Updated the e8 profile for RHEL8.

[matejak]

• removed obsolete sshd settings.
• added rules for crypto policies to set up strong ciphers + MACs for sshd.

[matejak]

I have reflected those suggestions in an inline comment. As of now, the FUTURE policy is the best fit, but a better policy may become available later.

[redhatrises]

@shaneboulden do we need to add more cyrpto-policy checks for bind, krb, java, etc? Or is ssh just good enough.

[shaneboulden]

@shaneboulden do we need to add more cyrpto-policy checks for bind, krb, java, etc? Or is ssh just good enough.

I think ssh is fine - this is designed to be a baseline policy, and these services are pretty specific to server roles (DNS, domain-joined, Java app server).

My preferred approach would be for users to create a tailoring file based on the E8 policy that caters for specific server roles.

[redhatrises]

@shaneboulden sounds good. Thanks!

Ack and thanks for the work @matejak