Files
ansible-hardening/doc/metadata/rhel7/V-71923.rst
Markos Chandras f422da8599 Add support for the openSUSE Leap distributions
Add support for the openSUSE Leap distributions. The security rules
are similar to the RedHat and Ubuntu ones. We also replace
ansible_os_family with ansible_pkg_mgr since the former does not
return consistent results across different SUSE distributions especially
on older Ansible versions.

Change-Id: I20ffe17039bb641aad70d8123f0b7e7417a42cba
2017-06-27 15:43:53 +01:00

19 lines
474 B
ReStructuredText

---
id: V-71923
status: implemented - red hat only
tag: accounts
---
The role ensures that ``crypt_style`` is set to ``sha512`` in
``/etc/libuser.conf``, which is the default for CentOS 7 and Red Hat Enterprise
Linux 7.
Ubuntu, openSUSE and SUSE Linux Enterprise 12 do not use ``libuser``, so this change
is not applicable.
Deployers can opt out of this change by setting the following Ansible variable:
.. code-block:: yaml
security_libuser_crypt_style_sha512: no