31 lines
800 B
Bash
31 lines
800 B
Bash
#!/usr/bin/env bash
|
|
|
|
pam_path="/usr/share/pam-configs"
|
|
profile_name="pwhistory"
|
|
|
|
expected_content=(
|
|
'Name: pwhistory password history checking'
|
|
'Default: yes'
|
|
'Priority: 1024'
|
|
'Password-Type: Primary' 'Password:'
|
|
'requisite pam_pwhistory.so remember=24 enforce_for_root try_first_pass use_authtok'
|
|
)
|
|
|
|
# check content of pwhistory
|
|
if [[ -f "$pam_path/$profile_name" ]]; then
|
|
echo "$profile_name profile found in $pam_path:"
|
|
else
|
|
echo "ERROR: $profile_name profile not found in $pam_path."
|
|
exit 1
|
|
fi
|
|
|
|
# check content of pwhistory
|
|
for line in "${expected_pwquality[@]}"; do
|
|
if ! grep -Fxq "$line" "$pam_path/$profile_name"; then
|
|
echo "ERROR: Expected line not found in $profile_name: $line"
|
|
exit 1
|
|
fi
|
|
done
|
|
echo "$profile_name profile content in $pam_path/$profile_name is correct."
|
|
exit 0
|