ComplianceAsCode / ComplianceAsCode/content
Rule harden_sshd_ciphers_openssh_conf_crypto_policy and harden_sshd_ciphers_opensshserver_conf_crypto_policy do not align with DISA STIG RHEL 9 V1R2
- Dominant language
- Shell
- Stars
- 2.8k
- Forks
- 828
- Avg merge
- 3d 8m
- Merged PRs (30d)
- 80
Description
#### Description of problem:
Rule harden_sshd_ciphers_openssh_conf_crypto_policy and harden_sshd_ciphers_opensshserver_conf_crypto_policy do not align with DISA STIG RHEL 9 V1R2.
#### Details:
This content is not aligned with content from DISA STIG RHEL 9 V1R2
The misalignment affects these profiles: STIG and STIG with GUI
The misalignment affects these rules: harden_sshd_ciphers_openssh_conf_crypto_policy and harden_sshd_ciphers_opensshserver_conf_crypto_policy
Rule is looking for "Ciphers aes256-ctr,aes192-ctr,aes128-ctr,aes256-gcm@openssh.com,aes128-gcm@openssh.com" whereas DISA check is looking for "Ciphers aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr"
STIG ID: RHEL-09-255065
#### SCAP Security Guide Version: 0.1.72
#### External Content's Version: V1R2
Contributor guide
Assessment
This issue has not been assessed yet.