Update enable_fips_mode Ansible Remedation

[Mab879]

Description:

• Update enable_fips_mode Remedation to follow the style guide
• Move Ansible remedation to multi_platform_all

Rationale:

• Style guide
• Ansible partiy

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

rhel8 (from CTF) Environment (using Fedora as testing environment)

Fedora Testing Environment

Oracle Linux 8 Environment

[github-actions]

This datastream diff is auto generated by the check Compare DS/Generate Diff

Click here to see the full diff

ansible remediation for rule 'xccdf_org.ssgproject.content_rule_enable_fips_mode' differs.
--- xccdf_org.ssgproject.content_rule_enable_fips_mode
+++ xccdf_org.ssgproject.content_rule_enable_fips_mode
@@ -4,8 +4,8 @@
   tags:
     - always
 
-- name: Check to see the current status of FIPS mode
-  command: /usr/bin/fips-mode-setup --check
+- name: Enable FIPS Mode - Check to See the Current Status of FIPS Mode
+  ansible.builtin.command: /usr/bin/fips-mode-setup --check
   register: is_fips_enabled
   ignore_errors: true
   changed_when: false
@@ -30,8 +30,8 @@
   - reboot_required
   - restrict_strategy
 
-- name: Enable FIPS mode
-  command: /usr/bin/fips-mode-setup --enable
+- name: Enable FIPS Mode - Enable FIPS Mode
+  ansible.builtin.command: /usr/bin/fips-mode-setup --enable
   when:
   - ( ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
     and not ( lookup("env", "container") == "bwrap-osbuild" ) )
@@ -54,8 +54,8 @@
   - reboot_required
   - restrict_strategy
 
-- name: Enable FIPS Mode
-  lineinfile:
+- name: Enable FIPS Mode - Configure Crypto Policy
+  ansible.builtin.lineinfile:
     path: /etc/crypto-policies/config
     regexp: ^(?!#)(\S+)$
     line: '{{ var_system_crypto_policy }}'
@@ -81,8 +81,9 @@
   - reboot_required
   - restrict_strategy
 
-- name: Verify that Crypto Policy is Set (runtime)
-  command: /usr/bin/update-crypto-policies --set {{ var_system_crypto_policy }}
+- name: Enable FIPS Mode - Verify that Crypto Policy is Set (runtime)
+  ansible.builtin.command: /usr/bin/update-crypto-policies --set {{ var_system_crypto_policy
+    }}
   when:
   - ( ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
     and not ( lookup("env", "container") == "bwrap-osbuild" ) )

[codeclimate]

Code Climate has analyzed commit 4498569 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 53.3% (0.0% change).

View more on Code Climate.