sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

improvments v2

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2024-08-07 10:30:08 +01:00
parent 0fc418a222
commit 4f566974c9
No known key found for this signature in database
GPG key ID: 997FF7FE93AEB5B9
15 changed files with 110 additions and 58 deletions
Download patch file Download diff file Expand all files Collapse all files

7
templates/etc/security/pwquality.conf.d/50-pwcomplexity.conf.j2 Normal file
View file

@ -0,0 +1,7 @@
# CIS Configurations
# 5.3.3.2.3 Ensure password complexity is configured
minclass = {{ rhel9cis_passwd_minclass }}
dcredit = {{rhel9cis_passwd_dcredit }}
ucredit = {{ rhel9cis_passwd_ucredit }}
ocredit = {{ rhel9cis_passwd_ocredit }}
lcredit = {{ rhel9cis_passwd_lcredit }}

3
templates/etc/security/pwquality.conf.d/50-pwdictcheck.conf.j2 Normal file
View file

@ -0,0 +1,3 @@
# CIS Configurations
# 5.3.3.2.6 Ensure password dictionary check is enabled
dictcheck = {{ rhel9cis_passwd_dictcheck_value }}

3
templates/etc/security/pwquality.conf.d/50-pwdifok.conf.j2 Normal file
View file

@ -0,0 +1,3 @@
# CIS Configurations
# 5.3.3.2.1 Ensure password number of changed characters is configured
difok = {{ rhel9cis_passwd_difok_value }}

3
templates/etc/security/pwquality.conf.d/50-pwlength.conf.j2 Normal file
View file

@ -0,0 +1,3 @@
# CIS Configurations
# 5.3.3.2.2 Ensure minimum password length is configured
minlen = {{ rhel9cis_passwd_minlen_value }}

3
templates/etc/security/pwquality.conf.d/50-pwmaxsequence.conf.j2 Normal file
View file

@ -0,0 +1,3 @@
# CIS Configurations
# 5.3.3.2.5 Ensure password maximum sequential characters is configured
maxsequence = {{ rhel9cis_passwd_maxsequence_value }}

3
templates/etc/security/pwquality.conf.d/50-pwquality_enforce.conf.j2 Normal file
View file

@ -0,0 +1,3 @@
# CIS Configurations
# 5.3.3.2.7 Ensure password quality checking is enforced
enforcing = {{ rhel9cis_passwd_quality_enforce_value }}

3
templates/etc/security/pwquality.conf.d/50-pwrepeat.conf.j2 Normal file
View file

@ -0,0 +1,3 @@
# CIS Configurations
# 5.3.3.2.4 Ensure password same consecutive characters is configured
maxrepeat = {{ rhel9cis_passwd_maxrepeat_value }}

3
templates/etc/security/pwquality.conf.d/50-pwroot.conf.j2 Normal file
View file

@ -0,0 +1,3 @@
# CIS Configurations
# 5.3.3.2.8 Ensure password quality is enforced for the root user
{{ rhel9cis_passwd_quality_enforce_root_value }}