<def-group>
    <definition class="compliance" id="configure_custom_crypto_policy_cis" version="1">
        <metadata>
        <title>Implement Custom Crypto Policy Modules for CIS Benchmark</title>
        
    <affected family="unix">
    <platform>Ubuntu 22.04</platform>
    </affected>
        <description>Ensure that the custom crypto policy module is configured</description>
    </metadata>
        <criteria operator="AND" comment="Ensure that all of the correct lines are in the file.">
        
            <criterion comment="Check that cipher@SSH is configured in NO-SSHCBC.pmod"
                       test_ref="test_configure_custom_crypto_policy_cis_NO-SSHCBC"/>
        
        </criteria>
    </definition>
        
        <ind:textfilecontent54_test check="all"
                                    comment="Tests that cipher@SSH is configured correctly."
                                    id="test_configure_custom_crypto_policy_cis_NO-SSHCBC" version="1">

            <ind:object object_ref="obj_configure_custom_crypto_policy_cis_NO-SSHCBC"/>
        </ind:textfilecontent54_test>
        <ind:textfilecontent54_object id="obj_configure_custom_crypto_policy_cis_NO-SSHCBC" version="1">
            <ind:path>/etc/crypto-policies/policies/modules/</ind:path>
            <ind:filename>NO-SSHCBC.pmod</ind:filename>
            <ind:pattern operation="pattern match">^cipher@SSH = \-\*\-CBC$</ind:pattern>
            <ind:instance datatype="int">1</ind:instance>
        </ind:textfilecontent54_object>
        
</def-group>