Skip to content

Commit 52bcc51

Browse files
committed
Remove configure_ssh_crypto_policy from OL9 profiles
The variable CRYPTO_POLICY is no longer honored by sshd on OL 9 Signed-off-by: Armando Acosta <armando.acosta@oracle.com>
1 parent d37c4c4 commit 52bcc51

5 files changed

Lines changed: 5 additions & 3 deletions

File tree

controls/ccn_ol9.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -321,7 +321,7 @@ controls:
321321
- advanced
322322
status: automated
323323
rules:
324-
- configure_ssh_crypto_policy
324+
- configure_crypto_policy
325325

326326
- id: A.5.SEC-OL7
327327
title: Network Session Inactivity is Controlled
@@ -655,7 +655,7 @@ controls:
655655
notes: |-
656656
It overlaps the rule in A.5.SEC-OL6 requirement
657657
related_rules:
658-
- configure_ssh_crypto_policy
658+
- configure_crypto_policy
659659

660660
- id: A.11.SEC-OL7
661661
title: GUI Idle Time is Limited

products/ol9/profiles/e8.profile

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,3 +27,4 @@ selections:
2727
- '!package_talk_removed'
2828
- '!package_talk-server_removed'
2929
- '!ensure_redhat_gpgkey_installed'
30+
- '!configure_ssh_crypto_policy'

products/ol9/profiles/hipaa.profile

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -89,3 +89,4 @@ selections:
8989
- "!sshd_use_approved_ciphers"
9090
- "!sshd_use_approved_macs"
9191
- "!sshd_use_priv_separation"
92+
- "!configure_ssh_crypto_policy"

products/ol9/profiles/ospp.profile

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -135,7 +135,6 @@ selections:
135135
- enable_fips_mode
136136
- var_system_crypto_policy=fips_ospp
137137
- configure_crypto_policy
138-
- configure_ssh_crypto_policy
139138
- configure_openssl_crypto_policy
140139
- enable_dracut_fips_module
141140

products/ol9/profiles/pci-dss.profile

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -62,6 +62,7 @@ selections:
6262
- '!service_timesyncd_enabled'
6363
- '!audit_rules_file_deletion_events_renameat2'
6464
- '!audit_rules_dac_modification_fchmodat2'
65+
- '!configure_ssh_crypto_policy'
6566
# Not applicable to OL9, packages not available in OL9
6667
- '!package_cryptsetup-luks_installed'
6768
- '!service_rpcbind_disabled'

0 commit comments

Comments
 (0)