accounts_password_set_max_life_existing: Fix ansible to avoid system

accounts
ComplianceAsCode · Dec 15, 2022 · e34e2a7 · e34e2a7
1 parent 01f2f77
commit e34e2a7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...strictions/password_expiration/accounts_password_set_max_life_existing/ansible/shared.yml b/...strictions/password_expiration/accounts_password_set_max_life_existing/ansible/shared.yml
@@ -7,7 +7,7 @@
 
 - name: Collect users with not correct maximum time period between password changes
   ansible.builtin.command:
-    cmd: awk -F':' '$5 > {{ var_accounts_maximum_age_login_defs }} || $5 == "" {print $1}' /etc/shadow
+    cmd: awk -F':' '(/^[^:]+:[^!*]/ && ($5 > {{ var_accounts_maximum_age_login_defs }} || $5 == "")) {print $1}' /etc/shadow
   register: user_names
 
 - name: Change the maximum time period between password changes