8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
|
# File 'manifests/trusty64/pam.pp', line 8
class cis_benchmark::trusty64::pam {
## local variables: stig items
$cis_5_3_1 = $::cis_benchmark::cis_5_3_1
$cis_5_3_2 = $::cis_benchmark::cis_5_3_2
$cis_5_3_3 = $::cis_benchmark::cis_5_3_3
$cis_5_3_4 = $::cis_benchmark::cis_5_3_4
## CIS 5.3.1 Ensure password creation requirements are configured (Scored)
if ($cis_5_3_1) {
package { 'libpam-pwquality':
ensure => 'installed',
}
## enforce other pam related items
file { '/etc/security/pwquality.conf':
ensure => present,
mode => '0644',
owner => 'root',
group => 'root',
content => dos2unix(template('cis_benchmark/trusty64/pam/pwquality.conf.erb')),
}
file { '/etc/pam.d/common-password':
ensure => present,
mode => '0644',
owner => 'root',
group => 'root',
content => dos2unix(template('cis_benchmark/trusty64/pam/common-password.erb')),
}
file { '/etc/pam.d/common-auth':
ensure => present,
mode => '0644',
owner => 'root',
group => 'root',
content => dos2unix(template('cis_benchmark/trusty64/pam/common-auth.erb')),
}
}
}
|