logic incorrectly exceeds STIG author intent

[ejaronne]

Nothing in the STIG author's content do they imply that any accounts be allowed blank passwords. Therefore this logic and input should not be included in the profile:

redhat-enterprise-linux-8-stig-baseline/controls/SV-251706.rb

Line 31 in 35e958e

users_with_blank_passwords = shadow.where { password.nil? || password.empty? }.users - input('users_allowed_blank_passwords')

users_with_blank_passwords = shadow.where { password.nil? || password.empty? }.users - input('users_allowed_blank_passwords')