add local accounts to password list

Signed-off-by: Thomas Sjögren <[email protected]>
konstruktoid · Jan 8, 2024 · 9a0bcca · 9a0bcca
1 parent d2ed591
commit 9a0bcca
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/tasks/password.yml b/tasks/password.yml
@@ -254,6 +254,12 @@
     - cracklib
     - pam
 
+- name: Get local accounts
+  ansible.builtin.command:
+    cmd: awk -F':' '{print $1}' /etc/passwd
+  changed_when: false
+  register: local_accounts
+
 - name: Add local information to password list
   become: true
   ansible.builtin.lineinfile:
@@ -270,6 +276,7 @@
   loop:
     - "{{ ansible_hostname | lower }}"
     - "{{ ansible_os_family | lower }}"
+    - "{{ local_accounts.stdout | unique | trim }}"
   tags:
     - cracklib
     - pam