[PATCH] Changes to SSHD Ciphers

Andrew Gilmore agilmore2 at gmail.com
Wed Jul 10 18:03:52 UTC 2013


---
 RHEL6/input/checks/sshd_use_approved_ciphers.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/RHEL6/input/checks/sshd_use_approved_ciphers.xml b/RHEL6/input/checks/sshd_use_approved_ciphers.xml
index 267fe93..1807d56 100644
--- a/RHEL6/input/checks/sshd_use_approved_ciphers.xml
+++ b/RHEL6/input/checks/sshd_use_approved_ciphers.xml
@@ -21,7 +21,7 @@
   <ind:textfilecontent54_object id="obj_20251" version="1">
     <ind:path>/etc/ssh</ind:path>
     <ind:filename>sshd_config</ind:filename>
-    <ind:pattern operation="pattern match">^\s*Ciphers\s*aes128-ctr,aes192-ctr,aes256-ctr\s*$</ind:pattern>
+    <ind:pattern operation="pattern match">^\s*Ciphers\s*aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,aes192-cbc,aes256-cbc\s*$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance> 
   </ind:textfilecontent54_object>
 </def-group>
-- 
1.7.1



More information about the scap-security-guide mailing list