openstack/ansible-hardening
Code Issues Proposed changes
Files
f422da8599c6d8f64ebfefbf0a0aa711ea1f9569
ansible-hardening/doc/metadata/rhel7/V-71933.rst
Major Hayden 6e761efc9c Move tasks to 'accounts' file 
Several tasks in the auth.yml file were actually more closely related
to accounts rather than authentication. This patch moves tasks from
the auth.yml into accounts.yml and adjusts the docs to match.

This should alleviate confusion and allow deployers to fine-tune
their Ansible playbook runs.

Change-Id: I962014ba9022dd256dc04da6b4ac0860797fbc24
2017-05-20 13:37:16 -05:00

500 B
Raw Blame History

---id: V-71933 status: opt-in tag: accounts ---

Although the STIG requires that five passwords are remembered to prevent re-use, this can cause issues in production environment if the change is not communicated well to users. Therefore, the tasks in the security role do not apply this change by default.

Deployers can opt in for the change and specify a number of passwords to remember by setting the following Ansible variable:

security_password_remember_password: 5