elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2024-12-24 06:55:24 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update ciphers list in 9.3.11 with latest chacha20 and gcm ciphers

Browse Source
This commit is contained in:
Charles Herlin 2017-11-10 14:48:51 +01:00
parent b6aba4cc88
commit f97fbb47f7
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
bin/hardening/9.3.11_sshd_ciphers.sh
View File

@ -14,7 +14,7 @@ set -u # One variable unset, it's over
HARDENING_LEVEL=2 HARDENING_LEVEL=2
PACKAGE='openssh-server' PACKAGE='openssh-server'
OPTIONS='Ciphers=aes128-ctr,aes192-ctr,aes256-ctr' OPTIONS='Ciphers=chacha20-poly1305@openssh\.com,aes256-gcm@openssh\.com,aes128-gcm@openssh\.com,aes256-ctr,aes192-ctr,aes128-ctr'
FILE='/etc/ssh/sshd_config' FILE='/etc/ssh/sshd_config'
# This function will be called if the script status is on enabled / audit mode # This function will be called if the script status is on enabled / audit mode