kubeasz/roles/os-harden/templates/usr/share/pam-configs/pam_tally2.j2

{{ ansible_managed | comment }}

Name: tally2 lockout after failed attempts enforcement
Default: yes
Priority: 1024
Conflicts: cracklib
Auth-Type: Primary
Auth-Initial:
  required      pam_tally2.so deny={{ os_auth_retries }} onerr=fail unlock_time={{ os_auth_lockout_time }}
Account-Type: Primary
Account-Initial:
  required      pam_tally2.so
update: os-hardening 7.0.0 2021-01-19 23:35:31 +08:00			`{{ ansible_managed \| comment }}`

测试增加OS安全基线，FROM dev-sec/ansible-os-hardening 2018-05-01 10:16:11 +08:00			`Name: tally2 lockout after failed attempts enforcement`
			`Default: yes`
			`Priority: 1024`
			`Conflicts: cracklib`
			`Auth-Type: Primary`
			`Auth-Initial:`
			`required pam_tally2.so deny={{ os_auth_retries }} onerr=fail unlock_time={{ os_auth_lockout_time }}`
			`Account-Type: Primary`
			`Account-Initial:`
			`required pam_tally2.so`