[Openstack-security] [Bug 1618551] Re: Two nullok references in RHEL7 and V-38497 missed the second one

OpenStack Infra 1618551 at bugs.launchpad.net
Tue Aug 30 22:18:24 UTC 2016


Reviewed:  https://review.openstack.org/363108
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible-security/commit/?id=83dd342b19b9982115ec22fd4cedcad7593baf4f
Submitter: Jenkins
Branch:    master

commit 83dd342b19b9982115ec22fd4cedcad7593baf4f
Author: Mark Hooper <mark.hooper at nokia.com>
Date:   Tue Aug 30 13:21:07 2016 -0500

    Add additional nullok check
    
    Closes-bug: 1618551
    Change-Id: Id1d2f86e8610605ae071447289315aab3d117496


** Changed in: openstack-ansible
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of OpenStack
Security, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/1618551

Title:
  Two nullok references in RHEL7 and V-38497 missed the second one

Status in openstack-ansible:
  Fix Released

Bug description:
  The v-38497 check looks for ^auth.* nullok and removes it very nicely
  from /etc/pam.d/system-auth however in RHEL 7 there is an additional
  nullok reference on line 15 of the file "password    sufficient
  pam_unix.so sha512 shadow nullok try_first_pass use_authtok".  Need to
  update the check to remove the additional nullok line.

To manage notifications about this bug go to:
https://bugs.launchpad.net/openstack-ansible/+bug/1618551/+subscriptions




More information about the Openstack-security mailing list