Include new variable in individual profiles

Profiles for RHEL and Fedora products that don't consume rules from a control file and use the relevant rules were also update to include var_password_hashing_algorithm_pam variable. Signed-off-by: Marcus Burghardt <[email protected]>
ComplianceAsCode · Jul 17, 2024 · e4985f0 · e4985f0
1 parent 1dcc4db
commit e4985f0
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 0 deletions.
diff --git a/products/fedora/profiles/pci-dss.profile b/products/fedora/profiles/pci-dss.profile
@@ -10,6 +10,7 @@ selections:
     - var_account_disable_post_pw_expiration=90
     - var_accounts_passwords_pam_faillock_deny=6
     - var_accounts_passwords_pam_faillock_unlock_time=1800
+    - var_password_hashing_algorithm_pam=sha512
     - var_password_pam_minlen=7
     - var_password_pam_minclass=2
     - var_accounts_maximum_age_login_defs=90

diff --git a/products/rhel8/profiles/cjis.profile b/products/rhel8/profiles/cjis.profile
@@ -79,6 +79,7 @@ selections:
     - var_authselect_profile=sssd
     - enable_authselect
     - accounts_max_concurrent_login_sessions
+    - var_password_hashing_algorithm_pam=sha512
     - set_password_hashing_algorithm_systemauth
     - set_password_hashing_algorithm_passwordauth
     - set_password_hashing_algorithm_logindefs

diff --git a/products/rhel8/profiles/rht-ccp.profile b/products/rhel8/profiles/rht-ccp.profile
@@ -17,6 +17,7 @@ selections:
     - var_accounts_minimum_age_login_defs=7
     - var_accounts_passwords_pam_faillock_deny=5
     - var_accounts_password_warn_age_login_defs=7
+    - var_password_hashing_algorithm_pam=sha512
     - var_password_pam_retry=3
     - var_password_pam_dcredit=1
     - var_password_pam_ucredit=2

diff --git a/products/rhel8/profiles/stig.profile b/products/rhel8/profiles/stig.profile
@@ -32,6 +32,7 @@ selections:
     - var_password_pam_difok=8
     - var_password_pam_maxrepeat=3
     - var_password_hashing_algorithm=SHA512
+    - var_password_hashing_algorithm_pam=sha512
     - var_password_pam_maxclassrepeat=4
     - var_password_pam_minclass=4
     - var_accounts_minimum_age_login_defs=1