What were you trying to do that didn't work?

Most of the rules related to SSHD strong crypto (e.g. xccdf_org.ssgproject.content_rule_sshd_use_strong_x) check and propose to add stanzas into /etc/ssh/sshd_config instead of configuring appropriately the system-wide crypto policy.
This somehow contradicts with the system-wide crypto policy benefit, which is to keep everything in one place and affecting the whole system, and not tune each service individually.
 

What is the impact of this issue to you?

Breaks standards

Please provide the package NVR for which the bug is seen:

scap-security-guide

How reproducible is this bug?:

N/A