ansible-hardening/vars/redhat.yml
Major Hayden 6476ef7635 Ensure V-38574 works reliably on CentOS
This patch ensures that the tasks can find the right PAM
files to do the checks for V-38574. CentOS systems usually
symlink password-auth to password-auth-ac, but this symlink
is missing in the gate image.

The tasks now look for the password-auth file and this will work
properly on a generic CentOS 7 system as well as within the gate image.

Change-Id: I24281530df8bc939a823ffcc6187882574d266f6
2016-05-31 15:39:56 +00:00

32 lines
971 B
YAML

---
# Copyright 2016, Rackspace US, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# Configuration file paths
pam_auth_file: /etc/pam.d/system-auth
pam_password_file: /etc/pam.d/password-auth
vsftpd_conf_file: /etc/vsftpd/vsftpd.conf
# Package names
auditd_pkg: audit
ldap_server_pkg: openldap-servers
telnet_server_pkg: telnet-server
tftp_pkg: tftp-server
xserver_pkg: xorg-x11-server-Xorg
ypserv_pkg: ypserv
# Service names
cron_service: crond
ssh_service: sshd