From 0382cf9b2d290f1d4908401a4eb4f3b4f09c84f1 Mon Sep 17 00:00:00 2001 From: Joe Testa Date: Sat, 30 Aug 2025 16:26:57 -0400 Subject: [PATCH] Aside from linking to online hardening guides, mention that built-in guides are also available. --- src/ssh_audit/ssh_audit.py | 2 +- test/docker/expected_results/dropbear_2019.78_test1.txt | 2 +- test/docker/expected_results/openssh_4.0p1_test1.txt | 2 +- test/docker/expected_results/openssh_5.6p1_test1.txt | 2 +- test/docker/expected_results/openssh_5.6p1_test2.txt | 2 +- test/docker/expected_results/openssh_5.6p1_test3.txt | 2 +- test/docker/expected_results/openssh_5.6p1_test4.txt | 2 +- test/docker/expected_results/openssh_5.6p1_test5.txt | 2 +- test/docker/expected_results/openssh_8.0p1_test1.txt | 2 +- test/docker/expected_results/openssh_8.0p1_test2.txt | 2 +- test/docker/expected_results/openssh_8.0p1_test3.txt | 2 +- 11 files changed, 11 insertions(+), 11 deletions(-) diff --git a/src/ssh_audit/ssh_audit.py b/src/ssh_audit/ssh_audit.py index 2b3e66e..1e82a31 100755 --- a/src/ssh_audit/ssh_audit.py +++ b/src/ssh_audit/ssh_audit.py @@ -333,7 +333,7 @@ def output_info(out: OutputBuffer, software: Optional['Software'], client_audit: # If any warnings or failures were given, print a link to the hardening guides. if any_problems: - out.warn('(nfo) For hardening guides on common OSes, please see: ') + out.warn('(nfo) For hardening guides on common OSes, a built-in list can be viewed with --list-hardening-guides, or an online list can be found at: ') # Add any additional notes. for additional_note in additional_notes: diff --git a/test/docker/expected_results/dropbear_2019.78_test1.txt b/test/docker/expected_results/dropbear_2019.78_test1.txt index e047589..988496d 100644 --- a/test/docker/expected_results/dropbear_2019.78_test1.txt +++ b/test/docker/expected_results/dropbear_2019.78_test1.txt @@ -93,5 +93,5 @@ (rec) -kexguess2@matt.ucc.asn.au -- kex algorithm to remove  # additional info -(nfo) For hardening guides on common OSes, please see:  +(nfo) For hardening guides on common OSes, a built-in list can be viewed with --list-hardening-guides, or an online list can be found at:  diff --git a/test/docker/expected_results/openssh_4.0p1_test1.txt b/test/docker/expected_results/openssh_4.0p1_test1.txt index 5c3d67d..f6b809c 100644 --- a/test/docker/expected_results/openssh_4.0p1_test1.txt +++ b/test/docker/expected_results/openssh_4.0p1_test1.txt @@ -107,5 +107,5 @@ (rec) -aes256-cbc -- enc algorithm to remove  # additional info -(nfo) For hardening guides on common OSes, please see:  +(nfo) For hardening guides on common OSes, a built-in list can be viewed with --list-hardening-guides, or an online list can be found at:  diff --git a/test/docker/expected_results/openssh_5.6p1_test1.txt b/test/docker/expected_results/openssh_5.6p1_test1.txt index d0e144c..3a6d95f 100644 --- a/test/docker/expected_results/openssh_5.6p1_test1.txt +++ b/test/docker/expected_results/openssh_5.6p1_test1.txt @@ -117,5 +117,5 @@ (rec) -umac-64@openssh.com -- mac algorithm to remove  # additional info -(nfo) For hardening guides on common OSes, please see:  +(nfo) For hardening guides on common OSes, a built-in list can be viewed with --list-hardening-guides, or an online list can be found at:  diff --git a/test/docker/expected_results/openssh_5.6p1_test2.txt b/test/docker/expected_results/openssh_5.6p1_test2.txt index 6e3aff6..e6ef7e8 100644 --- a/test/docker/expected_results/openssh_5.6p1_test2.txt +++ b/test/docker/expected_results/openssh_5.6p1_test2.txt @@ -118,5 +118,5 @@ (rec) -umac-64@openssh.com -- mac algorithm to remove  # additional info -(nfo) For hardening guides on common OSes, please see:  +(nfo) For hardening guides on common OSes, a built-in list can be viewed with --list-hardening-guides, or an online list can be found at:  diff --git a/test/docker/expected_results/openssh_5.6p1_test3.txt b/test/docker/expected_results/openssh_5.6p1_test3.txt index 9416eb4..079ce5f 100644 --- a/test/docker/expected_results/openssh_5.6p1_test3.txt +++ b/test/docker/expected_results/openssh_5.6p1_test3.txt @@ -117,5 +117,5 @@ (rec) -umac-64@openssh.com -- mac algorithm to remove  # additional info -(nfo) For hardening guides on common OSes, please see:  +(nfo) For hardening guides on common OSes, a built-in list can be viewed with --list-hardening-guides, or an online list can be found at:  diff --git a/test/docker/expected_results/openssh_5.6p1_test4.txt b/test/docker/expected_results/openssh_5.6p1_test4.txt index 5e035b0..673c40a 100644 --- a/test/docker/expected_results/openssh_5.6p1_test4.txt +++ b/test/docker/expected_results/openssh_5.6p1_test4.txt @@ -116,5 +116,5 @@ (rec) -umac-64@openssh.com -- mac algorithm to remove  # additional info -(nfo) For hardening guides on common OSes, please see:  +(nfo) For hardening guides on common OSes, a built-in list can be viewed with --list-hardening-guides, or an online list can be found at:  diff --git a/test/docker/expected_results/openssh_5.6p1_test5.txt b/test/docker/expected_results/openssh_5.6p1_test5.txt index c44044d..caa8ef0 100644 --- a/test/docker/expected_results/openssh_5.6p1_test5.txt +++ b/test/docker/expected_results/openssh_5.6p1_test5.txt @@ -115,5 +115,5 @@ (rec) -umac-64@openssh.com -- mac algorithm to remove  # additional info -(nfo) For hardening guides on common OSes, please see:  +(nfo) For hardening guides on common OSes, a built-in list can be viewed with --list-hardening-guides, or an online list can be found at:  diff --git a/test/docker/expected_results/openssh_8.0p1_test1.txt b/test/docker/expected_results/openssh_8.0p1_test1.txt index e591ed6..aba36b8 100644 --- a/test/docker/expected_results/openssh_8.0p1_test1.txt +++ b/test/docker/expected_results/openssh_8.0p1_test1.txt @@ -104,5 +104,5 @@ (rec) -umac-64@openssh.com -- mac algorithm to remove  # additional info -(nfo) For hardening guides on common OSes, please see:  +(nfo) For hardening guides on common OSes, a built-in list can be viewed with --list-hardening-guides, or an online list can be found at:  diff --git a/test/docker/expected_results/openssh_8.0p1_test2.txt b/test/docker/expected_results/openssh_8.0p1_test2.txt index 65abfa9..44215ff 100644 --- a/test/docker/expected_results/openssh_8.0p1_test2.txt +++ b/test/docker/expected_results/openssh_8.0p1_test2.txt @@ -96,5 +96,5 @@ (rec) -umac-64@openssh.com -- mac algorithm to remove  # additional info -(nfo) For hardening guides on common OSes, please see:  +(nfo) For hardening guides on common OSes, a built-in list can be viewed with --list-hardening-guides, or an online list can be found at:  diff --git a/test/docker/expected_results/openssh_8.0p1_test3.txt b/test/docker/expected_results/openssh_8.0p1_test3.txt index cceda01..086fa1e 100644 --- a/test/docker/expected_results/openssh_8.0p1_test3.txt +++ b/test/docker/expected_results/openssh_8.0p1_test3.txt @@ -45,5 +45,5 @@ (rec) -curve25519-sha256@libssh.org -- kex algorithm to remove  # additional info -(nfo) For hardening guides on common OSes, please see:  +(nfo) For hardening guides on common OSes, a built-in list can be viewed with --list-hardening-guides, or an online list can be found at: