tyler.durden/lynis
1
0
Fork 0
mirror of https://github.com/CISOfy/lynis.git synced 2025-07-27 15:54:09 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add TODO for PAM checks on AUTH-9286

Browse Source
This commit is contained in:
Michael Boelen 2018-01-24 19:41:15 +01:00
parent 2ec24e73ed
commit eb8b467915
No known key found for this signature in database
GPG Key ID: 26141F77A09D7F04
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
include/tests_authentication
View File

@ -776,7 +776,11 @@
# Description : Check user password aging # Description : Check user password aging
# Notes : MIN = minimum age, avoid rotation of passwords too quickly # Notes : MIN = minimum age, avoid rotation of passwords too quickly
# : MAX = maximum age, ensure regular change of passwords # : MAX = maximum age, ensure regular change of passwords
if [ -f ${ROOTDIR}etc/login.defs ]; then PREQS_MET="YES"; else PREQS_MET="NO"; fi PREQS_MET="NO"
if [ -f ${ROOTDIR}etc/login.defs ]; then
PREQS_MET="YES"
# Future TODO: check if PAM overrule these settings
fi
Register --test-no AUTH-9286 --preqs-met ${PREQS_MET} --weight L --network NO --category security --description "Checking user password aging" Register --test-no AUTH-9286 --preqs-met ${PREQS_MET} --weight L --network NO --category security --description "Checking user password aging"
if [ ${SKIPTEST} -eq 0 ]; then if [ ${SKIPTEST} -eq 0 ]; then
LogText "Test: Checking PASS_MIN_DAYS option in ${ROOTDIR}etc/login.defs" LogText "Test: Checking PASS_MIN_DAYS option in ${ROOTDIR}etc/login.defs"