Skip to content

Commit

Permalink
Add macro ansible_check_pam_auth_update_presence
Browse files Browse the repository at this point in the history
  • Loading branch information
alanmcanonical committed Dec 18, 2024
1 parent 4b3d00d commit 54dfd3f
Showing 1 changed file with 11 additions and 0 deletions.
11 changes: 11 additions & 0 deletions shared/macros/10-ansible.jinja
Original file line number Diff line number Diff line change
Expand Up @@ -939,6 +939,17 @@ The following macro remediates Audit syscall rule in :code:`/etc/audit/audit.rul
register: result_authselect_present
{{%- endmacro -%}}

{{#
Used to identify if pam-auth-update is present or not in the system.
Some macros can change the remediation behavior based on the presence of authselect.

#}}
{{%- macro ansible_check_pam_auth_update_presence() -%}}
- name: '{{{ rule_title }}} - Check if system relies on pam-auth-update tool'
ansible.builtin.stat:
path: /usr/sbin/pam-auth-update
register: result_pam_auth_update_present
{{%- endmacro -%}}

{{#
Ensure pam_lastlog.so PAM module shows the failed logins according to the system capabilities.
Expand Down

0 comments on commit 54dfd3f

Please sign in to comment.