openstack/ansible-hardening
Code Issues Proposed changes

Actually set min/max password lifetime for account

Browse Source 
This patch changes the tasks for V-71927 and V-71931 to actually set
the minimum password age on user accounts rather than printing
useless debug messages.

Change-Id: I3e085160baef1ecc12a3c96f08ede3845c68449f
This commit is contained in:
Major Hayden
2017-05-25 10:02:27 -05:00
committed by Jesse Pretorius (odyssey4me)
parent 6c9c7fad66
commit 3699f90710
5 changed files with 49 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
defaults/main.yml
View File

@@ -375,6 +375,11 @@ security_unattended_upgrades_notifications: false
#
###############################################################################
## Accounts (accounts)
# Set minimum password lifetime to 1 day for interactive accounts.
security_set_minimum_password_lifetime: no # V-71927
security_set_maximum_password_lifetime: no # V-71931
## AIDE (aide)
# Initialize the AIDE database immediately (may take time).
security_rhel7_initialize_aide: no # V-71973