forked from ansible-lockdown/RHEL9-CIS
6 lines
158 B
Text
6 lines
158 B
Text
|
# This is a subpolicy to disable all CBC mode ciphers
|
||
|
|
# for the SSH protocol (libssh and OpenSSH)
|
||
|
|
# Carried out as part of CIS Benchmark
|
||
|
|
|
||
|
|
cipher@SSH = -*-CBC
|