add a pam_account_password_faillock_deny tenplate

and rewrite accounts_passwords_pam_faillock_deny rule to use the template.
a-skr · Apr 3, 2024 · eea0ffa · eea0ffa
1 parent ca4b144
commit eea0ffa
Show file tree

Hide file tree

Showing 30 changed files with 305 additions and 784 deletions.
diff --git a/...ts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/oval/debian.xml b/...ts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/oval/debian.xml
diff --git a/...pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/oval/openeuler.xml b/...pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/oval/openeuler.xml
diff --git a/...ts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/oval/shared.xml b/...ts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/oval/shared.xml
diff --git a/...ts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/oval/ubuntu.xml b/...ts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/oval/ubuntu.xml
diff --git a/.../accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/rule.yml b/.../accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/rule.yml
@@ -131,3 +131,6 @@ warnings:
 
 srg_requirement: |-
     {{{ full_name }}} must automatically lock an account when three unsuccessful logon attempts occur.
+
+template:
+  name: pam_account_password_faillock_deny
diff --git a/...ords_pam_faillock_deny/ansible/shared.yml → ...t_password_faillock_deny/ansible.template b/...ords_pam_faillock_deny/ansible/shared.yml → ...t_password_faillock_deny/ansible.template
diff --git a/...asswords_pam_faillock_deny/bash/shared.sh → ...ount_password_faillock_deny/bash.template b/...asswords_pam_faillock_deny/bash/shared.sh → ...ount_password_faillock_deny/bash.template