#212 possibly - improve even_deny_root

Signed-off-by: Mark Bolwell <[email protected]>
ansible-lockdown · May 24, 2024 · 37033e5 · 37033e5
1 parent 991bfdc
commit 37033e5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/defaults/main.yml b/defaults/main.yml
@@ -732,7 +732,7 @@ rhel8stig_pam_faillock:
     attempts: 3
     interval: 900
     unlock_time: 0
-    fail_for_root: true
+    fail_for_root: "{{ rhel_08_020023 }}"
     dir: /var/log/faillock
 
 # RHEL-08-020035