Minor fix for pam_faillock regex on Ubuntu (5.4.2)

- Fixed to allow trailing whitespaces and comments.
ComplianceAsCode · Oct 16, 2023 · e605913 · e605913
1 parent 916401d
commit e605913
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/...ts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/oval/ubuntu.xml b/...ts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/oval/ubuntu.xml
@@ -40,7 +40,7 @@
   <constant_variable id="var_accounts_passwords_pam_faillock_deny_pam_faillock_account_regex"
                 datatype="string" version="1"
                 comment="regex to identify pam_faillock.so entry in account section of pam files">
-    <value>^\s*account\s+required\s+pam_faillock\.so$</value>
+    <value>^\s*account\s+required\s+pam_faillock\.so\s*(#.*)?$</value>
   </constant_variable>
 
   <constant_variable

diff --git a/...am/locking_out_password_attempts/accounts_passwords_pam_faillock_interval/oval/ubuntu.xml b/...am/locking_out_password_attempts/accounts_passwords_pam_faillock_interval/oval/ubuntu.xml
@@ -40,7 +40,7 @@
   <constant_variable id="var_accounts_passwords_pam_faillock_interval_pam_faillock_account_regex"
                 datatype="string" version="1"
                 comment="regex to identify pam_faillock.so entry in account section of pam files">
-    <value>^\s*account\s+required\s+pam_faillock\.so$</value>
+    <value>^\s*account\s+required\s+pam_faillock\.so\s*(#.*)?$</value>
   </constant_variable>
 
   <constant_variable

diff --git a/...locking_out_password_attempts/accounts_passwords_pam_faillock_unlock_time/oval/ubuntu.xml b/...locking_out_password_attempts/accounts_passwords_pam_faillock_unlock_time/oval/ubuntu.xml
@@ -40,7 +40,7 @@
   <constant_variable id="var_accounts_passwords_pam_faillock_unlock_time_pam_faillock_account_regex"
                 datatype="string" version="1"
                 comment="regex to identify pam_faillock.so entry in account section of pam files">
-    <value>^\s*account\s+required\s+pam_faillock\.so$</value>
+    <value>^\s*account\s+required\s+pam_faillock\.so\s*(#.*)?$</value>
   </constant_variable>
 
   <constant_variable