openstack/ansible-hardening
Code Issues Proposed changes
Files
0e8feaf9eb5265dcef8682d596e62063f7120a92
ansible-hardening/doc/metadata/rhel7/RHEL-07-010170.rst
Major Hayden 61dbdd64cd Check for SHA512 password storage [+Docs] 
This patch looks for `sha512` password storage inside the PAM configuration
file for password auth. A warning is printed if it is not found.

Documentation is included.

Implements: blueprint security-rhel7-stig
Change-Id: I0aa02f5731ad4b227be9a244042cdb104a4ea341
2016-12-01 08:28:09 -06:00

266 B
Raw Blame History

---id: RHEL-07-010170 status: implemented tag: implemented ---

The PAM configuration file for password storage is checked to ensure that sha512 is found on the pam_unix.so line. If sha512 is not found, a debug message is printed in the Ansible output.