Remove configure_ssh_crypto_policy from OL10 profiles

mrkanon · mrkanon · commit 75f3d19f0e28 · 2026-03-11T07:15:59.000-06:00
The variable CRYPTO_POLICY is no longer honored by sshd on OL10

Signed-off-by: Armando Acosta &lt;armando.acosta@oracle.com&gt;
diff --git a/products/ol10/profiles/e8.profile b/products/ol10/profiles/e8.profile
@@ -33,3 +33,4 @@ selections:
     # authselect is enabled by default
     - '!enable_authselect'
     - var_authselect_profile=local
+    - '!configure_ssh_crypto_policy'
diff --git a/products/ol10/profiles/hipaa.profile b/products/ol10/profiles/hipaa.profile
@@ -61,6 +61,7 @@ selections:
     - '!sshd_disable_kerb_auth'
     - '!sshd_disable_gssapi_auth'
     - '!service_rlogin_disabled'
+    - '!configure_ssh_crypto_policy'
 
     # authselect is enabled by default
     - '!enable_authselect'
diff --git a/products/ol10/profiles/ism_o.profile b/products/ol10/profiles/ism_o.profile
@@ -75,6 +75,7 @@ selections:
     - '!accounts_password_all_shadowed'
     - '!usbguard_allow_hid_and_hub'
     - '!sshd_allow_only_protocol2'
+    - '!configure_ssh_crypto_policy'
 
     # Older rules, no longer needed
     - '!security_patches_up_to_date'
diff --git a/products/ol10/profiles/ism_o_secret.profile b/products/ol10/profiles/ism_o_secret.profile
@@ -76,6 +76,7 @@ selections:
     - "!usbguard_allow_hid_and_hub"
     - "!sshd_allow_only_protocol2"
     - var_authselect_profile=local
+    - "!configure_ssh_crypto_policy"
 
     # Needed for references in other products
     - '!security_patches_up_to_date'
diff --git a/products/ol10/profiles/ism_o_top_secret.profile b/products/ol10/profiles/ism_o_top_secret.profile
@@ -76,6 +76,7 @@ selections:
     - "!usbguard_allow_hid_and_hub"
     - "!sshd_allow_only_protocol2"
     - var_authselect_profile=local
+    - "!configure_ssh_crypto_policy"
 
     # Needed for references in other products
     - '!security_patches_up_to_date'
diff --git a/products/ol10/profiles/ospp.profile b/products/ol10/profiles/ospp.profile
@@ -65,3 +65,4 @@ selections:
     - '!zipl_page_alloc_shuffle_argument'
     - '!zipl_systemd_debug-shell_argument_absent'
     - var_authselect_profile=local
+    - '!configure_ssh_crypto_policy'
diff --git a/products/ol10/profiles/pci-dss.profile b/products/ol10/profiles/pci-dss.profile
@@ -77,3 +77,4 @@ selections:
     #  Irrelevant for ol10
     - '!enable_dconf_user_profile'
     - var_authselect_profile=local
+    - '!configure_ssh_crypto_policy'
