PAM

The following PAM-related controls are excluded from some hardened Linux images. These controls apply to platform-specific PAM configurations, which are not included in OpenLogic's images. As such, these controls are not applicable in minimal deployments.

Virtual machine images

  • CIS 5.3.1.1: Ensure latest version of PAM is installed

  • CIS 5.3.1.2: Ensure libpam-modules is installed

  • CIS 5.3.1.3: Ensure libpam-pwquality is installed

  • CIS 5.3.3.4.3: Ensure pam_unix includes a strong password hashing algorithm

Container images

  • CIS 4.4.1.2: Ensure the latest version of authselect is installed

  • CIS 5.3.1.2: Ensure the latest version of authselect is installed

  • CIS 5.3.1.3: Ensure libpam-pwquality is installed (automated)