forked from ansible-lockdown/RHEL9-CIS
4 lines
319 B
Django/Jinja
4 lines
319 B
Django/Jinja
# This is a subpolicy to disable weak ciphers
|
|
# for the SSH protocol (libssh and OpenSSH)
|
|
# Carried out as part of CIS Benchmark rules combined 1.6.6 and 5.1.4
|
|
cipher@SSH ={% if rhel9cis_rule_1_6_6 %} -CHACHA20-POLY1305{% endif %}{% if rhel9cis_rule_5_1_4 %} -3DES-CBC -AES-128-CBC -AES-192-CBC -AES-256-CBC{% endif %}
|