Comment 10 for bug 1926664

Correct, it just generates the config files, but they are not included by anything. You can manually edit all the individual configuration files for the services you want to participate in the policy if you want. For krb5 and ssh server, for example, add an include statement. Likewise for bind9, and openssl (a bit trickier these, as you have to find the right section). gnutls is simpler, just /etc/gnutls/config (you can symlink it to the back-ends corresponding config snippet), and so on. Still, this bug remains valid.