/usr/share/crypto-policies/back-ends/LEGACY
NameSizeModeActions
bind.config790644editdlrm
gnutls.config3350644editdlrm
java.config3570644editdlrm
krb5.config1790644editdlrm
libreswan.config4680644editdlrm
libssh.config14340644editdlrm
nss.config4390644editdlrm
openssh.config13550644editdlrm
opensshserver.config17540644editdlrm
openssl.config1250644editdlrm
opensslcnf.config6790644editdlrm
Edit: /usr/share/crypto-policies/back-ends/LEGACY/krb5.config (179B)
[libdefaults] permitted_enctypes = aes256-cts-hmac-sha384-192 aes128-cts-hmac-sha256-128 aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 camellia256-cts-cmac camellia128-cts-cmac