RHEL9-CIS/templates/etc/crypto-policies/policies/modules/NO-SSHCBC.pmod.j2

# This is a subpolicy to disable all CBC mode ciphers
# for the SSH protocol (libssh and OpenSSH)
# Carried out as part of CIS Benchmark rule 1.6.5

cipher@SSH = -*-CBC
section1 v2 initial Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> 2024-07-19 17:01:23 +01:00			`# This is a subpolicy to disable all CBC mode ciphers`
			`# for the SSH protocol (libssh and OpenSSH)`
Initial pmod templates for ssh control Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> 2024-07-24 14:02:51 +01:00			`# Carried out as part of CIS Benchmark rule 1.6.5`
section1 v2 initial Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> 2024-07-19 17:01:23 +01:00
			`cipher@SSH = -*-CBC`