chris/NIST-800.53-VM
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fixed pam.d/common-auth

Browse Source 
script locks user out.  added the following to AC-7 
sed -i 's/\[success=1 default=ignore\]\s*pam_unix.so/[success=2 default=ignore]      pam_unix.so/' \
  /etc/pam.d/common-auth
This commit is contained in:
chris
2026-06-09 02:53:00 +00:00
parent 3bcd6903d8
commit 6d1146e75e
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/nist-800-53-harden-v2.sh
+2
View File
@@ -154,6 +154,8 @@ sed -i '/^auth.*pam_unix.so/i auth required pam_faillo
/etc/pam.d/common-auth /etc/pam.d/common-auth
sed -i '/^auth.*pam_unix.so/a auth [default=die] pam_faillock.so authfail' \ sed -i '/^auth.*pam_unix.so/a auth [default=die] pam_faillock.so authfail' \
/etc/pam.d/common-auth /etc/pam.d/common-auth
sed -i 's/\[success=1 default=ignore\]\s*pam_unix.so/[success=2 default=ignore] pam_unix.so/' \
/etc/pam.d/common-auth
echo "account required pam_faillock.so" >> /etc/pam.d/common-account echo "account required pam_faillock.so" >> /etc/pam.d/common-account