#212 possibly - improve even_deny_root

Signed-off-by: Mark Bolwell <[email protected]>
ansible-lockdown · Jul 5, 2023 · 01aada9 · 01aada9
1 parent d320485
commit 01aada9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/defaults/main.yml b/defaults/main.yml
@@ -730,7 +730,7 @@ rhel8stig_pam_faillock:
     attempts: 3
     interval: 900
     unlock_time: 0
-    fail_for_root: true
+    fail_for_root: "{{ rhel_08_020023 }}"
     dir: /var/log/faillock
 
 # RHEL-08-030670