Merge branch 'main' of https://github.com/abhishekmj303/HardeningHub …

…into ui-new
abhishekmj303 · Dec 20, 2023 · ca8a03a · ca8a03a
2 parents 4bc381a + c2bd373
commit ca8a03a
Show file tree

Hide file tree

Showing 4 changed files with 40 additions and 4 deletions.
diff --git a/config/server/level-1.toml b/config/server/level-1.toml
@@ -128,4 +128,13 @@ disable_nopasswd = false
 enable_reauthentication = true
 enable_authentication_timeout = true
 authentication_timeout = 15 # in minutes
-restrict_su = true
+restrict_su = true
+
+[pam] # PAM
+enable_password_level = true
+required_password_level = "strong" # weak, medium, strong, stronger
+enable_password_length = true
+minimum_password_length = 14
+limit_password_reuse = true
+password_reuse_limit = 5
+configure_hashing_algorithm = true
diff --git a/config/server/level-2.toml b/config/server/level-2.toml
@@ -127,4 +127,13 @@ disable_nopasswd = false
 enable_reauthentication = true
 enable_authentication_timeout = true
 authentication_timeout = 15 # in minutes
-restrict_su = true
+restrict_su = true
+
+[pam] # PAM
+enable_password_level = true
+required_password_level = "strong" # weak, medium, strong, stronger
+enable_password_length = true
+minimum_password_length = 14
+limit_password_reuse = true
+password_reuse_limit = 5
+configure_hashing_algorithm = true
diff --git a/config/workstation/level-1.toml b/config/workstation/level-1.toml
@@ -124,4 +124,13 @@ disable_nopasswd = false
 enable_reauthentication = true
 enable_authentication_timeout = true
 authentication_timeout = 15 # in minutes
-restrict_su = true
+restrict_su = true
+
+[pam] # PAM
+enable_password_level = true
+required_password_level = "strong" # weak, medium, strong, stronger
+enable_password_length = true
+minimum_password_length = 14
+limit_password_reuse = true
+password_reuse_limit = 5
+configure_hashing_algorithm = true
diff --git a/config/workstation/level-2.toml b/config/workstation/level-2.toml
@@ -127,4 +127,13 @@ disable_nopasswd = false
 enable_reauthentication = true
 enable_authentication_timeout = true
 authentication_timeout = 15 # in minutes
-restrict_su = true
+restrict_su = true
+
+[pam] # PAM
+enable_password_level = true
+required_password_level = "strong" # weak, medium, strong, stronger
+enable_password_length = true
+minimum_password_length = 14
+limit_password_reuse = true
+password_reuse_limit = 5
+configure_hashing_algorithm = true