With an AD account there isn't an entry in the /etc/shadow file. This
caused the password length check to treat it as a zero length password.
Now local password check is skipped for AD account.
Also added an additional check for a locked local account for the sudo
user.
Signed-off-by: John Foster <robopickle@proton.me>
* container standards
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* logic on handlers
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* initial container ignore
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* tags and containder discovery
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* logic on auditd task
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* tags and crypto logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* distro update for rocky
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* system_is_container updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* ssh pkg check
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* logrotate pkg check
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* logic in container check
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* add pkg fact and audit conditionals
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* tidy up crypto step
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* Added missing tags
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* container vars file now a variable
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* added uid discovery and usage
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* Updated OS checks and conditionals
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* fixed empty become
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* change audit to include task
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* Added OS_specific vars
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* updated import/include
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* OS Specific vars
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* updated tags
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* updated changed_when
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* fixed UID logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* changed reboot var
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* changed skip_reboot var name
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* masked only
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* fix logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* remove debug update logic 6.2.8
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* initial
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* removed CentOS
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
