diff --git a/components/pam.yml b/components/pam.yml index dee72a22451..e452cad23cc 100644 --- a/components/pam.yml +++ b/components/pam.yml @@ -59,6 +59,7 @@ rules: - accounts_password_pam_pwhistory_remember - accounts_password_pam_pwhistory_remember_password_auth - accounts_password_pam_pwhistory_remember_system_auth +- accounts_password_pam_pwhistory_use_authtok - accounts_password_pam_pwquality_password_auth - accounts_password_pam_pwquality_system_auth - accounts_password_pam_pwquality_enabled diff --git a/controls/cis_ubuntu2404.yml b/controls/cis_ubuntu2404.yml index 35b3e7efdc9..6e764b4f7d4 100644 --- a/controls/cis_ubuntu2404.yml +++ b/controls/cis_ubuntu2404.yml @@ -2027,8 +2027,9 @@ controls: levels: - l1_server - l1_workstation - status: planned - notes: TODO. Rule does not seem to be implemented, nor does it map to any rules in ubuntu2204 profile. + rules: + - accounts_password_pam_pwhistory_use_authtok + status: automated - id: 5.3.3.4.1 title: Ensure pam_unix does not include nullok (Automated)