{"action":"created","issue":{"url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/1976","repository_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide","labels_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/1976/labels{/name}","comments_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/1976/comments","events_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/1976/events","html_url":"https://github.com/OpenSCAP/scap-security-guide/pull/1976","id":225103212,"number":1976,"title":"update SSH checks with full list of FIPS Ciphers and MACs","user":{"login":"shawndwells","id":5713754,"avatar_url":"https://avatars2.githubusercontent.com/u/5713754?v=3","gravatar_id":"","url":"https://api.github.com/users/shawndwells","html_url":"https://github.com/shawndwells","followers_url":"https://api.github.com/users/shawndwells/followers","following_url":"https://api.github.com/users/shawndwells/following{/other_user}","gists_url":"https://api.github.com/users/shawndwells/gists{/gist_id}","starred_url":"https://api.github.com/users/shawndwells/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/shawndwells/subscriptions","organizations_url":"https://api.github.com/users/shawndwells/orgs","repos_url":"https://api.github.com/users/shawndwells/repos","events_url":"https://api.github.com/users/shawndwells/events{/privacy}","received_events_url":"https://api.github.com/users/shawndwells/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-04-28T14:47:02Z","updated_at":"2017-04-28T16:54:52Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/pulls/1976","html_url":"https://github.com/OpenSCAP/scap-security-guide/pull/1976","diff_url":"https://github.com/OpenSCAP/scap-security-guide/pull/1976.diff","patch_url":"https://github.com/OpenSCAP/scap-security-guide/pull/1976.patch"},"body":"from cipher+MACs in the FIPS paperwork at:\r\n\r\nhttp://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp2630.pdf"},"comment":{"url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/comments/298050646","html_url":"https://github.com/OpenSCAP/scap-security-guide/pull/1976#issuecomment-298050646","issue_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/1976","id":298050646,"user":{"login":"shawndwells","id":5713754,"avatar_url":"https://avatars2.githubusercontent.com/u/5713754?v=3","gravatar_id":"","url":"https://api.github.com/users/shawndwells","html_url":"https://github.com/shawndwells","followers_url":"https://api.github.com/users/shawndwells/followers","following_url":"https://api.github.com/users/shawndwells/following{/other_user}","gists_url":"https://api.github.com/users/shawndwells/gists{/gist_id}","starred_url":"https://api.github.com/users/shawndwells/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/shawndwells/subscriptions","organizations_url":"https://api.github.com/users/shawndwells/orgs","repos_url":"https://api.github.com/users/shawndwells/repos","events_url":"https://api.github.com/users/shawndwells/events{/privacy}","received_events_url":"https://api.github.com/users/shawndwells/received_events","type":"User","site_admin":false},"created_at":"2017-04-28T16:54:51Z","updated_at":"2017-04-28T16:54:51Z","body":"\n\nOn 4/28/17 12:51 PM, Marek Haičman wrote:\n>\n> *@dahaic* commented on this pull request.\n>\n> ------------------------------------------------------------------------\n>\n> In shared/oval/sshd_use_approved_macs.xml\n> <https://github.com/OpenSCAP/scap-security-guide/pull/1976#discussion_r113973516>:\n>\n> > @@ -25,7 +25,7 @@\n>    </ind:textfilecontent54_test>\n>    <ind:textfilecontent54_object id=\"obj_sshd_use_approved_macs\" version=\"1\">\n>      <ind:filepath>/etc/ssh/sshd_config</ind:filepath>\n> -    <ind:pattern operation=\"pattern match\">^[\\s]*(?i)MACs(?-i)[\\s]+hmac-sha2-512,hmac-sha2-256,hmac-sha1[\\s]*(?:|(?:#.*))?$</ind:pattern>\n> +    <ind:pattern operation=\"pattern match\">^[\\s]*(?i)MACs(?-i)[\\s]+((hmac-sha1|hmac-sha2-256|hmac-sha2-512|hmac-sha1-etm@openssh.com|hmac-sha2-256-etm@openssh.com|hmac-sha2-512-etm@openssh.com),?)+[\\s]*(?:|(?:#.*))?$</ind:pattern>\n>\n> I think those \".\" should be escaped. (In ciphers as well)\n>\n\nYou're totally right. Updated. Thanks!\n"}}
{"actor":{"display_login":"shawndwells"}}