andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

make sha rounds configurable and increase no of rounds (#452)

Browse Source 
* make sha rounds configurable and increase no of rounds

Fixes #365

Signed-off-by: rndmh3ro <[email protected]>

* Prettified Code!

* make password rounds configurable in pam system-auth

Signed-off-by: rndmh3ro <[email protected]>

* change wording of sha rounds documentation

Co-authored-by: schurzi <[email protected]>

Co-authored-by: schurzi <[email protected]>
This commit is contained in:
Sebastian Gumprichandschurzi authored and GitHub committed 2021-06-30 10:41:59 +02:00
1 parent c769db4221
commit 9cefddd949
4 files changed
+16 -4
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

roles/os_hardening/defaults/main.yml
+6
View File
@@ -321,3 +321,9 @@ os_selinux_policy: targeted
# Mount options for proc in /etc/fstab.
proc_mnt_options: 'rw,nosuid,nodev,noexec,relatime,hidepid={{ hidepid_option }}'
# Define the number of SHA rounds.
# With a lot of rounds brute forcing the password is more difficult. But note also that it more CPU resources will be needed to authenticate users.
# The values must be inside the 1000-999999999 range.
os_sha_crypt_min_rounds: "640000"
os_sha_crypt_max_rounds: "640000"