{{{ oval_metadata("Check if FIPS mode is enabled on the system") }}} {{% if "ol" in product or "rhel" in product %}} {{% if product in ["ol8", "rhel8"] %}} {{% else %}} {{% endif %}} {{% endif %}}
^/boot/loader/entries/.*.conf
^options (.*)$
1
^(?:.*\s)?fips=1(?:\s.*)?$
var_system_crypto_policy
{{% if product in ["ol9","rhel9"] -%}} ^FIPS(:OSPP)?$ {{%- else %}} {{# Legacy and more relaxed list of crypto policies that were historically considered FIPS-compatible. More recent products should use the more restricted list of options #}} ^FIPS(:(OSPP|NO-SHA1|NO-CAMELLIA))?$ {{%- endif %}}

{{% if product in ["ol8","rhel8"] %}}

/boot/grub2/grubenv
fips=1
1
{{% endif %}}