diff --git a/templates/sshd_config-RedHat-8.j2 b/templates/sshd_config-RedHat-8.j2 index c5e9d7a..638e94d 100644 --- a/templates/sshd_config-RedHat-8.j2 +++ b/templates/sshd_config-RedHat-8.j2 @@ -35,10 +35,12 @@ MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@op # System-wide Crypto policy: # This system is following system-wide crypto policy. The changes to -# crypto properties (Ciphers, MACs, ...) will not have any effect here. -# They will be overridden by command-line options passed to the server -# on command line. -# Please, check manual pages for update-crypto-policies(8) and sshd_config(5). +# Ciphers, MACs, KexAlgoritms and GSSAPIKexAlgorithsm will not have any +# effect here. They will be overridden by command-line options passed on +# the server start up. +# To opt out, uncomment a line with redefinition of CRYPTO_POLICY= +# variable in /etc/sysconfig/sshd to overwrite the policy. +# For more information, see manual page for update-crypto-policies(8). # Logging #SyslogFacility AUTH