e954ff5c64
This patch updates the documentation for the developer notes associated with the Cat 1 (Low) controls applied by the security role. Partial-bug: 1583744 Change-Id: I19cab15d1bc7ce6e8604d63bf8184b9569207991
13 lines
355 B
ReStructuredText
13 lines
355 B
ReStructuredText
**Opt-in required**
|
|
|
|
Deployers must opt-in for this change by setting the following Ansible
|
|
variable:
|
|
|
|
.. code-block:: yaml
|
|
|
|
security_inactive_account_lock_days: 35
|
|
|
|
The STIG requires this to be set to 35 days at a maximum. The Ansible tasks
|
|
will not make any changes to ``/etc/default/useradd`` unless
|
|
``security_inactive_account_lock_days`` is set.
|