OpenSCAP/scap-security-guide — pull request #305 by iankko (2014-10-18 15:38:46+00:00)
Title: [bugfix] [shared] Fix remediation script for 'Set Deny For Failed Password Attempts wrt to issue #304

Multiple issues with current implementation of this script:
* operating on one file name containing space, rather than on two separate files,
* hardcoded path in second case,
* wrong use of ```[default=die]``` option for ```authsucc``` option,
* inability to fix the state when pam_faillock.so wasn't present in the files yet,
* authsucc should be replaced with preauth + authfail combination.

See more details in:
https://github.com/OpenSCAP/scap-security-guide/issues/304
and
https://github.com/OpenSCAP/scap-security-guide/issues/302