<def-group>
  <definition class="compliance" id="sysctl_crypto_fips_enabled" version="1">
    {{{ oval_metadata("The kernel 'crypto.fips_enabled' parameter should be set to '1' in system runtime.") }}}
    <criteria operator="AND">
      <criterion comment="kernel runtime parameter crypto.fips_enabled set to 1" test_ref="test_sysctl_crypto_fips_enabled" />
    </criteria>
  </definition>

  <ind:textfilecontent54_test check="all" check_existence="all_exist"
   comment="kernel runtime parameter crypto.fips_enabled set to 1"
   id="test_sysctl_crypto_fips_enabled" version="1">
    <ind:object object_ref="obj_sysctl_crypto_fips_enabled" />
  </ind:textfilecontent54_test>

  <ind:textfilecontent54_object id="obj_sysctl_crypto_fips_enabled" version="1">
    <ind:filepath>/proc/sys/crypto/fips_enabled</ind:filepath>
    <ind:pattern operation="pattern match">^1$</ind:pattern>
    <ind:instance datatype="int">1</ind:instance>
  </ind:textfilecontent54_object>

</def-group>
