Fix script so that it doesn't constantly concatenate. BUG=b/300016454 TEST=None RELEASE_NOTE=None cos-patch: bug Change-Id: I884fcc6c49d5fc3af80bfe2a8d3388d5f7e8d29b
diff --git a/alphabet-compliance/scripts/5330-password-reuse-limited.sh b/alphabet-compliance/scripts/5330-password-reuse-limited.sh index f5372eb..a2822f9 100644 --- a/alphabet-compliance/scripts/5330-password-reuse-limited.sh +++ b/alphabet-compliance/scripts/5330-password-reuse-limited.sh
@@ -14,6 +14,16 @@ # limitations under the License. ## Section: 5.3.3 Ensure password reuse is limited (Not Scored) ## -sed -i '0,/password/s//password required pam_pwhistory.so remember=5\n&/' \ - /etc/pam.d/system-auth -sed -i 's/password.*pam_unix.so/& remember=5/' /etc/pam.d/system-auth +# Check if the changes have already been made +if ! grep -q \ + "password[[:space:]]*required[[:space:]]*pam_pwhistory.so[[:space:]]*remember=5" \ + /etc/pam.d/system-auth; then + sed -i \ + '0,/password/s//password required pam_pwhistory.so remember=5\n&/' \ + /etc/pam.d/system-auth +fi +if ! grep -q \ + "password[[:space:]]*required[[:space:]]*pam_unix.so[[:space:]]*remember=5" \ + /etc/pam.d/system-auth; then + sed -i 's/password.*pam_unix.so/& remember=5/' /etc/pam.d/system-auth +fi