{{{ oval_metadata("SSSD should be configured to expire keys from known SSH hosts after 1 day.", rule_title=rule_title) }}} /etc/sssd/sssd.conf ^[\s]*\[ssh](?:[^\n\[]*\n+)+?[\s]*ssh_known_hosts_timeout[\s]*=[\s]*(\d+)$ 1