[PATCH 12/25] Mapped CCI-000779 to ssh_server.

Willy Santos wsantos at redhat.com
Tue Jul 3 00:51:10 UTC 2012


CCI-000779 requires the OS to cryptographically authenticate devices before establishing remote network connections. SSH host identification can be used to satisfy this requirement.

Signed-off-by: Willy Santos <wsantos at redhat.com>
---
 rhel6/src/input/services/ssh.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/rhel6/src/input/services/ssh.xml b/rhel6/src/input/services/ssh.xml
index c23907d..293f981 100644
--- a/rhel6/src/input/services/ssh.xml
+++ b/rhel6/src/input/services/ssh.xml
@@ -38,7 +38,7 @@ certain changes should be made to the OpenSSH daemon configuration
 file <tt>/etc/ssh/sshd_config</tt>. The following recommendations can be
 applied to this file. See the <tt>sshd_config(5)</tt> man page for more
 detailed information.</description>
-<ref disa="68,197,888,1632" />
+<ref disa="68,197,888,1632,779" />
 
 <Rule id="sshd_allow_only_protocol2" severity="high">
 <title>Allow Only SSH Protocol 2</title>
-- 
1.7.7.6



More information about the scap-security-guide mailing list