From d512bace20b4ac9f6788584f81456b71ca1f7874 Mon Sep 17 00:00:00 2001 From: Edgar Aguilar Date: Wed, 9 Aug 2023 16:12:43 -0600 Subject: [PATCH] Fix remediation of sssd_enable_smartcards Fix implemenentation in which there were unreachable code due to wrong macro usage Signed-off-by: Edgar Aguilar --- .../guide/services/sssd/sssd_enable_smartcards/bash/shared.sh | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/linux_os/guide/services/sssd/sssd_enable_smartcards/bash/shared.sh b/linux_os/guide/services/sssd/sssd_enable_smartcards/bash/shared.sh index b51312601f9..4e2e00554e8 100644 --- a/linux_os/guide/services/sssd/sssd_enable_smartcards/bash/shared.sh +++ b/linux_os/guide/services/sssd/sssd_enable_smartcards/bash/shared.sh @@ -15,9 +15,7 @@ umask $OLD_UMASK {{% if product in ["fedora", "ol8", "ol9", "rhel8", "rhel9"] %}} if [ -f /usr/bin/authselect ]; then - if authselect check; then - {{{ bash_enable_authselect_feature('with-smartcard') | indent(8) }}} - fi + {{{ bash_enable_authselect_feature('with-smartcard') | indent(4) }}} else {{{ bash_ensure_pam_module_option('/etc/pam.d/smartcard-auth', 'auth', 'sufficient', 'pam_sss.so', 'allow_missing_name', '', '') | indent(4) }}} {{{ bash_ensure_pam_module_option('/etc/pam.d/system-auth', 'auth', '\[success=done authinfo_unavail=ignore ignore=ignore default=die\]', 'pam_sss.so', 'try_cert_auth', '', '') | indent(4) }}}