controls:
    -   id: SRG-OS-000033-GPOS-00014
        levels:
            - high
        title: {{{ full_name }}} must implement DoD-approved encryption to protect the
            confidentiality of remote access sessions.
        rules:
            - configure_libreswan_crypto_policy
            - sshd_rekey_limit
            - var_rekey_limit_size=1G
            - var_rekey_limit_time=1hour
            - sysctl_crypto_fips_enabled
        status: automated
