harden_sshd_ciphers_openssh_conf_crypto_policy is misaligned with DISA

[mildas]

Description of problem:

harden_sshd_ciphers_openssh_conf_crypto_policy is misaligned with DISA

Outcome:

SSG result: fail DISA result: pass

The issue is present in these test variants:

• oscap
• ansible
• anaconda

SCAP Security Guide Version:

latest master

External Content's Version:

RHEL9 V1R2

[Mab879]

Needs more investigation, not enough details.

[vojtapolasek]

This is the relevant STIG: https://stigaview.com/products/rhel9/v1r2/RHEL-09-255060/ And I think this needs to be changed on DISA's side. Primarily, the whole check is wrong; the text is talking about SSH client, but the check is performed on the file for SSH server.