TMA-IBM-I-5.4.7
Configuring SSH - restrict Cipher list
Opis
This variable limits the types of ciphers that SSH can use during communication. Based on research conducted at various institutions, it was determined that the symmetric portion of the SSH Transport Protocol (as described in RFC 4253) has security weaknesses that allowed recovery of up to 32 bits of plaintext from a block of ...
Kako se proverava
Metod provere: Ručni pregled
Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.
DSPF '/QOpenSys/QIBM/UserData/SC1/OpenSSH/etc/sshd_config' On the Control field, type Ciphers and press F16 (shift F4) Control: Ciphers_________________________________________ The display should yield the following output: Ciphers aes256-ctr,aes192-ctr,aes128-ctr
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
EDTF '/QOpenSys/QIBM/UserData/SC1/OpenSSH/etc/sshd'_config file: Insert: Ciphers aes256-ctr,aes192-ctr,aes128-ctr Re-cycle the sshd daemon to pick up the configuration changes:
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- ibm-issh
- Referenca
- CIS IBM i V7R5M0 Benchmark v2.1.0 - 5.4.7 Configuring SSH - restrict Cipher list