openstack/ansible-hardening
Code Issues Proposed changes
24f3f73717
ansible-hardening/doc/source/developer-notes/V-38692.rst
Major Hayden e954ff5c64 Docs: Update dev notes for Cat 1 controls 
This patch updates the documentation for the developer notes associated
with the Cat 1 (Low) controls applied by the security role.

Partial-bug: 1583744

Change-Id: I19cab15d1bc7ce6e8604d63bf8184b9569207991
2016-05-24 16:22:12 +00:00

355 B
Raw Blame History

Opt-in required

Deployers must opt-in for this change by setting the following Ansible variable:

security_inactive_account_lock_days: 35

The STIG requires this to be set to 35 days at a maximum. The Ansible tasks will not make any changes to /etc/default/useradd unless security_inactive_account_lock_days is set.