[PATCH 13/25] Mapped CCI-000781 to ssh_server.

Willy Santos wsantos at redhat.com
Tue Jul 3 00:51:11 UTC 2012


CCI-000781 requires the OS to cryptographically authenticate devices before establishing network connections. SSH host identification can be used to satisfy this requirement.

Signed-off-by: Willy Santos <wsantos at redhat.com>
---
 rhel6/src/input/services/ssh.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/rhel6/src/input/services/ssh.xml b/rhel6/src/input/services/ssh.xml
index 293f981..8e12914 100644
--- a/rhel6/src/input/services/ssh.xml
+++ b/rhel6/src/input/services/ssh.xml
@@ -38,7 +38,7 @@ certain changes should be made to the OpenSSH daemon configuration
 file <tt>/etc/ssh/sshd_config</tt>. The following recommendations can be
 applied to this file. See the <tt>sshd_config(5)</tt> man page for more
 detailed information.</description>
-<ref disa="68,197,888,1632,779" />
+<ref disa="68,197,888,1632,779,781" />
 
 <Rule id="sshd_allow_only_protocol2" severity="high">
 <title>Allow Only SSH Protocol 2</title>
-- 
1.7.7.6



More information about the scap-security-guide mailing list