Linux Security Policy: Ensure that strong Key Exchange algorithms are used does not work on Ubuntu 24.04

[tas50]

Describe the bug

This is a openssh 9.6 system.

cnquery run -c "package('openssh-server').version"
→ no provider specified, defaulting to local. Use --help to see all providers.
→ loaded configuration from /root/.config/mondoo/mondoo.yml using source default
package.version: "1:9.6p1-3ubuntu13.5"

Our remediation steps have the user add these on 8.6+

KexAlgorithms [email protected],[email protected],diffie-hellman-group18-sha512

With these KexAlgorithms set things still fail:

[failed] sshd.config.kexs != empty
sshd.config.kexs.containsOnly(props.mondooLinuxSecurityKexAlgos)

  [ok] value: [
    0: "[email protected]"
    1: "[email protected]"
    2: "diffie-hellman-group18-sha512"
  ]
  [failed] [].containsOnly()
    expected: == _
    actual:   [
      0: "[email protected]"
      1: "diffie-hellman-group18-sha512"
    ]

[mm-weber]