Invalid login.defs for RHEL6

[swampf0etus]

In the templates/etc/login.defs.j2 template of the os_hardening role, there are a number of parameters that are relative to RHEL7+ that cause problems in RHEL6.

The following parameters cause problems on RHEL6:

SUB_UID_MIN
SUB_UID_MAX
SUB_UID_COUNT
SUB_GID_MIN
SUB_GID_MAX
SUB_GID_COUNT

Inclusion of these parameters on a RHEL6 host causes problems with user admin commands, such as usermod.

To recreate the issue:

1. Install RHEL6 on host
2. Run os_hardening role against host
3. Run user admin command, e.g.:
   usermod -aG myuser wheel

Example error:

configuration error - unknown item 'SUB_UID_MIN' (notify system administrator)
configuration error - unknown item 'SUB_UID_MAX' (notify system administrator)
configuration error - unknown item 'SUB_UID_COUNT' (notify system administrator)
configuration error - unknown item 'SUB_GID_MIN' (notify system administrator)
configuration error - unknown item 'SUB_GID_MAX' (notify system administrator)
configuration error - unknown item 'SUB_GID_COUNT' (notify system administrator)

[rndmh3ro]

Sorry, Redhat 6 is out of regular support so we don't support it either.