[Openstack-security] [Bug 1583752] Re: Security role doesn't handle nullok for CentOS properly (V-38497)

OpenStack Infra 1583752 at bugs.launchpad.net
Wed May 25 08:20:50 UTC 2016


Reviewed:  https://review.openstack.org/318888
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible-security/commit/?id=a972b4f60ff27b856cb820a1cf4078cb11e01ccb
Submitter: Jenkins
Branch:    master

commit a972b4f60ff27b856cb820a1cf4078cb11e01ccb
Author: Major Hayden <major at mhtx.net>
Date:   Mon May 23 13:18:32 2016 -0500

    Fix null password auth in CentOS
    
    The task for V-38497 works well for Ubuntu, but CentOS uses a different
    string for enabling null password logins in PAM. This patch splits the
    existing task into two so that each case is handled properly.
    
    Closes-bug: 1583752
    
    Change-Id: I4c3bde487308270d43b52eba183bb9137b4c4d6b


** Changed in: openstack-ansible
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of OpenStack
Security, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/1583752

Title:
  Security role doesn't handle nullok for CentOS properly (V-38497)

Status in openstack-ansible:
  Fix Released

Bug description:
  In the checks for V-38497, the task looks for nullok_secure and
  removes it from the pam configuration.  This works okay for Ubuntu,
  but it doesn't help with CentOS since it uses just 'nullok'.

To manage notifications about this bug go to:
https://bugs.launchpad.net/openstack-ansible/+bug/1583752/+subscriptions




More information about the Openstack-security mailing list