ci: Set global max failed logins on macOS

4 months ago · d27275ad46
parent 1b00ca2581
commit d27275ad46
1 changed files with 10 additions and 1 deletions
--- a/tests/image_prep/roles/user_policies/tasks/main.yml
+++ b/tests/image_prep/roles/user_policies/tasks/main.yml
@ -1,4 +1,13 @@
- name: Set login attempts (macOS)
+- name: Set global login attempts (macOS)
+  command:
+    pwpolicy
+    -n /Local/Default
+    -setglobalpolicy 'maxFailedLoginAttempts={{ user_policies_max_failed_logins }}'
+  when:
+    - ansible_system == 'Darwin'
+  changed_when: true
+
+- name: Set user login attempts (macOS)
  vars:
    max_failed_logins: "{{ item.policies.max_failed_logins | default(user_policies_max_failed_logins) }}"
  command: >