andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow configuration of password remember in pam (#467)

Browse Source 
* Add Configuration of password remember
and set default to 60

see Telekom 2021.07-01 SoC 3.01 Req 25 and SoC 3.65 Req46

Signed-off-by: Maik Stuebner <[email protected]>

* set default for password remember back to 5

Signed-off-by: Maik Stuebner <[email protected]>

* readme default for password remember back to 5

Signed-off-by: Maik Stuebner <[email protected]>
This commit is contained in:
Maik Stübner authored and GitHub committed 2021-07-22 10:18:01 +02:00
1 parent 488441a7dc
commit 714a34fa55
3 files changed
+5 -1
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

roles/os_hardening/templates/etc/pam.d/rhel_auth.j2
+1 -1
View File
@@ -36,7 +36,7 @@ account required pam_permit.so
password requisite pam_pwquality.so {{ os_auth_pam_pwquality_options }}
{% endif %}
{# NSA 2.3.3.6 Limit Password Reuse #}
password requisite pam_pwhistory.so remember=5 use_authtok
password requisite pam_pwhistory.so remember={{ os_auth_pw_remember }} use_authtok
{# NSA 2.3.3.5 Upgrade Password Hashing Algorithm to SHA-512 #}
password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok rounds={{ os_sha_crypt_min_rounds }}
{% if (os_auth_pam_sssd_enable | bool) %}