Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update pam_faillock.so rules #7929

Merged
merged 9 commits into from Dec 13, 2021
Merged

Update pam_faillock.so rules #7929

merged 9 commits into from Dec 13, 2021

Commits on Dec 13, 2021

  1. Update the accounts_passwords_pam_faillock_deny rule 

    Redesign the OVAL and remediations logic to make the rule compatible
with newer versions of pam and authselect tool, which define the
pam_faillock.so parameters in /etc/security/faillock.conf. The new logic
also covered some new possible situations making the rule more robust.
    @marcusburghardt
    marcusburghardt committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    f8722b4 View commit details
    Browse the repository at this point in the history

  2. Update the accounts_passwords_pam_faillock_interval rule 

    Redesign the OVAL and remediation logic aligning this rule
with the other rules related to pam_faillock.so.
    @marcusburghardt
    marcusburghardt committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    280c0fe View commit details
    Browse the repository at this point in the history

  3. Update the accounts_passwords_pam_faillock_unlock_time rule 

    Redesigned the OVAL and remediation logic aligning this rule
with the other rules related to pam_faillock.so.
    @marcusburghardt
    marcusburghardt committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    bc75004 View commit details
    Browse the repository at this point in the history

  4. Update the accounts_passwords_pam_faillock_deny_root rule 

    Redesigned the OVAL and remediation logic aligning this rule
with the other rules related to pam_faillock.so.
    @marcusburghardt
    marcusburghardt committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    703e5e7 View commit details
    Browse the repository at this point in the history

  5. Update the accounts_passwords_pam_faillock_enforce_local rule 

    Aligned the OVAL and remediation logic of this rule with the
other rules related to pam_faillock.so.
    @marcusburghardt
    marcusburghardt committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    ce9898f View commit details
    Browse the repository at this point in the history

  6. Update stig profiles and controls related to pam_faillock rules

    @marcusburghardt
    marcusburghardt committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    bc87d97 View commit details
    Browse the repository at this point in the history

  7. Improve Ansible and Bash remediation for pam_faillock rules

    @marcusburghardt
    marcusburghardt committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    6891156 View commit details
    Browse the repository at this point in the history

  8. Adjust pam_faillock test scenarios scripts for containers

    @marcusburghardt
    marcusburghardt committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    713f1b8 View commit details
    Browse the repository at this point in the history

  9. Improve comments and small updates after review

    @marcusburghardt
    marcusburghardt committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    c79db43 View commit details
    Browse the repository at this point in the history