Merge pull request #12324 from mrkanon/ansible-harden_sshd_ciphers

Update ansible remediation to harden_sshd_ciphers_openssh_conf_crypto_policy rule
ComplianceAsCode · Sep 4, 2024 · 00e258c · 00e258c
2 parents 7523107 + b5f8367
commit 00e258c
Show file tree

Hide file tree

Showing 9 changed files with 17 additions and 17 deletions.
diff --git a/...ftware/integrity/crypto/harden_sshd_ciphers_openssh_conf_crypto_policy/ansible/shared.yml b/...ftware/integrity/crypto/harden_sshd_ciphers_openssh_conf_crypto_policy/ansible/shared.yml
@@ -1,4 +1,4 @@
-# platform = Oracle Linux 8,Red Hat Enterprise Linux 8,multi_platform_fedora
+# platform = Oracle Linux 8,Oracle Linux 9,Red Hat Enterprise Linux 8,multi_platform_fedora
 # reboot = true
 # strategy = restrict
 # complexity = low

diff --git a/...ntegrity/crypto/harden_sshd_ciphers_openssh_conf_crypto_policy/tests/stig_correct.pass.sh b/...ntegrity/crypto/harden_sshd_ciphers_openssh_conf_crypto_policy/tests/stig_correct.pass.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
-# platform = Oracle Linux 8,Red Hat Enterprise Linux 8,multi_platform_fedora
-# profiles = xccdf_org.ssgproject.content_profile_stig
+# platform = Oracle Linux 8,Oracle Linux 9,Red Hat Enterprise Linux 8,multi_platform_fedora
+# variables = sshd_approved_ciphers=aes256-ctr,aes192-ctr,aes128-ctr
 
 sshd_approved_ciphers=aes256-ctr,aes192-ctr,aes128-ctr
 configfile=/etc/crypto-policies/back-ends/openssh.config

diff --git a/...rypto/harden_sshd_ciphers_openssh_conf_crypto_policy/tests/stig_correct_commented.fail.sh b/...rypto/harden_sshd_ciphers_openssh_conf_crypto_policy/tests/stig_correct_commented.fail.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
-# platform = Oracle Linux 8,Red Hat Enterprise Linux 8,multi_platform_fedora
-# profiles = xccdf_org.ssgproject.content_profile_stig
+# platform = Oracle Linux 8,Oracle Linux 9,Red Hat Enterprise Linux 8,multi_platform_fedora
+# variables = sshd_approved_ciphers=aes256-ctr,aes192-ctr,aes128-ctr
 
 sshd_approved_ciphers=aes256-ctr,aes192-ctr,aes128-ctr
 configfile=/etc/crypto-policies/back-ends/openssh.config

diff --git a/...ers_openssh_conf_crypto_policy/tests/stig_correct_followed_by_incorrect_commented.pass.sh b/...ers_openssh_conf_crypto_policy/tests/stig_correct_followed_by_incorrect_commented.pass.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
-# platform = Oracle Linux 8,Red Hat Enterprise Linux 8,multi_platform_fedora
-# profiles = xccdf_org.ssgproject.content_profile_stig
+# platform = Oracle Linux 8,Oracle Linux 9,Red Hat Enterprise Linux 8,multi_platform_fedora
+# variables = sshd_approved_ciphers=aes256-ctr,aes192-ctr,aes128-ctr
 
 sshd_approved_ciphers=aes256-ctr,aes192-ctr,aes128-ctr
 configfile=/etc/crypto-policies/back-ends/openssh.config

diff --git a/...grity/crypto/harden_sshd_ciphers_openssh_conf_crypto_policy/tests/stig_empty_file.fail.sh b/...grity/crypto/harden_sshd_ciphers_openssh_conf_crypto_policy/tests/stig_empty_file.fail.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
-# platform = Oracle Linux 8,Red Hat Enterprise Linux 8,multi_platform_fedora
-# profiles = xccdf_org.ssgproject.content_profile_stig
+# platform = Oracle Linux 8,Oracle Linux 9,Red Hat Enterprise Linux 8,multi_platform_fedora
+# variables = sshd_approved_ciphers=aes256-ctr,aes192-ctr,aes128-ctr
 
 configfile=/etc/crypto-policies/back-ends/openssh.config
 

diff --git a/...ity/crypto/harden_sshd_ciphers_openssh_conf_crypto_policy/tests/stig_empty_policy.fail.sh b/...ity/crypto/harden_sshd_ciphers_openssh_conf_crypto_policy/tests/stig_empty_policy.fail.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
-# platform = Oracle Linux 8,Red Hat Enterprise Linux 8,multi_platform_fedora
-# profiles = xccdf_org.ssgproject.content_profile_stig
+# platform = Oracle Linux 8,Oracle Linux 9,Red Hat Enterprise Linux 8,multi_platform_fedora
+# variables = sshd_approved_ciphers=aes256-ctr,aes192-ctr,aes128-ctr
 
 configfile=/etc/crypto-policies/back-ends/openssh.config
 

diff --git a/...ers_openssh_conf_crypto_policy/tests/stig_incorrect_followed_by_correct_commented.fail.sh b/...ers_openssh_conf_crypto_policy/tests/stig_incorrect_followed_by_correct_commented.fail.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
-# platform = Oracle Linux 8,Red Hat Enterprise Linux 8,multi_platform_fedora
-# profiles = xccdf_org.ssgproject.content_profile_stig
+# platform = Oracle Linux 8,Oracle Linux 9,Red Hat Enterprise Linux 8,multi_platform_fedora
+# variables = sshd_approved_ciphers=aes256-ctr,aes192-ctr,aes128-ctr
 
 sshd_approved_ciphers=aes256-ctr,aes192-ctr,aes128-ctr
 [email protected],[email protected],aes256-ctr

diff --git a/...crypto/harden_sshd_ciphers_openssh_conf_crypto_policy/tests/stig_incorrect_policy.fail.sh b/...crypto/harden_sshd_ciphers_openssh_conf_crypto_policy/tests/stig_incorrect_policy.fail.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
-# platform = Oracle Linux 8,Red Hat Enterprise Linux 8,multi_platform_fedora
-# profiles = xccdf_org.ssgproject.content_profile_stig
+# platform = Oracle Linux 8,Oracle Linux 9,Red Hat Enterprise Linux 8,multi_platform_fedora
+# variables = sshd_approved_ciphers=aes256-ctr,aes192-ctr,aes128-ctr
 
 [email protected],[email protected],aes256-ctr,aes256-cbc
 configfile=/etc/crypto-policies/back-ends/openssh.config

diff --git a/...ity/crypto/harden_sshd_ciphers_openssh_conf_crypto_policy/tests/stig_missing_file.fail.sh b/...ity/crypto/harden_sshd_ciphers_openssh_conf_crypto_policy/tests/stig_missing_file.fail.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
-# platform = Oracle Linux 8,Red Hat Enterprise Linux 8,multi_platform_fedora
-# profiles = xccdf_org.ssgproject.content_profile_stig
+# platform = Oracle Linux 8,Oracle Linux 9,Red Hat Enterprise Linux 8,multi_platform_fedora
+# variables = sshd_approved_ciphers=aes256-ctr,aes192-ctr,aes128-ctr
 
 configfile=/etc/crypto-policies/back-ends/openssh.config