V-71965 Utilizes authconfig

[Bialogs]

V-71965 utilizes authconfig to perform a check if smartcard for login is enabled.

describe command("authconfig --test | grep -i smartcard") do

Unfortunately authconfig does not really exist on SIMP systems...

$ cat /sbin/authconfig
#!/bin/sh
# This file is managed by Puppet. DO NOT EDIT.

# authconfig cannot be used to generate equivalent,
# security-compliant, PAM configuration as that created by
# SIMP.  To prevent an administrator from inadvertently
# corrupting PAM configuration by using /usr/sbin/authconfig,
# /usr/sbin/authconfig-tui or tools that call them, SIMP has
# replaced the original authconfig and authconfig-tui links
# with links to this no-op script.

/bin/true

Therefore this control needs to look at the configuration directly.

[Bialogs]

I'm not sure if looking in /etc/sysconfig/authconfig for USESMARTCARD=no|yes is a good alternative. What other places does one check to confirm smartcard authentication is on?

[trevor-vaughan]

@Bialogs You'll have to delve the PAM stack directly (which is the correct answer anyway since people can fake out the check as it stands)