search

ansible-lockdown / RHEL6-STIG

Ansible role for Red Hat 6 DISA STIG
MIT License
100 stars 55 forks source link

swap custom pam module out for upstream pamd module #125

Closed jamescassell closed 6 years ago

jamescassell commented 6 years ago

The first commit here switches to referencing the system-auth and password-auth files rather than the -ac versions, which might not be in effect, depending on the configuration.

The rest of the pull request swaps out the module calls, removes the custom pam module, and bumps the minimum ansible version to 2.3, which is the first version with the pamd module.

I'd prefer if you merged my pull request rather than squashed it. (How you did it last time was perfect!)

juliedavila commented 6 years ago

Excellent, thank you. Going to hold of on pulling this right now until we do some testing on our side. Once we do we'll cut a new major release since this is very much backwards breaking.

shepdelacreme commented 6 years ago

Sorry this has been outstanding for so long. We need to rework our testing for this role to make this sort of change easier to merge.

Anyway I think the best path forward is to: 1) I'll cut a new point release 0.9.6 (there is a good amount of fixes between 0.9.5 and devel that aren't backwards breaking) 2) Then merge this and it will be the new devel going forward. People can still point to 0.9.6 if they need to run this with older versions of Ansible.