From d27275ad461890e9cbbacfb3f951fb481c098664 Mon Sep 17 00:00:00 2001
From: Alex Willmer <alex@moreati.org.uk>
Date: Thu, 18 Sep 2025 14:42:30 +0100
Subject: [PATCH] ci: Set global max failed logins on macOS

---
 tests/image_prep/roles/user_policies/tasks/main.yml | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/tests/image_prep/roles/user_policies/tasks/main.yml b/tests/image_prep/roles/user_policies/tasks/main.yml
index 89fff6bc..427f8a3b 100644
--- a/tests/image_prep/roles/user_policies/tasks/main.yml
+++ b/tests/image_prep/roles/user_policies/tasks/main.yml
@@ -1,4 +1,13 @@
-- name: Set login attempts (macOS)
+- name: Set global login attempts (macOS)
+  command:
+    pwpolicy
+    -n /Local/Default
+    -setglobalpolicy 'maxFailedLoginAttempts={{ user_policies_max_failed_logins }}'
+  when:
+    - ansible_system == 'Darwin'
+  changed_when: true
+
+- name: Set user login attempts (macOS)
   vars:
     max_failed_logins: "{{ item.policies.max_failed_logins | default(user_policies_max_failed_logins) }}"
   command: >