1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
|
class TestPAMConfig(TestBase):
"""
Verify that pam is setup for SELinux
"""
class ErrorPAMSSH(ErrorBase):
def __str__(self):
return "/etc/pam.d/ssh is not SELinux enabled"
class ErrorPAMLogin(ErrorBase):
def __str__(self):
return "/etc/pam.d/login is not SELinux enabled"
@staticmethod
def test():
import os, re
r = re.compile(r'^\s*session\s*required\s*pam_selinux.so')
result = []
if os.access("/etc/pam.d/ssh", os.F_OK):
selinuxon = False
f = open("/etc/pam.d/ssh","r")
for line in f.readlines():
if r.match(line):
selinuxon = True
f.close()
if not selinuxon:
result.append(TestPAMConfig.ErrorPAMSSH())
if os.access("/etc/pam.d/login", os.F_OK):
selinuxon = False
f = open("/etc/pam.d/login","r")
for line in f.readlines():
if r.match(line):
selinuxon = True
f.close()
if not selinuxon:
result.append(TestPAMConfig.ErrorPAMLogin())
return result
register_test(TestPAMConfig)
|
