From 6d10ec11ab43cbc5e5f608264748de44ccdd287c Mon Sep 17 00:00:00 2001 From: Jaroslav Klech Date: Oct 22 2019 15:46:27 +0000 Subject: Describes issue 356 --- diff --git a/modules/release-notes/pages/sysadmin/Security.adoc b/modules/release-notes/pages/sysadmin/Security.adoc index 484eee3..1b928f2 100644 --- a/modules/release-notes/pages/sysadmin/Security.adoc +++ b/modules/release-notes/pages/sysadmin/Security.adoc @@ -8,3 +8,13 @@ include::{partialsdir}/entities.adoc[] The *GRUB EFI* build in Fedora 31 contains the `cryptodisk`, `luks` and `verify` *GRUB* modules. For more details see the xref:sysadmin/Distribution.adoc#grub-modules[Distribution-wide changes] section. + +[[custom-crypto-policies]] +== Existing system-wide crypto policies can now be customized + +The `crypto-policies` package has been enhanced and allows users to modify the existing system-wide crypto policy levels by removing or adding enabled algorithms and protocols. + +For example, it is now possible to easily modify the existing `DEFAULT` policy to disable the `SHA1` support or enable support for a national crypto algorithm that is supported by the crypto libraries but is disabled in the policies. + +To achieve the above-mentioned outcome, add a simple configuration file and execute the `update-crypto-policies` command. +