<def-group>
  <definition class="compliance" id="{{{ rule_id}}}" version="1">
    {{{ oval_metadata("No or the correct crypto sub-policy must be configured.", rule_title=rule_title) }}}
      <criteria>
          <criterion comment="Correct sub policy enabled" test_ref="test_{{{ rule_id }}}" />
      </criteria>
  </definition>

    <ind:textfilecontent54_test check="all" check_existence="all_exist"
  comment="Correct sub policy enabled" id="test_{{{ rule_id }}}" version="1">
    <ind:object object_ref="object_{{{ rule_id }}}" />
  </ind:textfilecontent54_test>

  <ind:textfilecontent54_object id="object_{{{ rule_id }}}" version="1">
    <ind:filepath>/etc/crypto-policies/config</ind:filepath>
    <ind:pattern operation="pattern match">^FIPS$|^FIPS:(OSPP|NO-SHA1|NO-CAMELLIA|ECDHE-ONLY|STIG)$</ind:pattern>
    <ind:instance datatype="int">1</ind:instance>
  </ind:textfilecontent54_object>
</def-group>
