Use template var to test

ComplianceAsCode · Dec 2, 2024 · a1003e9 · a1003e9
1 parent 85023f3
commit a1003e9
Show file tree

Hide file tree

Showing 5 changed files with 6 additions and 6 deletions.
diff --git a/shared/templates/pam_account_password_faillock/tests/ubuntu_commented_values.fail.sh b/shared/templates/pam_account_password_faillock/tests/ubuntu_commented_values.fail.sh
@@ -5,4 +5,4 @@ rm -f /usr/share/pam-configs/cac_faillock*
 
 DEBIAN_FRONTEND=noninteractive pam-auth-update
 
-echo "#deny=1" > /etc/security/faillock.conf
+echo "#{{{ PRM_NAME }}}={{{ VARIABLE_LOWER_BOUND }}}" > /etc/security/faillock.conf
diff --git a/shared/templates/pam_account_password_faillock/tests/ubuntu_correct.pass.sh b/shared/templates/pam_account_password_faillock/tests/ubuntu_correct.pass.sh
@@ -2,4 +2,4 @@
 # platform = multi_platform_ubuntu
 
 {{{ bash_enable_pam_faillock_directly_in_pam_files() }}}
-echo "deny=1" > /etc/security/faillock.conf
+echo "{{{ PRM_NAME }}}={{{ VARIABLE_LOWER_BOUND }}}" > /etc/security/faillock.conf
diff --git a/shared/templates/pam_account_password_faillock/tests/ubuntu_correct_pamd.pass.sh b/shared/templates/pam_account_password_faillock/tests/ubuntu_correct_pamd.pass.sh
@@ -11,7 +11,7 @@ Conflicts: faillock
 Priority: 0
 Auth-Type: Primary
 Auth:
-    [default=die]                   pam_faillock.so authfail deny=3
+    [default=die]                   pam_faillock.so authfail {{{ PRM_NAME }}}={{{ VARIABLE_LOWER_BOUND }}}
 EOF
 
 cat << EOF > /usr/share/pam-configs/cac_faillock_notify
@@ -21,7 +21,7 @@ Conflicts: faillock_notify
 Priority: 1025
 Auth-Type: Primary
 Auth:
-    requisite                       pam_faillock.so preauth
+    requisite                       pam_faillock.so preauth {{{ PRM_NAME }}}={{{ VARIABLE_LOWER_BOUND }}}
 Account-Type: Primary
 Account:
     required                        pam_faillock.so

diff --git a/shared/templates/pam_account_password_faillock/tests/ubuntu_missing_pamd.fail.sh b/shared/templates/pam_account_password_faillock/tests/ubuntu_missing_pamd.fail.sh
@@ -5,4 +5,4 @@ rm -f /usr/share/pam-configs/cac_faillock*
 
 DEBIAN_FRONTEND=noninteractive pam-auth-update
 
-echo "deny=1" > /etc/security/faillock.conf
+echo "{{{ PRM_NAME }}}={{{ VARIABLE_LOWER_BOUND }}}" > /etc/security/faillock.conf
diff --git a/shared/templates/pam_account_password_faillock/tests/ubuntu_wrong_value.fail.sh b/shared/templates/pam_account_password_faillock/tests/ubuntu_wrong_value.fail.sh
@@ -2,4 +2,4 @@
 # platform = multi_platform_ubuntu
 
 {{{ bash_enable_pam_faillock_directly_in_pam_files() }}}
-echo "deny=999" > /etc/security/faillock.conf
+echo "{{{ PRM_NAME }}}={{{ VARIABLE_UPPER_BOUND }}}" > /etc/security/faillock.conf
Original file line number	Diff line number	Diff line change
Expand Up		@@ -5,4 +5,4 @@ rm -f /usr/share/pam-configs/cac_faillock*

		DEBIAN_FRONTEND=noninteractive pam-auth-update

		echo "#deny=1" > /etc/security/faillock.conf
		echo "#{{{ PRM_NAME }}}={{{ VARIABLE_LOWER_BOUND }}}" > /etc/security/faillock.conf