37 lines
761 B
Django/Jinja
37 lines
761 B
Django/Jinja
|
# {{ ansible_managed }}
|
||
|
|
|
||
|
|
CHFN_RESTRICT rwh
|
||
|
|
DEFAULT_HOME no
|
||
|
|
ENCRYPT_METHOD SHA512
|
||
|
|
ENV_PATH PATH=/usr/local/bin:/usr/sbin:/usr/bin:/bin:/snap/bin
|
||
|
|
ENV_SUPATH PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
|
||
|
|
ERASECHAR 0177
|
||
|
|
FAILLOG_ENAB yes
|
||
|
|
FTMP_FILE /var/log/btmp
|
||
|
|
GID_MAX 60000
|
||
|
|
GID_MIN 1000
|
||
|
|
HUSHLOGIN_FILE .hushlogin
|
||
|
|
KILLCHAR 025
|
||
|
|
LOGIN_RETRIES 5
|
||
|
|
LOGIN_TIMEOUT 60
|
||
|
|
LOG_OK_LOGINS yes
|
||
|
|
LOG_UNKFAIL_ENAB no
|
||
|
|
MAIL_DIR /var/mail
|
||
|
|
PASS_MAX_DAYS 60
|
||
|
|
PASS_MIN_DAYS 1
|
||
|
|
{% if ansible_distribution == "CentOS" %}
|
||
|
|
PASS_MIN_LEN 15
|
||
|
|
{% endif %}
|
||
|
|
PASS_WARN_AGE 7
|
||
|
|
SHA_CRYPT_MAX_ROUNDS 65536
|
||
|
|
SHA_CRYPT_MIN_ROUNDS 10000
|
||
|
|
SU_NAME su
|
||
|
|
SYSLOG_SG_ENAB yes
|
||
|
|
SYSLOG_SU_ENAB yes
|
||
|
|
TTYGROUP tty
|
||
|
|
TTYPERM 0600
|
||
|
|
UID_MAX 60000
|
||
|
|
UID_MIN 1000
|
||
|
|
UMASK {{ umask_value }}
|
||
|
|
USERGROUPS_ENAB no
|