Update tests

ComplianceAsCode · Dec 5, 2024 · 7c69fdb · 7c69fdb
1 parent 57705be
commit 7c69fdb
Show file tree

Hide file tree

Showing 20 changed files with 57 additions and 212 deletions.
diff --git a/...d_attempts/accounts_passwords_pam_faillock_interval/tests/ubuntu_commented_values.fail.sh b/...d_attempts/accounts_passwords_pam_faillock_interval/tests/ubuntu_commented_values.fail.sh
diff --git a/...ing_out_password_attempts/accounts_passwords_pam_faillock_interval/tests/ubuntu_common.sh b/...ing_out_password_attempts/accounts_passwords_pam_faillock_interval/tests/ubuntu_common.sh
diff --git a/...t_password_attempts/accounts_passwords_pam_faillock_interval/tests/ubuntu_correct.pass.sh b/...t_password_attempts/accounts_passwords_pam_faillock_interval/tests/ubuntu_correct.pass.sh
diff --git a/...sword_attempts/accounts_passwords_pam_faillock_interval/tests/ubuntu_correct_pamd.pass.sh b/...sword_attempts/accounts_passwords_pam_faillock_interval/tests/ubuntu_correct_pamd.pass.sh
diff --git a/...ttempts/accounts_passwords_pam_faillock_interval/tests/ubuntu_empty_faillock_conf.fail.sh b/...ttempts/accounts_passwords_pam_faillock_interval/tests/ubuntu_empty_faillock_conf.fail.sh
diff --git a/...sword_attempts/accounts_passwords_pam_faillock_interval/tests/ubuntu_missing_pamd.fail.sh b/...sword_attempts/accounts_passwords_pam_faillock_interval/tests/ubuntu_missing_pamd.fail.sh
diff --git a/..._attempts/accounts_passwords_pam_faillock_interval/tests/ubuntu_multiple_pam_unix.fail.sh b/..._attempts/accounts_passwords_pam_faillock_interval/tests/ubuntu_multiple_pam_unix.fail.sh
diff --git a/...ssword_attempts/accounts_passwords_pam_faillock_interval/tests/ubuntu_wrong_value.fail.sh b/...ssword_attempts/accounts_passwords_pam_faillock_interval/tests/ubuntu_wrong_value.fail.sh
diff --git a/...ttempts/accounts_passwords_pam_faillock_unlock_time/tests/ubuntu_commented_values.fail.sh b/...ttempts/accounts_passwords_pam_faillock_unlock_time/tests/ubuntu_commented_values.fail.sh
diff --git a/..._out_password_attempts/accounts_passwords_pam_faillock_unlock_time/tests/ubuntu_common.sh b/..._out_password_attempts/accounts_passwords_pam_faillock_unlock_time/tests/ubuntu_common.sh
diff --git a/...assword_attempts/accounts_passwords_pam_faillock_unlock_time/tests/ubuntu_correct.pass.sh b/...assword_attempts/accounts_passwords_pam_faillock_unlock_time/tests/ubuntu_correct.pass.sh
diff --git a/...rd_attempts/accounts_passwords_pam_faillock_unlock_time/tests/ubuntu_correct_pamd.pass.sh b/...rd_attempts/accounts_passwords_pam_faillock_unlock_time/tests/ubuntu_correct_pamd.pass.sh
diff --git a/...mpts/accounts_passwords_pam_faillock_unlock_time/tests/ubuntu_empty_faillock_conf.fail.sh b/...mpts/accounts_passwords_pam_faillock_unlock_time/tests/ubuntu_empty_faillock_conf.fail.sh
diff --git a/...rd_attempts/accounts_passwords_pam_faillock_unlock_time/tests/ubuntu_missing_pamd.fail.sh b/...rd_attempts/accounts_passwords_pam_faillock_unlock_time/tests/ubuntu_missing_pamd.fail.sh
diff --git a/...tempts/accounts_passwords_pam_faillock_unlock_time/tests/ubuntu_multiple_pam_unix.fail.sh b/...tempts/accounts_passwords_pam_faillock_unlock_time/tests/ubuntu_multiple_pam_unix.fail.sh
diff --git a/shared/templates/pam_account_password_faillock/tests/ubuntu_commented_values.fail.sh b/shared/templates/pam_account_password_faillock/tests/ubuntu_commented_values.fail.sh
@@ -1,4 +1,14 @@
 #!/bin/bash
 # platform = multi_platform_ubuntu
 
-echo "#{{{ PRM_NAME }}}={{{ CORRECT_VALUE }}}" > /etc/security/faillock.conf
+{{% if PRM_NAME == "fail_interval"%}}
+# variables = var_accounts_passwords_pam_faillock_fail_interval=5
+VALUE=6
+{{% elif PRM_NAME == "unlock_time" %}}
+# variables = var_accounts_passwords_pam_faillock_unlock_time=5
+VALUE=6
+{{% else %}}
+VALUE=1
+{{% endif %}}
+
+echo "#{{{ PRM_NAME }}}=$VALUE" > /etc/security/faillock.conf
diff --git a/shared/templates/pam_account_password_faillock/tests/ubuntu_correct.pass.sh b/shared/templates/pam_account_password_faillock/tests/ubuntu_correct.pass.sh
@@ -1,5 +1,15 @@
 #!/bin/bash
 # platform = multi_platform_ubuntu
 
+{{% if PRM_NAME == "fail_interval"%}}
+# variables = var_accounts_passwords_pam_faillock_fail_interval=5
+VALUE=6
+{{% elif PRM_NAME == "unlock_time" %}}
+# variables = var_accounts_passwords_pam_faillock_unlock_time=5
+VALUE=6
+{{% else %}}
+VALUE=1
+{{% endif %}}
+
 {{{ bash_enable_pam_faillock_directly_in_pam_files() }}}
-echo "{{{ PRM_NAME }}}={{{ CORRECT_VALUE }}}" > /etc/security/faillock.conf
+echo "{{{ PRM_NAME }}}=$VALUE" > /etc/security/faillock.conf
diff --git a/shared/templates/pam_account_password_faillock/tests/ubuntu_correct_pamd.pass.sh b/shared/templates/pam_account_password_faillock/tests/ubuntu_correct_pamd.pass.sh
@@ -1,13 +1,23 @@
 #!/bin/bash
 # platform = multi_platform_ubuntu
 
+{{% if PRM_NAME == "fail_interval"%}}
+# variables = var_accounts_passwords_pam_faillock_fail_interval=5
+VALUE=6
+{{% elif PRM_NAME == "unlock_time" %}}
+# variables = var_accounts_passwords_pam_faillock_unlock_time=5
+VALUE=6
+{{% else %}}
+VALUE=1
+{{% endif %}}
+
 cat << EOF > /usr/share/pam-configs/faillock
 Name: Enable pam_faillock to deny access
 Default: yes
 Priority: 0
 Auth-Type: Primary
 Auth:
-    [default=die]                   pam_faillock.so authfail {{{ PRM_NAME }}}={{{ CORRECT_VALUE }}}
+    [default=die]                   pam_faillock.so authfail {{{ PRM_NAME }}}=$VALUE
 EOF
 
 cat << EOF > /usr/share/pam-configs/faillock_notify
@@ -16,7 +26,7 @@ Default: yes
 Priority: 1024
 Auth-Type: Primary
 Auth:
-    requisite                       pam_faillock.so preauth {{{ PRM_NAME }}}={{{ CORRECT_VALUE }}}
+    requisite                       pam_faillock.so preauth {{{ PRM_NAME }}}=$VALUE
 Account-Type: Primary
 Account:
     required                        pam_faillock.so

diff --git a/shared/templates/pam_account_password_faillock/tests/ubuntu_missing_pamd.fail.sh b/shared/templates/pam_account_password_faillock/tests/ubuntu_missing_pamd.fail.sh
@@ -1,4 +1,14 @@
 #!/bin/bash
 # platform = multi_platform_ubuntu
 
-echo "{{{ PRM_NAME }}}={{{ CORRECT_VALUE }}}" > /etc/security/faillock.conf
+{{% if PRM_NAME == "fail_interval"%}}
+# variables = var_accounts_passwords_pam_faillock_fail_interval=5
+VALUE=6
+{{% elif PRM_NAME == "unlock_time" %}}
+# variables = var_accounts_passwords_pam_faillock_unlock_time=5
+VALUE=6
+{{% else %}}
+VALUE=1
+{{% endif %}}
+
+echo "{{{ PRM_NAME }}}=$VALUE" > /etc/security/faillock.conf
diff --git a/shared/templates/pam_account_password_faillock/tests/ubuntu_wrong_value.fail.sh b/shared/templates/pam_account_password_faillock/tests/ubuntu_wrong_value.fail.sh
@@ -1,5 +1,16 @@
 #!/bin/bash
 # platform = multi_platform_ubuntu
 
+{{% if PRM_NAME == "fail_interval"%}}
+# variables = var_accounts_passwords_pam_faillock_fail_interval=5
+VALUE=4
+{{% elif PRM_NAME == "unlock_time" %}}
+# variables = var_accounts_passwords_pam_faillock_unlock_time=5
+VALUE=4
+{{% else %}}
+# variables = var_accounts_passwords_pam_faillock_deny=5
+VALUE=6
+{{% endif %}}
+
 {{{ bash_enable_pam_faillock_directly_in_pam_files() }}}
-echo "{{{ PRM_NAME }}}={{{ WRONG_VALUE }}}" > /etc/security/faillock.conf
+echo "{{{ PRM_NAME }}}=$VALUE" > /etc/security/faillock.conf