mirror of
https://github.com/ansible-lockdown/RHEL9-CIS.git
synced 2025-12-24 22:23:06 +00:00
4 lines
319 B
Django/Jinja
4 lines
319 B
Django/Jinja
# This is a subpolicy to disable weak ciphers
|
|
# for the SSH protocol (libssh and OpenSSH)
|
|
# Carried out as part of CIS Benchmark rules combined 1.6.6 and 5.1.4
|
|
cipher@SSH ={% if rhel9cis_rule_1_6_6 %} -CHACHA20-POLY1305{% endif %}{% if rhel9cis_rule_5_1_5 %} -3DES-CBC -AES-128-CBC -AES-192-CBC -AES-256-CBC{% endif %}
|