26186. EPMO Open Source Coordination Office Redaction File Detail Report

Produced by Araxis Merge on 5/14/2018 1:18:37 PM Eastern Daylight Time. See www.araxis.com for information about Merge. This report uses XHTML and CSS2, and is best viewed with a modern standards-compliant browser. For optimum results when printing this report, use landscape orientation and enable printing of background images and colours in your browser.

26186.1 Files compared

#	Location	File	Last Modified
1	MCCF_EDI_TAS_Infrastructure.zip\MCCF_EDI_TAS_Infrastructure\mag_sys_build\playbooks	file_shadow.yml	Tue Mar 27 23:51:06 2018 UTC
2	MCCF_EDI_TAS_Infrastructure.zip\MCCF_EDI_TAS_Infrastructure\mag_sys_build\playbooks	file_shadow.yml	Tue May 8 03:18:45 2018 UTC

26186.2 Comparison summary

Description	Between Files 1 and 2
Description	Text Blocks	Lines
Unchanged	2	126
Changed	1	2
Inserted	0	0
Removed	0	0

26186.3 Comparison options

Whitespace
Character case	Differences in character case are significant
Line endings	Differences in line endings (`CR` and `LF` characters) are ignored
CR/LF characters	Not shown in the comparison detail

26186.4 Active regular expressions

No regular expressions were active.

26186.5 Comparison detail

	1	# Ansible Playbook
	2	# David Ho lton - Hal faker. PII 21 Nov 201 7
	3	#
	4	# Verify S hadow file exists
	5
	6	---
	7	- name: Ve rify Shado w file exi sts
	8	hosts: r hel7
	9	become: yes
	10	tasks:
	11	- name: Gather sta ts of Shad ow File
	12	stat:
	13	path : /etc/sha dow
	14	regist er: shdwfi le
	15
	16	- name: Fail IF th e shadow f ile is mis sing.
	17	fail:
	18	msg: "The shad ow file IS MISSING."
	19	when: shdwfile.s tat.exists == False
	20
	21	- name: Does the S hadow file exist?
	22	debug:
	23	msg: "The shad owfile {{ shdwfile.s tat.path } } exists."
	24	when: shdwfile.s tat.exists == True
	25
	26	# Verify s ervice acc ounts do n ot have pa sswords.
	27
	28	#- name: V erify serv ice accoun t do not h ave passwo rds
	29	# hosts: rhel7
	30	# become: yes
	31	# tasks:
	32	# - scrip t: ../file s/srvcpass wdchk.sh
	33
	34
	35
	36	- name: Gather Ser vice Acct Names exce pt the Jen kins user if it exis ts.
	37	#shell : "awk -F: '($3 > 0 && $3 <= 9 99) { prin t $1 }' /e tc/passwd"
	38	shell: "grep -v jenkins /e tc/passwd \| awk -F: '($3 > 0 & & $3 <= 99 9) { print $1 }'"
	39	regist er: SrvcAc cts
	40
	41	#- name: List Serv ice Accoun ts from /e tc/passwd
	42	# debug :
	43	# msg : "Service account: {{ item }} "
	44	# with_ items:
	45	# - " {{ SrvcAcc ts.stdout_ lines }}"
	46
	47	- name: Locking Se rvice Acco unts
	48	shell: "/bin/pas swd -l {{ item }}"
	49	with_i tems: "{{ SrvcAccts. stdout_lin es }}"
	50
	51	#
	52	#
	53	#
	54	# - name: Gather Se rvice Acco unts from /etc/shado w
	55	# shell : "grep \b {{ item }} /etc/shad ow \| awk - F: '$2 !~ /^[!*]/ {p rint $1, $ 2}'"
	56	# regis ter: BadSr vcAccts
	57	# with_ items:
	58	# - " {{ SrvcAcc ts.stdout_ lines }}"
	59	#
	60	# - name: List Serv ice Accoun ts from /e tc/shadow
	61	# fail:
	62	# msg : "BAD Ser vice Accou nts: {{ it em.stdout }}"
	63	# with_ items: "{{ BadSrvcAc cts.result s }}"
	64	# when: item.stdo ut != ""