Update tests of accounts_password_pam_retry

ComplianceAsCode · Dec 2, 2024 · d0c1d87 · d0c1d87
1 parent bb219fc
commit d0c1d87
Show file tree

Hide file tree

Showing 3 changed files with 32 additions and 0 deletions.
diff --git a/...m/password_quality/password_quality_pwquality/accounts_password_pam_retry/tests/common.sh b/...m/password_quality/password_quality_pwquality/accounts_password_pam_retry/tests/common.sh
@@ -15,6 +15,9 @@ for file in ${configuration_files[@]}; do
 		"/etc/authselect/custom/testingProfile/$file"
 done
 authselect select --force custom/testingProfile
+{{% elif 'ubuntu' in product %}}
+rm -f /usr/share/pam-configs/*pwquality
+DEBIAN_FRONTEND=noninteractive pam-auth-update
 {{% else %}}
 for file in ${configuration_files[@]}; do
 	sed -i --follow-symlinks "/pam_pwquality\.so/d" "/etc/pam.d/$file"

diff --git a/...uality/password_quality_pwquality/accounts_password_pam_retry/tests/correct_value.pass.sh b/...uality/password_quality_pwquality/accounts_password_pam_retry/tests/correct_value.pass.sh
@@ -4,6 +4,19 @@
 
 source common.sh
 
+{{% if 'ubuntu' in product %}}
+cat << EOF > /usr/share/pam-configs/pwquality
+Name: Pwquality password strength checking
+Default: yes
+Priority: 1024
+Conflicts: cracklib
+Password-Type: Primary
+Password:
+    requisite                   pam_pwquality.so retry=3
+EOF
+
+DEBIAN_FRONTEND=noninteractive pam-auth-update
+{{% else %}}
 for file in ${configuration_files[@]}; do
 {{{ bash_ensure_pam_module_option('/etc/pam.d/$file',
                                    'password',
@@ -13,3 +26,4 @@ for file in ${configuration_files[@]}; do
 								   '3',
 								   '^\s*account') }}}
 done
+{{% endif %}}
diff --git a/..._quality/password_quality_pwquality/accounts_password_pam_retry/tests/wrong_value.fail.sh b/..._quality/password_quality_pwquality/accounts_password_pam_retry/tests/wrong_value.fail.sh
@@ -4,6 +4,19 @@
 
 source common.sh
 
+{{% if 'ubuntu' in product %}}
+cat << EOF > /usr/share/pam-configs/pwquality
+Name: Pwquality password strength checking
+Default: yes
+Priority: 1024
+Conflicts: cracklib
+Password-Type: Primary
+Password:
+    requisite                   pam_pwquality.so retry=7
+EOF
+
+DEBIAN_FRONTEND=noninteractive pam-auth-update
+{{% else %}}
 for file in ${configuration_files[@]}; do
 {{{ bash_ensure_pam_module_option('/etc/pam.d/$file',
                                    'password',
@@ -13,3 +26,5 @@ for file in ${configuration_files[@]}; do
 								   '7',
 								   '^\s*account') }}}
 done
+{{% endif %}}
+