Major Hayden fa657903bc Apply pam_faillock restrictions [+Docs] ...

This patch applies pam_faillock restrictions to Red Hat and CentOS servers.
It's an optional change since it could cause issues with existing production
deployments.

Ubuntu doesn't have pam_faillock, but it may be possible to use fail2ban to
achieve some of the same goals later.

Documentation is included.

Implements: blueprint security-rhel7-stig
Change-Id: Ib2d22deff2d97786b84a550313f6ca08cf10cef8

2016-12-05 08:47:59 +00:00

..

apt.yml

Disable repo GPG checks by default

2016-11-14 15:20:04 -06:00

auditd.yml

Set auditd failure flag [+Docs]

2016-11-29 16:20:32 -06:00

auth.yml

Apply pam_faillock restrictions [+Docs]

2016-12-05 08:47:59 +00:00

file_perms.yml

Find files/dirs without valid owners [+Docs]

2016-11-30 15:56:42 +00:00

graphical.yml

Merge "Correct lineinfile option"

2016-11-19 03:46:34 +00:00

kernel.yml

Disable usb-storage module [+Docs]

2016-11-29 14:53:45 -06:00

lsm.yml

Enable SELinux/AppArmor [+Docs]

2016-11-29 15:42:16 -06:00

main.yml

Ensure prep tasks have 'always' tag

2016-12-02 13:11:47 -06:00

misc.yml

Check for two nameservers [+Docs]

2016-12-01 20:07:56 +00:00

packages.yml

Fix stig_packages_rhel7 typo

2016-11-17 14:43:00 -06:00

rpm.yml

Disable repo GPG checks by default

2016-11-14 15:20:04 -06:00

sshd.yml

Display MOTD warning banner [+Docs]

2016-12-01 08:07:48 -06:00