Merge pull request ComplianceAsCode#11205 from mpurg/pam_faillock_regex

Minor fix for pam_faillock regex on Ubuntu (5.4.2)
rumch-se · Oct 17, 2023 · ff6e2c7 · ff6e2c7
2 parents 1abe48d + e605913
commit ff6e2c7
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/...ts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/oval/ubuntu.xml b/...ts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/oval/ubuntu.xml
@@ -40,7 +40,7 @@
   <constant_variable id="var_accounts_passwords_pam_faillock_deny_pam_faillock_account_regex"
                 datatype="string" version="1"
                 comment="regex to identify pam_faillock.so entry in account section of pam files">
-    <value>^\s*account\s+required\s+pam_faillock\.so$</value>
+    <value>^\s*account\s+required\s+pam_faillock\.so\s*(#.*)?$</value>
   </constant_variable>
 
   <constant_variable

diff --git a/...am/locking_out_password_attempts/accounts_passwords_pam_faillock_interval/oval/ubuntu.xml b/...am/locking_out_password_attempts/accounts_passwords_pam_faillock_interval/oval/ubuntu.xml
@@ -40,7 +40,7 @@
   <constant_variable id="var_accounts_passwords_pam_faillock_interval_pam_faillock_account_regex"
                 datatype="string" version="1"
                 comment="regex to identify pam_faillock.so entry in account section of pam files">
-    <value>^\s*account\s+required\s+pam_faillock\.so$</value>
+    <value>^\s*account\s+required\s+pam_faillock\.so\s*(#.*)?$</value>
   </constant_variable>
 
   <constant_variable

diff --git a/...locking_out_password_attempts/accounts_passwords_pam_faillock_unlock_time/oval/ubuntu.xml b/...locking_out_password_attempts/accounts_passwords_pam_faillock_unlock_time/oval/ubuntu.xml
@@ -40,7 +40,7 @@
   <constant_variable id="var_accounts_passwords_pam_faillock_unlock_time_pam_faillock_account_regex"
                 datatype="string" version="1"
                 comment="regex to identify pam_faillock.so entry in account section of pam files">
-    <value>^\s*account\s+required\s+pam_faillock\.so$</value>
+    <value>^\s*account\s+required\s+pam_faillock\.so\s*(#.*)?$</value>
   </constant_variable>
 
   <constant_variable