ansible-hardening/doc/metadata/rhel7/RHEL-07-020630.rst
Major Hayden 0eef112699 Refactor login.defs adjustments [+Docs]
This patch refactors the login.defs adjustments into a single task
that loops over a variable. It also adds tasks for RHEL-07-010200,
RHEL-07-010420, and RHEL-07-020230.

Documentation is included.

Implements: blueprint security-rhel7-stig
Change-Id: I7c1f869d87338547da8943d5aa506ceb871cee68
2016-12-02 13:38:27 +00:00

22 lines
576 B
ReStructuredText

---
id: RHEL-07-020630
status: implemented
tag: auth
---
The ``CREATE_HOME`` variable is set to ``yes`` by the tasks in the security
role. This ensures that home directories are created each time a new user
account is created.
Deployers can opt out of this change by setting the following Ansible variable:
.. code-block:: yaml
security_shadow_utils_create_home: no
.. note::
On CentOS 7 and Red Hat Enterprise Linux 7 systems, home directories are
always created with new users by default. Home directories are not created
by default on Ubuntu systems.