tyler.durden
/
harbian-audit
mirror of https://github.com/hardenedlinux/harbian-audit.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Modify 9.2.11 for support to ubuntu 22.04

This commit is contained in:
Samson-W 2022-09-04 17:52:01 +00:00
parent e5539baf5b
commit d9b24e2e7e
1 changed files with 11 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
bin/hardening/9.2.11_pam_deny_times_tally2.sh
View File

@ -75,7 +75,7 @@ audit_debian11 () {
} }
audit () { audit () {
if [ $ISDEBIAN11 = 1 ]; then if [ $ISDEBIAN11 -eq 1 ]; then
audit_debian11 audit_debian11
else else
audit_before11 audit_before11
@ -160,12 +160,12 @@ apply () {
check_config() { check_config() {
if [ $OS_RELEASE -eq 2 ]; then if [ $OS_RELEASE -eq 2 ]; then
PACKAGE='pam' PACKAGE='pam'
PAMLIBNAME='pam_failloc.so' PAMLIBNAME='pam_faillock.so'
AUTHPATTERN='^auth[[:space:]]*required[[:space:]]*pam_failloc.so' AUTHPATTERN='^auth[[:space:]]*required[[:space:]]*pam_faillock.so'
AUTHFILE='/etc/pam.d/password-auth' AUTHFILE='/etc/pam.d/password-auth'
AUTHRULE='auth required pam_failloc.so deny=3 even_deny_root unlock_time=900' AUTHRULE='auth required pam_faillock.so deny=3 even_deny_root unlock_time=900'
ADDPATTERNLINE='auth[[:space:]]*required' ADDPATTERNLINE='auth[[:space:]]*required'
else elif [ $OS_RELEASE -eq 1 ]; then
is_debian_11 is_debian_11
# faillock for Debian 11 # faillock for Debian 11
if [ $FNRET = 0 ]; then if [ $FNRET = 0 ]; then
@ -179,6 +179,12 @@ check_config() {
AUTHPATTERN='^auth[[:space:]]*required[[:space:]]*pam_tally2.so' AUTHPATTERN='^auth[[:space:]]*required[[:space:]]*pam_tally2.so'
AUTHRULE='auth required pam_tally2.so deny=3 even_deny_root unlock_time=900' AUTHRULE='auth required pam_tally2.so deny=3 even_deny_root unlock_time=900'
fi fi
# same to debian11
elif [ $OS_RELEASE -eq 3 ]; then
ISDEBIAN11=1
SECCONFFILE='/etc/security/faillock.conf'
AUTHPATTERN='^auth[[:space:]]*required[[:space:]]*pam_faillock.so'
AUTHRULE='auth required pam_faillock.so'
fi fi
} }