Configuring SSH - restrict Cipher list

YüksekDüzey 1Manuel incelemeibm-i

Açıklama

This variable limits the types of ciphers that SSH can use during communication. Based on research conducted at various institutions, it was determined that the symmetric portion of the SSH Transport Protocol (as described in RFC 4253) has security weaknesses that allowed recovery of up to 32 bits of plaintext from a block of ...

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

DSPF '/QOpenSys/QIBM/UserData/SC1/OpenSSH/etc/sshd_config' On the Control field, type Ciphers and press F16 (shift F4) Control: Ciphers_________________________________________ The display should yield the following output: Ciphers aes256-ctr,aes192-ctr,aes128-ctr

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

EDTF '/QOpenSys/QIBM/UserData/SC1/OpenSSH/etc/sshd'_config file: Insert: Ciphers aes256-ctr,aes192-ctr,aes128-ctr Re-cycle the sshd daemon to pick up the configuration changes:

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: ibm-issh
Referans: CIS IBM i V7R5M0 Benchmark v2.1.0 - 5.4.7 Configuring SSH - restrict Cipher list