[PATCH 6/6] added text to specify acceptable ciphers

David Smith dsmith at eclipse.ncsc.mil
Wed Jan 2 18:09:40 UTC 2013


Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
---
 RHEL6/input/services/ssh.xml |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/RHEL6/input/services/ssh.xml b/RHEL6/input/services/ssh.xml
index 23031cf..1afa5b8 100644
--- a/RHEL6/input/services/ssh.xml
+++ b/RHEL6/input/services/ssh.xml
@@ -352,7 +352,8 @@ The man page <tt>sshd_config(5)</tt> contains a list of supported ciphers.
 Only FIPS-approved ciphers should be used.  To verify that only FIPS-approved 
 ciphers are in use, run the following command:
 <pre># grep Ciphers /etc/ssh/sshd_config</pre>
-The output should contain only those ciphers which are FIPS-approved.
+The output should contain only those ciphers which are FIPS-approved, namely, the 
+AES and 3DES ciphers.
 </ocil>
 <rationale>
 Approved algorithms should impart some level of confidence in their
-- 
1.7.1



More information about the scap-security-guide mailing list