fix errors

Signed-off-by: Martin Schurz <[email protected]>
dev-sec · Dec 22, 2024 · 4b05df7 · 4b05df7
1 parent fba07a4
commit 4b05df7
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/molecule/os_hardening/verify_tasks/ssh_auth_locked.yml b/molecule/os_hardening/verify_tasks/ssh_auth_locked.yml
@@ -1,8 +1,9 @@
 ---
-- name: Install sshpass
+- name: Install tools
   package:
     name:
       - sshpass
+      - python3-passlib
     state: present
 
 - name: Set password for test

diff --git a/roles/os_hardening/tasks/pam_debian.yml b/roles/os_hardening/tasks/pam_debian.yml
@@ -120,8 +120,8 @@
     - not os_auth_pam_passwdqc_enable
 
 - name: Allow Login with SSH Keys, when user password is expired
-  lineinfile:
+  ansible.builtin.lineinfile:
     path: /etc/pam.d/common-account
-    backrefs: yes
+    backrefs: true
     regexp: "^(account.*pam_unix.so(?!.*no_pass_expiry).*)$"
     line: '\1 no_pass_expiry'