49 lines
2.0 KiB
Diff
49 lines
2.0 KiB
Diff
From eb3a18cea5776038d0aeef0299083fcd282a0177 Mon Sep 17 00:00:00 2001
|
|
From: =?UTF-8?q?Mat=C4=9Bj=20T=C3=BD=C4=8D?= <matyc@redhat.com>
|
|
Date: Mon, 17 Aug 2020 15:56:40 +0200
|
|
Subject: [PATCH] Add a missing Crypto Policy rule to OSPP.
|
|
|
|
The rule fell out by mistake, this addition complements #4682
|
|
---
|
|
rhel8/profiles/ospp.profile | 1 +
|
|
tests/data/profile_stability/rhel8/ospp.profile | 1 +
|
|
tests/data/profile_stability/rhel8/stig.profile | 5 +++--
|
|
3 files changed, 5 insertions(+), 2 deletions(-)
|
|
|
|
diff --git a/rhel8/profiles/ospp.profile b/rhel8/profiles/ospp.profile
|
|
index 5b5b5b711a..a651885eef 100644
|
|
--- a/rhel8/profiles/ospp.profile
|
|
+++ b/rhel8/profiles/ospp.profile
|
|
@@ -235,6 +235,7 @@ selections:
|
|
- enable_fips_mode
|
|
- var_system_crypto_policy=fips_ospp
|
|
- configure_crypto_policy
|
|
+ - configure_ssh_crypto_policy
|
|
- configure_bind_crypto_policy
|
|
- configure_openssl_crypto_policy
|
|
- configure_libreswan_crypto_policy
|
|
diff --git a/tests/data/profile_stability/rhel8/ospp.profile b/tests/data/profile_stability/rhel8/ospp.profile
|
|
index 5aa3592496..13c4e6b08d 100644
|
|
--- a/tests/data/profile_stability/rhel8/ospp.profile
|
|
+++ b/tests/data/profile_stability/rhel8/ospp.profile
|
|
@@ -62,6 +62,7 @@ selections:
|
|
- configure_kerberos_crypto_policy
|
|
- configure_libreswan_crypto_policy
|
|
- configure_openssl_crypto_policy
|
|
+- configure_ssh_crypto_policy
|
|
- configure_tmux_lock_after_time
|
|
- configure_tmux_lock_command
|
|
- configure_usbguard_auditbackend
|
|
diff --git a/tests/data/profile_stability/rhel8/stig.profile b/tests/data/profile_stability/rhel8/stig.profile
|
|
index 9b164eb5c2..c7fe02169a 100644
|
|
--- a/tests/data/profile_stability/rhel8/stig.profile
|
|
+++ b/tests/data/profile_stability/rhel8/stig.profile
|
|
@@ -77,6 +77,7 @@ selections:
|
|
- configure_kerberos_crypto_policy
|
|
- configure_libreswan_crypto_policy
|
|
- configure_openssl_crypto_policy
|
|
+- configure_ssh_crypto_policy
|
|
- configure_tmux_lock_after_time
|
|
- configure_tmux_lock_command
|
|
- configure_usbguard_auditbackend
|