Pam options and fixes #111
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
- Fixed templates not being applied if pam_passwdqc is enabled. - Install correct package for pam_pwquality in centos 7. - Add a flag to turn on/off pam_pwquality in rhel7 and set defaults appropriately based on platform_version - Add an attribute to set options to pam_pwquality. - Fall back to pam_cracklib on all patforms if neither pam_pwquality nor pam_passwdqc are enabled. - Don't attempt to install pam_cracklib (It comes with the pam package on rhel 5, 6, & 7)
|
Regarding pam_cracklib package, is that a fedora thing? As far as I can tell, rhel 5-7 ship with cracklib as part of 'pam'. We may want to just remove that part or condition it to where it is applicable. |
|
thanks @foonix |
rollbrettler
pushed a commit
to rollbrettler/chef-os-hardening
that referenced
this pull request
Sep 16, 2016
Feature/sftp
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This adds adds an attribute for setting pam_cracklib options and fixes #102 related problems.
@chris-rock Please let me know if you have any feedback about this or any of my other PRs in this repo. :)