[PATCH 6/6] added text to specify acceptable ciphers
David Smith
dsmith at eclipse.ncsc.mil
Wed Jan 2 18:09:40 UTC 2013
Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
---
RHEL6/input/services/ssh.xml | 3 ++-
1 files changed, 2 insertions(+), 1 deletions(-)
diff --git a/RHEL6/input/services/ssh.xml b/RHEL6/input/services/ssh.xml
index 23031cf..1afa5b8 100644
--- a/RHEL6/input/services/ssh.xml
+++ b/RHEL6/input/services/ssh.xml
@@ -352,7 +352,8 @@ The man page <tt>sshd_config(5)</tt> contains a list of supported ciphers.
Only FIPS-approved ciphers should be used. To verify that only FIPS-approved
ciphers are in use, run the following command:
<pre># grep Ciphers /etc/ssh/sshd_config</pre>
-The output should contain only those ciphers which are FIPS-approved.
+The output should contain only those ciphers which are FIPS-approved, namely, the
+AES and 3DES ciphers.
</ocil>
<rationale>
Approved algorithms should impart some level of confidence in their
--
1.7.1
More information about the scap-security-guide
mailing list