diff options
| author | Jayanth Othayoth <ojayanth@in.ibm.com> | 2023-07-27 12:39:57 +0300 |
|---|---|---|
| committer | Jayanth Othayoth <ojayanth@gmail.com> | 2023-08-07 08:02:58 +0300 |
| commit | 1fec58643a3e230befe161007c78008ce868d193 (patch) | |
| tree | 1be6632f26490d70958675e98fe284f2157bd872 | |
| parent | 256db82bf25e972c086a2122782b3c61c78bcc06 (diff) | |
| download | openbmc-1fec58643a3e230befe161007c78008ce868d193.tar.xz | |
pwquality: password policy updates
pwquality.conf provides a way to configure the password quality
requirements. This file is used by libpwquality library and utilities
for checking and generating passwords.
This commit enforces below additional password quality requirements
- The minimum number of required classes of characters for the new
password (digits, uppercase, lowercase, others).
minclass=2
- Whether to check for the words from the cracklib dictionary.
The check is enabled if the value is not 0.
dictcheck=1
- Whether to check if it contains the user name in some form.
The check is enabled if the value is not 0.
usercheck=1
- The maximum length of monotonic character sequences in the new password.
Examples of such sequence are '12345' or 'fedcb'. Note that most such
passwords will not pass the simplicity check unless the sequence is only
a minor part of the password. The check is disabled if the value is 0.
(default 0)
maxsequence=1
Tested: p10 build verified.
Change-Id: I4cad5685646640f938cad4847ee930fd953994b7
Signed-off-by: Jayanth Othayoth <ojayanth@in.ibm.com>
| -rw-r--r-- | meta-phosphor/recipes-extended/libpwquality/libpwquality/pwquality.conf | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/meta-phosphor/recipes-extended/libpwquality/libpwquality/pwquality.conf b/meta-phosphor/recipes-extended/libpwquality/libpwquality/pwquality.conf index 048c0fd7d5..5a54dc7345 100644 --- a/meta-phosphor/recipes-extended/libpwquality/libpwquality/pwquality.conf +++ b/meta-phosphor/recipes-extended/libpwquality/libpwquality/pwquality.conf @@ -5,3 +5,7 @@ lcredit=0 ocredit=0 dcredit=0 ucredit=0 +minclass=2 +usercheck=1 +dictcheck=1 +maxsequence=3 |