[PATCH 45/64] Updated SSH mappings for IA-5(1)(c)
Shawn Wells
shawn.d.wells at gmail.com
Fri Apr 26 02:16:55 UTC 2013
-------------- next part --------------
>From 96b439d473f719a1dffc3022f50675d7608ca14e Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 25 Apr 2013 20:18:28 -0400
Subject: [PATCH 45/64] Updated SSH mappings for IA-5(1)(c)
NIST req calls for encryption, mapping to use of FIPS and SSHv2
---
RHEL6/input/services/ssh.xml | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/RHEL6/input/services/ssh.xml b/RHEL6/input/services/ssh.xml
index d9de675..b5e0ef7 100644
--- a/RHEL6/input/services/ssh.xml
+++ b/RHEL6/input/services/ssh.xml
@@ -80,7 +80,7 @@ should not be used.
</rationale>
<ident cce="27072-8" />
<oval id="sshd_protocol_2" />
-<ref nist="AC-17(7)" disa="776,774,1436" />
+<ref nist="AC-17(7),IA-5(1)(c)" disa="776,774,1436" />
<tested by="DS" on="20121024"/>
</Rule>
@@ -363,7 +363,7 @@ implementation. These are also required for compliance.
</rationale>
<ident cce="26555-3" />
<oval id="sshd_use_approved_ciphers" />
-<ref nist="AC-3,AC-17(2),AU-10(5)" disa="803,1144,1145,1146" />
+<ref nist="AC-3,AC-17(2),AU-10(5),IA-5(1)(c)" disa="803,1144,1145,1146" />
<tested by="DS" on="20121024"/>
</Rule>
--
1.7.1
More information about the scap-security-guide
mailing list