From 568636293e4c49546daef00fe67d03a21e70ca15 Mon Sep 17 00:00:00 2001 From: Vojtech Polasek Date: Fri, 30 Aug 2024 13:35:48 +0200 Subject: [PATCH] remove override of password hashing algorithm --- products/rhel10/profiles/anssi_bp28_enhanced.profile | 2 -- products/rhel10/profiles/anssi_bp28_high.profile | 2 -- products/rhel10/profiles/anssi_bp28_intermediary.profile | 2 -- products/rhel10/profiles/anssi_bp28_minimal.profile | 2 -- 4 files changed, 8 deletions(-) diff --git a/products/rhel10/profiles/anssi_bp28_enhanced.profile b/products/rhel10/profiles/anssi_bp28_enhanced.profile index 5ffcbfcac58a..89fdfe79bb5a 100644 --- a/products/rhel10/profiles/anssi_bp28_enhanced.profile +++ b/products/rhel10/profiles/anssi_bp28_enhanced.profile @@ -22,8 +22,6 @@ description: |- selections: - anssi:all:enhanced - - var_password_hashing_algorithm=SHA512 - - var_password_pam_unix_rounds=65536 # Following rules are incompatible with rhel10 product # tally2 is deprecated, replaced by faillock - '!accounts_passwords_pam_tally2_deny_root' diff --git a/products/rhel10/profiles/anssi_bp28_high.profile b/products/rhel10/profiles/anssi_bp28_high.profile index be4c57a4a52a..91966c3646cb 100644 --- a/products/rhel10/profiles/anssi_bp28_high.profile +++ b/products/rhel10/profiles/anssi_bp28_high.profile @@ -22,8 +22,6 @@ description: |- selections: - anssi:all:high - - var_password_hashing_algorithm=SHA512 - - var_password_pam_unix_rounds=65536 # the following rule renders UEFI systems unbootable - '!sebool_secure_mode_insmod' # Following rules are incompatible with rhel10 product diff --git a/products/rhel10/profiles/anssi_bp28_intermediary.profile b/products/rhel10/profiles/anssi_bp28_intermediary.profile index e10ee45f871f..c38821f4ecf4 100644 --- a/products/rhel10/profiles/anssi_bp28_intermediary.profile +++ b/products/rhel10/profiles/anssi_bp28_intermediary.profile @@ -22,8 +22,6 @@ description: |- selections: - anssi:all:intermediary - - var_password_hashing_algorithm=SHA512 - - var_password_pam_unix_rounds=65536 # Following rules are incompatible with rhel10 product # tally2 is deprecated, replaced by faillock - '!accounts_passwords_pam_tally2_deny_root' diff --git a/products/rhel10/profiles/anssi_bp28_minimal.profile b/products/rhel10/profiles/anssi_bp28_minimal.profile index be78eebc0903..d67e4f9d72a0 100644 --- a/products/rhel10/profiles/anssi_bp28_minimal.profile +++ b/products/rhel10/profiles/anssi_bp28_minimal.profile @@ -22,8 +22,6 @@ description: |- selections: - anssi:all:minimal - - var_password_hashing_algorithm=SHA512 - - var_password_pam_unix_rounds=65536 # Following rules are incompatible with rhel10 product # tally2 is deprecated, replaced by faillock - '!accounts_passwords_pam_tally2_deny_root'