|
 |
76240a |
From 3d7b01a7fdc27f7e5a31ba508f7f84dab446aa4b Mon Sep 17 00:00:00 2001
|
|
|
76240a |
From: Eduardo Barretto <eduardo.barretto@canonical.com>
|
|
|
76240a |
Date: Wed, 16 Jun 2021 16:34:59 +0200
|
|
|
76240a |
Subject: [PATCH 1/5] Add accounts_password_pam_dictcheck to UBTU-20-010056
|
|
|
76240a |
|
|
|
76240a |
---
|
|
|
76240a |
products/ubuntu2004/profiles/stig.profile | 2 ++
|
|
|
76240a |
1 file changed, 2 insertions(+)
|
|
|
76240a |
|
|
|
76240a |
diff --git a/products/ubuntu2004/profiles/stig.profile b/products/ubuntu2004/profiles/stig.profile
|
|
|
76240a |
index 4d03bfe7ae..ac9685809c 100644
|
|
|
76240a |
--- a/products/ubuntu2004/profiles/stig.profile
|
|
|
76240a |
+++ b/products/ubuntu2004/profiles/stig.profile
|
|
|
76240a |
@@ -113,6 +113,8 @@ selections:
|
|
|
76240a |
- accounts_password_pam_ocredit
|
|
|
76240a |
|
|
|
76240a |
# UBTU-20-010056 The Ubuntu operating system must prevent the use of dictionary words for passwords.
|
|
|
76240a |
+ - var_password_pam_dictcheck=1
|
|
|
76240a |
+ - accounts_password_pam_dictcheck
|
|
|
76240a |
|
|
|
76240a |
# UBTU-20-010057 The Ubuntu operating system must be configured so that when passwords are changed or new passwords are established, pwquality must be used.
|
|
|
76240a |
- var_password_pam_retry=3
|
|
|
76240a |
|
|
|
76240a |
From 6c3c586a7fe27d68052428e02843c573f9cbd559 Mon Sep 17 00:00:00 2001
|
|
|
76240a |
From: Eduardo Barretto <eduardo.barretto@canonical.com>
|
|
|
76240a |
Date: Wed, 4 Aug 2021 18:11:48 +0200
|
|
|
76240a |
Subject: [PATCH 2/5] Add ubuntu2004 to prodtype in
|
|
|
76240a |
accounts_password_pam_dictcheck
|
|
|
76240a |
|
|
|
76240a |
---
|
|
|
76240a |
.../accounts_password_pam_dictcheck/rule.yml | 2 +-
|
|
|
76240a |
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
76240a |
|
|
|
76240a |
diff --git a/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_dictcheck/rule.yml b/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_dictcheck/rule.yml
|
|
|
76240a |
index 2990150c0a..00da0397b0 100644
|
|
|
76240a |
--- a/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_dictcheck/rule.yml
|
|
|
76240a |
+++ b/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_dictcheck/rule.yml
|
|
|
76240a |
@@ -1,6 +1,6 @@
|
|
|
76240a |
documentation_complete: true
|
|
|
76240a |
|
|
|
76240a |
-prodtype: fedora,rhel8
|
|
|
76240a |
+prodtype: fedora,rhel8,ubuntu2004
|
|
|
76240a |
|
|
|
76240a |
title: 'Ensure PAM Enforces Password Requirements - Prevent the Use of Dictionary Words'
|
|
|
76240a |
|
|
|
76240a |
|
|
|
76240a |
From b523676430765ab7fff09f790618f091d3f916e2 Mon Sep 17 00:00:00 2001
|
|
|
76240a |
From: Eduardo Barretto <eduardo.barretto@canonical.com>
|
|
|
76240a |
Date: Wed, 4 Aug 2021 18:12:59 +0200
|
|
|
76240a |
Subject: [PATCH 4/5] Add stigid@ubuntu2004 to accounts_password_pam_dictcheck
|
|
|
76240a |
|
|
|
76240a |
---
|
|
|
76240a |
.../accounts_password_pam_dictcheck/rule.yml | 1 +
|
|
|
76240a |
1 file changed, 1 insertion(+)
|
|
|
76240a |
|
|
|
76240a |
diff --git a/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_dictcheck/rule.yml b/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_dictcheck/rule.yml
|
|
|
76240a |
index bae2db25fe..226329d752 100644
|
|
|
76240a |
--- a/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_dictcheck/rule.yml
|
|
|
76240a |
+++ b/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_dictcheck/rule.yml
|
|
|
76240a |
@@ -29,6 +29,7 @@ references:
|
|
|
76240a |
nist: IA-5(c),IA-5(1)(a),CM-6(a),IA-5(4)
|
|
|
76240a |
srg: SRG-OS-000480-GPOS-00225
|
|
|
76240a |
stigid@rhel8: RHEL-08-020300
|
|
|
76240a |
+ stigid@ubuntu2004: UBTU-20-010056
|
|
|
76240a |
|
|
|
76240a |
ocil_clause: 'dictcheck is not found or not equal to the required value'
|
|
|
76240a |
|
|
|
76240a |
|
|
|
76240a |
From 39973c39ea17fb13730f1bef239783464c1b4b01 Mon Sep 17 00:00:00 2001
|
|
|
76240a |
From: Eduardo Barretto <eduardo.barretto@canonical.com>
|
|
|
76240a |
Date: Wed, 4 Aug 2021 18:13:16 +0200
|
|
|
76240a |
Subject: [PATCH 5/5] Add pam platform to accounts_password_pam_dictcheck
|
|
|
76240a |
|
|
|
76240a |
---
|
|
|
76240a |
.../accounts_password_pam_dictcheck/rule.yml | 1 +
|
|
|
76240a |
1 file changed, 1 insertion(+)
|
|
|
76240a |
|
|
|
76240a |
diff --git a/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_dictcheck/rule.yml b/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_dictcheck/rule.yml
|
|
|
76240a |
index 226329d752..d0d4b8c5c5 100644
|
|
|
76240a |
--- a/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_dictcheck/rule.yml
|
|
|
76240a |
+++ b/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_dictcheck/rule.yml
|
|
|
76240a |
@@ -39,6 +39,7 @@ ocil: |-
|
|
|
76240a |
The <tt>dictcheck</tt> parameter should be equal to 1. The value should look like
|
|
|
76240a |
dictcheck=1
|
|
|
76240a |
|
|
|
76240a |
+platform: pam
|
|
|
76240a |
|
|
|
76240a |
template:
|
|
|
76240a |
name: accounts_password
|