switch to only_if

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

Author: schurzi

controls/sshd_spec.rb

@@ -508,12 +508,14 @@
   impact 1.0
   title 'Server: CRYPTO_POLICY'
   desc 'Verifies, that we are not running CRYPTO_POLICY and our settings from sshd_config are effective'
-  if os[:family] == 'redhat' && ::Gem::Version.new(os.release) > ::Gem::Version.new('8')
-    describe bash("pgrep -af 'sshd -D'") do
-      its('exit_status') { should eq 0 }
-      its('stdout') { should_not match('-oCiphers') }
-      its('stdout') { should_not match('-oKexAlgorithms') }
-      its('stdout') { should_not match('-oHostKeyAlgorithms') }
-    end
+  only_if('OS is RHEL 8+ or compatible') do
+    os[:family] == 'redhat' && ::Gem::Version.new(os.release) > ::Gem::Version.new('8')
+  end
+
+  describe bash("pgrep -af 'sshd -D'") do
+    its('exit_status') { should eq 0 }
+    its('stdout') { should_not match('-oCiphers') }
+    its('stdout') { should_not match('-oKexAlgorithms') }
+    its('stdout') { should_not match('-oHostKeyAlgorithms') }
   end
 end