RHEL9-CIS/templates/etc/crypto-policies/policies/modules/NO-SSHCBC.pmod.j2

{{ file_managed_by_ansible }}
# This is a subpolicy to disable all CBC mode ciphers
# for the SSH protocol (libssh and OpenSSH)
# Carried out as part of CIS Benchmark rule 1.6.5

cipher@SSH = -*-CBC
Update .j2 branding Signed-off-by: Frederick Witty <frederick.witty@gotyto.com> 2026-02-11 15:39:59 -05:00			`{{ file_managed_by_ansible }}`
section1 v2 initial Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> 2024-07-19 17:01:23 +01:00			`# This is a subpolicy to disable all CBC mode ciphers`
			`# for the SSH protocol (libssh and OpenSSH)`
Initial pmod templates for ssh control Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> 2024-07-24 14:02:51 +01:00			`# Carried out as part of CIS Benchmark rule 1.6.5`
section1 v2 initial Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> 2024-07-19 17:01:23 +01:00
			`cipher@SSH = -*-CBC`