openstack/ansible-hardening
Code Issues Proposed changes
ansible-hardening/doc/metadata/rhel7/RHEL-07-010190.rst
Major Hayden 06090a2bda Ensure libuser crypt_style is SHA512 [+Docs] 
This patch applies fixes for RHEL-07-010190 and also includes
documentation.

Implements: blueprint security-rhel7-stig
Change-Id: Ic77b55bd392b03bbfec923e4e6dbd361d050470e
2016-11-29 13:21:55 -06:00

440 B
Raw Blame History

---id: RHEL-07-010190 status: implemented - red hat only tag: misc ---

The role ensures that crypt_style is set to sha512 in /etc/libuser.conf, which is the default for CentOS 7 and Red Hat Enterprise Linux 7.

Ubuntu does not use libuser, so this change is not applicable.

Deployers can opt out of this change by setting the following Ansible variable:

security_libuser_crypt_style_sha512: no