Skip to content

Commit 074a871

Browse files
authored
Merge pull request #132 from imjoseangel/feature/checkpasswdhashes
Adds /etc/passwd format check
2 parents 1365044 + e20da94 commit 074a871

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

controls/os_spec.rb

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -99,6 +99,15 @@
9999
end
100100
end
101101

102+
control 'os-03b' do
103+
impact 1.0
104+
title 'Check passwords hashes in /etc/passwd'
105+
desc 'Check periodically that /etc/passwd does not contain passwords'
106+
describe passwd do
107+
its('passwords') { should be_in ['x', '*'] }
108+
end
109+
end
110+
102111
control 'os-04' do
103112
impact 1.0
104113
title 'Dot in PATH variable'

0 commit comments

Comments
 (0)