sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

Initial pmod templates for ssh control

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2024-07-24 14:02:51 +01:00
parent a36a84c5ea
commit 5c5499fd72
No known key found for this signature in database
GPG key ID: 997FF7FE93AEB5B9
7 changed files with 12 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

2
templates/etc/crypto-policies/policies/modules/NO-SSHETM.pmod.j2
View file

@ -1,5 +1,5 @@
# This is a subpolicy to disable Encrypt then MAC
# for the SSH protocol (libssh and OpenSSH)
# Carried out as part of CIS Benchmark
# Carried out as part of CIS Benchmark rule 1.6.7
etm@SSH = DISABLE_ETM