89138be4ec
* rewrite system account detection and hardening * resolve failures created when resolving merge conflicts Signed-off-by: Sebastian Gumprich <[email protected]> * add tests for shell removal tasks Signed-off-by: Sebastian Gumprich <[email protected]> * Update molecule/os_hardening/prepare.yml Signed-off-by: Martin Schurz <[email protected]> * split tasks for locking and setting shell Signed-off-by: Martin Schurz <[email protected]> * fix some more linting Signed-off-by: Sebastian Gumprich <[email protected]> Signed-off-by: Sebastian Gumprich <[email protected]> Signed-off-by: Martin Schurz <[email protected]> Co-authored-by: donestefan <[email protected]> Co-authored-by: schurzi <[email protected]>
9 lines
203 B
YAML
9 lines
203 B
YAML
- name: Read local linux user database
|
|
getent:
|
|
database: passwd
|
|
|
|
- name: Check that shell_sys_acc's shell is still bash
|
|
assert:
|
|
that:
|
|
- getent_passwd['shell_sys_acc'][5] == "/bin/bash"
|