2.7. Creating and setting a custom system-wide cryptographic policy

For specific scenarios, you can customize the system-wide cryptographic policy by creating and using a complete policy file.

Procedure

Create a policy file for your customizations:

# cd /etc/crypto-policies/policies/
# touch <MYPOLICY>.pol

Alternatively, start by copying one of the four predefined policy levels:

# cp /usr/share/crypto-policies/policies/DEFAULT.pol /etc/crypto-policies/policies/<MYPOLICY>.pol

Edit the file with your custom cryptographic policy in a text editor of your choice to fit your requirements, for example:
```
# vi /etc/crypto-policies/policies/<MYPOLICY>.pol
```
See the Custom Policies section in the update-crypto-policies(8) man page and the Crypto Policy Definition Format section in the crypto-policies(7) man page on your system for the complete syntax reference.
Switch the system-wide cryptographic policy to your custom level:
```
# update-crypto-policies --set <MYPOLICY>
```
To make your cryptographic settings effective for already running services and applications, restart the system:
```
# reboot
```