Bug 2215814

Summary: [DDF] There isn't CRYPTO_POLICY= variable in RHEL 9. To opt-out crypto-policies, CU can set their settings in
Product: Red Hat Enterprise Linux 9 Reporter: Direct Docs Feedback <ddf-bot>
Component: DocumentationAssignee: Mirek Jahoda <mjahoda>
Documentation sub component: DDF QA Contact: Dmitry Belyavskiy <dbelyavs>
Status: CLOSED CURRENTRELEASE Docs Contact:
Severity: medium    
Priority: medium CC: dbelyavs, kmoriwak, rhel-docs
Version: unspecifiedKeywords: Documentation
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: All   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-06-30 14:43:36 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Direct Docs Feedback 2023-06-19 01:15:18 UTC 
There isn't CRYPTO_POLICY= variable in RHEL 9. To opt-out crypto-policies, CU can set their settings in /etc/ssh/sshd_config.d/.

See "Steps of overriding crypto policies for RHEL9" in following KCS
  https://access.redhat.com/solutions/4410591

Reported by: rh-ee-kmoriwak

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/securing_networks/assembly_using-secure-communications-between-two-systems-with-openssh_securing-networks#annotations:6967a0ec-085a-4da0-9a06-a45d2f781f38
Comment 5 Mirek Jahoda 2023-06-30 14:43:36 UTC 
The fix is available on the Customer Portal:
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/securing_networks/assembly_using-secure-communications-between-two-systems-with-openssh_securing-networks#making-openssh-more-secure_assembly_using-secure-communications-between-two-systems-with-openssh

Thank you for the report.