From 1f7c09de9c07c51779028e29e2f335ad8136e00d Mon Sep 17 00:00:00 2001 From: Martin Schurz Date: Thu, 17 Sep 2026 16:26:45 +0200 Subject: [PATCH] Remove requirement for minimum password age Signed-off-by: Martin Schurz --- controls/os_spec.rb | 2 -- inspec.yml | 2 -- 2 files changed, 4 deletions(-) diff --git a/controls/os_spec.rb b/controls/os_spec.rb index 48dd32f..22cd808 100644 --- a/controls/os_spec.rb +++ b/controls/os_spec.rb @@ -22,7 +22,6 @@ login_defs_umask = input('login_defs_umask', value: os.redhat? ? '077' : '027') login_defs_passmaxdays = input('login_defs_passmaxdays', value: '60') -login_defs_passmindays = input('login_defs_passmindays', value: '7') login_defs_passwarnage = input('login_defs_passwarnage', value: '7') shadow_group = 'root' @@ -171,7 +170,6 @@ its('ENV_PATH') { should include('/usr/local/bin:/usr/bin:/bin') } its('UMASK') { should include(login_defs_umask) } its('PASS_MAX_DAYS') { should eq login_defs_passmaxdays } - its('PASS_MIN_DAYS') { should eq login_defs_passmindays } its('PASS_WARN_AGE') { should eq login_defs_passwarnage } its('LOGIN_RETRIES') { should eq '5' } its('LOGIN_TIMEOUT') { should eq '60' } diff --git a/inspec.yml b/inspec.yml index 88b3fbc..ac84edb 100644 --- a/inspec.yml +++ b/inspec.yml @@ -15,8 +15,6 @@ inputs: description: Default umask to set in login.defs - name: login_defs_passmaxdays description: Default password maxdays to set in login.defs - - name: login_defs_passmindays - description: Default password mindays to set in login.defs - name: login_defs_passwarnage description: Default password warnage (days) to set in login.defs - name: blacklist