Rename original remediation script (password_require_minimum_class.sh)
from:
https://git.fedorahosted.org/cgit/scap-security-guide.git/commit/?id=a38e...
to it's proper name (so remediation would actually perform the fix).
Besides that replace the hardcoded value of '3' with evaluated value of
$var_password_pam_cracklib_minclass variable (which can be actually set
up to something different according to custom preferences). Also make
the remediation fix implementation to complain / align more with actual
requirements for the remediation fixes (include templates/support.sh etc.)
Testing report:
---------------
Change has been tested on RHEL-6 for both cases:
* minclass already present in /etc/pam.d/system-auth, but having different
value than expected / required,
* minclass not present in /etc/pam.d/system-auth file
and works properly.
Please review.
Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team