andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

make sha rounds configurable and increase no of rounds (#452)

Browse Source 
* make sha rounds configurable and increase no of rounds

Fixes #365

Signed-off-by: rndmh3ro <[email protected]>

* Prettified Code!

* make password rounds configurable in pam system-auth

Signed-off-by: rndmh3ro <[email protected]>

* change wording of sha rounds documentation

Co-authored-by: schurzi <[email protected]>

Co-authored-by: schurzi <[email protected]>
This commit is contained in:
Sebastian Gumprichandschurzi authored and GitHub committed 2021-06-30 10:41:59 +02:00
1 parent c769db4221
commit 9cefddd949
4 files changed
+16 -4
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

roles/os_hardening/templates/etc/pam.d/rhel_auth.j2
+1 -1
View File
@@ -38,7 +38,7 @@ password requisite pam_pwquality.so {{ os_auth_pam_pwquality_options }}
{# NSA 2.3.3.6 Limit Password Reuse #}
password requisite pam_pwhistory.so remember=5 use_authtok
{# NSA 2.3.3.5 Upgrade Password Hashing Algorithm to SHA-512 #}
password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok
password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok rounds={{ os_sha_crypt_min_rounds }}
{% if (os_auth_pam_sssd_enable | bool) %}
password sufficient pam_sss.so use_authtok
{% endif %}