What were you trying to do?

• Using the crypto_policies role to set policies.
• When a user modifies a policy in /etc/crypto-policies/policies/modules/CUSTOMPOLICY.pmod, the role does not recognize that the file has changed, and therefore does not reapply the changed policy.

Impact:

Changes in the policy do not take effect until the `update-crypto-policies --set DEFAULT:CUSTOMPOLICY` command is run.

Proposed solution:

Enhance the redhat.rhel_system_roles.crypto_policies to detect changes in .pmod files and reapply the policy. 

Package:

rhel-system-roles-1.108.6-0.1.el9.noarch

Steps to reproduce

1. Create a policy in /etc/crypto-policies/policies/modules/CUSTOMPOLICY.pmod
2. Use redhat.rhel_system_roles.crypto_policies role to apply the policy.
3. Make a change in /etc/crypto-policies/policies/modules/CUSTOMPOLICY.pmod