configure ubuntu for stig id SRG-OS-000118-GPOS-00060

system/stig/ubuntu/configure-stig.sls

@@ -9,6 +9,16 @@ auditd:
     - source: salt://system/stig/ubuntu/files/common-auth
     - source_hash: salt://system/stig/ubuntu/files/hash
 
+/etc/ssh/sshd_config:
+  file.managed:
+    - source: salt://system/stig/ubuntu/files/sshd_config
+    - source_hash: salt://system/stig/ubuntu/files/hash
+
+/etc/default/useradd:
+  file.managed:
+    - source: salt://system/stig/ubuntu/files/useradd
+    - source_hash: salt://system/stig/ubuntu/files/hash
+
 /etc/profile.d/autologout.sh:
   file.managed:
     - source: salt://system/stig/ubuntu/files/autologout.sh

system/stig/ubuntu/files/useradd

+# Default values for useradd(8)
+#
+# The SHELL variable specifies the default login shell on your
+# system.
+# Similar to DHSELL in adduser. However, we use "sh" here because
+# useradd is a low level utility and should be as general
+# as possible
+SHELL=/bin/sh
+#
+# The default group for users
+# 100=users on Debian systems
+# Same as USERS_GID in adduser
+# This argument is used when the -n flag is specified.
+# The default behavior (when -n and -g are not specified) is to create a
+# primary user group with the same name as the user being added to the
+# system.
+# GROUP=100
+#
+# The default home directory. Same as DHOME for adduser
+# HOME=/home
+#
+# The number of days after a password expires until the account
+# is permanently disabled
+INACTIVE=35
+#
+# The default expire date
+# EXPIRE=
+#
+# The SKEL variable specifies the directory containing "skeletal" user
+# files; in other words, files such as a sample .profile that will be
+# copied to the new user's home directory when it is created.
+# SKEL=/etc/skel
+#
+# Defines whether the mail spool should be created while
+# creating the account
+# CREATE_MAIL_SPOOL=yes