| |
@@ -8,3 +8,13 @@
|
| |
|
| |
The *GRUB EFI* build in Fedora 31 contains the `cryptodisk`, `luks` and `verify` *GRUB* modules. For more details see the xref:sysadmin/Distribution.adoc#grub-modules[Distribution-wide changes] section.
|
| |
|
| |
+
|
| |
+ [[custom-crypto-policies]]
|
| |
+ == Existing system-wide crypto policies can now be customized
|
| |
+
|
| |
+ The `crypto-policies` package has been enhanced and allows users to modify the existing system-wide crypto policy levels by removing or adding enabled algorithms and protocols.
|
| |
+
|
| |
+ For example, it is now possible to easily modify the existing `DEFAULT` policy to disable the `SHA1` support or enable support for a national crypto algorithm that is supported by the crypto libraries but is disabled in the policies.
|
| |
+
|
| |
+ To achieve the above-mentioned outcome, add a simple configuration file and execute the `update-crypto-policies` command.
|
| |
+
|
| |
quiet
commented 4 years ago
Fixes #356