Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichael Boelen <michael.boelen@cisofy.com>2020-06-23 14:57:14 +0300
committerMichael Boelen <michael.boelen@cisofy.com>2020-06-23 14:57:14 +0300
commit36f86d76c441d5cfd090f637ca68388f5353c646 (patch)
treeedce8805d353a291e113067d8eb8e0d5f293cdf7 /include/tests_authentication
parent610f70d5aa5a8e5930b7b0329e1e7c8347367f43 (diff)
[AUTH-9229] added option to look for LOCKED accounts
Diffstat (limited to 'include/tests_authentication')
-rw-r--r--include/tests_authentication4
1 files changed, 2 insertions, 2 deletions
diff --git a/include/tests_authentication b/include/tests_authentication
index bf8cabe8..49ba49db 100644
--- a/include/tests_authentication
+++ b/include/tests_authentication
@@ -293,8 +293,8 @@
if [ -e ${ROOTDIR}etc/shadow ]; then SHADOW="${ROOTDIR}etc/shadow"; fi
FIND=$(${CAT_BINARY} ${ROOTDIR}etc/passwd ${SHADOW} | ${AWKBINARY} -F : '{print length($2) ":" $2 }' | while read METHOD; do
case ${METHOD} in
- 1:\* | 1:x | 0: | *:!*)
- # disabled | shadowed | no password | locked account
+ 1:\* | 1:x | 0: | *:!* | *LOCK*)
+ # disabled | shadowed | no password | locked account (can be literal *LOCK* or something like LOCKED)
;;
*:\$5\$*| *:\$6\$*)
# sha256crypt | sha512crypt: check number of rounds, should be >5000