS_ID:
|
|
- 1.10
|
|
CISv8:
|
|
- 3.10
|
|
CISv8_IG1: false
|
|
CISv8_IG2: true
|
|
CISv8_IG3: true
|
|
{{ end }}
|