/usr/share/crypto-policies/DEFAULT
NameSizeModeActions
bind.txt940644editdlrm
gnutls.txt4370644editdlrm
java.txt3890644editdlrm
krb5.txt1790644editdlrm
libreswan.txt4480644editdlrm
libssh.txt13240644editdlrm
nss.txt4060644editdlrm
openssh.txt12570644editdlrm
opensshserver.txt16630644editdlrm
openssl.txt1420644editdlrm
opensslcnf.txt6470644editdlrm
Edit: /usr/share/crypto-policies/DEFAULT/krb5.txt (179B)
[libdefaults] permitted_enctypes = aes256-cts-hmac-sha384-192 aes128-cts-hmac-sha256-128 aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 camellia256-cts-cmac camellia128-cts-cmac