CCI-000781 requires the OS to cryptographically authenticate devices before establishing
network connections. SSH host identification can be used to satisfy this requirement.
Signed-off-by: Willy Santos <wsantos(a)redhat.com>
---
rhel6/src/input/services/ssh.xml | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/rhel6/src/input/services/ssh.xml b/rhel6/src/input/services/ssh.xml
index 293f981..8e12914 100644
--- a/rhel6/src/input/services/ssh.xml
+++ b/rhel6/src/input/services/ssh.xml
@@ -38,7 +38,7 @@ certain changes should be made to the OpenSSH daemon configuration
file <tt>/etc/ssh/sshd_config</tt>. The following recommendations can be
applied to this file. See the <tt>sshd_config(5)</tt> man page for more
detailed information.</description>
-<ref disa="68,197,888,1632,779" />
+<ref disa="68,197,888,1632,779,781" />
<Rule id="sshd_allow_only_protocol2" severity="high">
<title>Allow Only SSH Protocol 2</title>
--
1.7.7.6