tyler.durden/harbian-audit
1
0
Fork 0
mirror of https://github.com/hardenedlinux/harbian-audit.git synced 2025-09-25 18:58:58 +02:00
Code Issues Packages Projects Releases Wiki Activity

According to the latest STIG, modify minlen to 15.

Browse Source
This commit is contained in:
Samson-W 2020-05-17 01:39:21 +08:00
parent 1570943606
commit 654813d8b4
10 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
bin/hardening/9.2.10_pam_maxclassrepeat_cracklib.sh
View File

@ -84,7 +84,7 @@ apply_debian () {
apt_install $PACKAGE apt_install $PACKAGE
elif [ $FNRET = 2 ]; then elif [ $FNRET = 2 ]; then
warn "$PATTERN is not present in $FILE, add default config to $FILE" warn "$PATTERN is not present in $FILE, add default config to $FILE"
add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=8 difok=3" "# pam-auth-update(8) for details." add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=15 difok=3" "# pam-auth-update(8) for details."
elif [ $FNRET = 3 ]; then elif [ $FNRET = 3 ]; then
crit "$FILE is not exist, please check" crit "$FILE is not exist, please check"
elif [ $FNRET = 4 ]; then elif [ $FNRET = 4 ]; then

2
bin/hardening/9.2.1_pam_retry_cracklib.sh
View File

@ -80,7 +80,7 @@ apply () {
fi fi
elif [ $FNRET = 2 ]; then elif [ $FNRET = 2 ]; then
crit "$PATTERN is not present in $FILE, add default config to $FILE" crit "$PATTERN is not present in $FILE, add default config to $FILE"
add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=8 difok=3" "# pam-auth-update(8) for details." add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=15 difok=3" "# pam-auth-update(8) for details."
elif [ $FNRET = 3 ]; then elif [ $FNRET = 3 ]; then
crit "$FILE is not exist, please check" crit "$FILE is not exist, please check"
elif [ $FNRET = 4 ]; then elif [ $FNRET = 4 ]; then

2
bin/hardening/9.2.2_pam_minlen_cracklib.sh
View File

@ -84,7 +84,7 @@ apply_debian () {
apt_install $PACKAGE apt_install $PACKAGE
elif [ $FNRET = 2 ]; then elif [ $FNRET = 2 ]; then
warn "$PATTERN is not present in $FILE, add default config to $FILE" warn "$PATTERN is not present in $FILE, add default config to $FILE"
add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=8 difok=3" "# pam-auth-update(8) for details." add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=$OPTIONNAME difok=3" "# pam-auth-update(8) for details."
elif [ $FNRET = 3 ]; then elif [ $FNRET = 3 ]; then
crit "$FILE is not exist, please check" crit "$FILE is not exist, please check"
elif [ $FNRET = 4 ]; then elif [ $FNRET = 4 ]; then

2
bin/hardening/9.2.3_pam_dcredit_cracklib.sh
View File

@ -84,7 +84,7 @@ apply_debian () {
apt_install $PACKAGE apt_install $PACKAGE
elif [ $FNRET = 2 ]; then elif [ $FNRET = 2 ]; then
crit "$PATTERN is not present in $FILE, add default config to $FILE" crit "$PATTERN is not present in $FILE, add default config to $FILE"
add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=8 difok=3" "# pam-auth-update(8) for details." add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=15 difok=3" "# pam-auth-update(8) for details."
elif [ $FNRET = 3 ]; then elif [ $FNRET = 3 ]; then
crit "$FILE is not exist, please check" crit "$FILE is not exist, please check"
elif [ $FNRET = 4 ]; then elif [ $FNRET = 4 ]; then

2
bin/hardening/9.2.4_pam_ucredit_cracklib.sh
View File

@ -85,7 +85,7 @@ apply_debian () {
apt_install $PACKAGE apt_install $PACKAGE
elif [ $FNRET = 2 ]; then elif [ $FNRET = 2 ]; then
crit "$PATTERN is not present in $FILE, add default config to $FILE" crit "$PATTERN is not present in $FILE, add default config to $FILE"
add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=8 difok=3" "# pam-auth-update(8) for details." add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=15 difok=3" "# pam-auth-update(8) for details."
elif [ $FNRET = 3 ]; then elif [ $FNRET = 3 ]; then
crit "$FILE is not exist, please check" crit "$FILE is not exist, please check"
elif [ $FNRET = 4 ]; then elif [ $FNRET = 4 ]; then

2
bin/hardening/9.2.5_pam_ocredit_cracklib.sh
View File

@ -84,7 +84,7 @@ apply_debian () {
apt_install $PACKAGE apt_install $PACKAGE
elif [ $FNRET = 2 ]; then elif [ $FNRET = 2 ]; then
crit "$PATTERN is not present in $FILE, add default config to $FILE" crit "$PATTERN is not present in $FILE, add default config to $FILE"
add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=8 difok=3" "# pam-auth-update(8) for details." add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=15 difok=3" "# pam-auth-update(8) for details."
elif [ $FNRET = 3 ]; then elif [ $FNRET = 3 ]; then
crit "$FILE is not exist, please check" crit "$FILE is not exist, please check"
elif [ $FNRET = 4 ]; then elif [ $FNRET = 4 ]; then

2
bin/hardening/9.2.6_pam_lcredit_cracklib.sh
View File

@ -84,7 +84,7 @@ apply_debian () {
apt_install $PACKAGE apt_install $PACKAGE
elif [ $FNRET = 2 ]; then elif [ $FNRET = 2 ]; then
warn "$PATTERN is not present in $FILE, add default config to $FILE" warn "$PATTERN is not present in $FILE, add default config to $FILE"
add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=8 difok=3" "# pam-auth-update(8) for details." add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=15 difok=3" "# pam-auth-update(8) for details."
elif [ $FNRET = 3 ]; then elif [ $FNRET = 3 ]; then
crit "$FILE is not exist, please check" crit "$FILE is not exist, please check"
elif [ $FNRET = 4 ]; then elif [ $FNRET = 4 ]; then

2
bin/hardening/9.2.7_pam_difok_cracklib.sh
View File

@ -84,7 +84,7 @@ apply_debian () {
apt_install $PACKAGE apt_install $PACKAGE
elif [ $FNRET = 2 ]; then elif [ $FNRET = 2 ]; then
warn "$PATTERN is not present in $FILE, add default config to $FILE" warn "$PATTERN is not present in $FILE, add default config to $FILE"
add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=8 difok=3" "# pam-auth-update(8) for details." add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=15 difok=3" "# pam-auth-update(8) for details."
elif [ $FNRET = 3 ]; then elif [ $FNRET = 3 ]; then
crit "$FILE is not exist, please check" crit "$FILE is not exist, please check"
elif [ $FNRET = 4 ]; then elif [ $FNRET = 4 ]; then

2
bin/hardening/9.2.8_pam_minclass_cracklib.sh
View File

@ -84,7 +84,7 @@ apply_debian () {
apt_install $PACKAGE apt_install $PACKAGE
elif [ $FNRET = 2 ]; then elif [ $FNRET = 2 ]; then
warn "$PATTERN is not present in $FILE, add default config to $FILE" warn "$PATTERN is not present in $FILE, add default config to $FILE"
add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=8 difok=3" "# pam-auth-update(8) for details." add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=15 difok=3" "# pam-auth-update(8) for details."
elif [ $FNRET = 3 ]; then elif [ $FNRET = 3 ]; then
crit "$FILE is not exist, please check" crit "$FILE is not exist, please check"
elif [ $FNRET = 4 ]; then elif [ $FNRET = 4 ]; then

2
bin/hardening/9.2.9_pam_maxrepeat_cracklib.sh
View File

@ -84,7 +84,7 @@ apply_debian () {
apt_install $PACKAGE apt_install $PACKAGE
elif [ $FNRET = 2 ]; then elif [ $FNRET = 2 ]; then
warn "$PATTERN is not present in $FILE, add default config to $FILE" warn "$PATTERN is not present in $FILE, add default config to $FILE"
add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=8 difok=3" "# pam-auth-update(8) for details." add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=15 difok=3" "# pam-auth-update(8) for details."
elif [ $FNRET = 3 ]; then elif [ $FNRET = 3 ]; then
crit "$FILE is not exist, please check" crit "$FILE is not exist, please check"
elif [ $FNRET = 4 ]; then elif [ $FNRET = 4 ]; then