openstack/ansible-hardening
Code Issues Proposed changes
Files
3699f907100aabf6dcd7d2cfa3ac1ec1b62158ba
ansible-hardening/doc/metadata/rhel7/V-71927.rst
Major Hayden 3699f90710 Actually set min/max password lifetime for account 
This patch changes the tasks for V-71927 and V-71931 to actually set
the minimum password age on user accounts rather than printing
useless debug messages.

Change-Id: I3e085160baef1ecc12a3c96f08ede3845c68449f
2017-06-13 06:32:47 +00:00

568 B
Raw Blame History

---id: V-71927 status: opt-in tag: accounts ---

Setting a minimum password lifetime on interactive user accounts provides security benefits by limiting the frequency of password changes. However, this can cause login problems for users without proper communication and coordination.

Deployers can opt-in for this change by setting the following Ansible variable:

security_set_minimum_password_lifetime: yes

The tasks will examine each interactive user account and set the minimum password age if the existing setting is not equal to one day.