/etc/crypto-policies/back-ends
NameSizeModeActions
bind.config940644editdlrm
gnutls.config4370644editdlrm
java.config3890644editdlrm
krb5.config1790644editdlrm
libreswan.config4480644editdlrm
libssh.config13240644editdlrm
nss.config4520644editdlrm
openssh.config12570644editdlrm
opensshserver.config16630644editdlrm
openssl.config1420644editdlrm
opensslcnf.config6470644editdlrm
Edit: /usr/share/crypto-policies/DEFAULT/krb5.txt (179B)
[libdefaults] permitted_enctypes = aes256-cts-hmac-sha384-192 aes128-cts-hmac-sha256-128 aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 camellia256-cts-cmac camellia128-cts-cmac