[Lunar-commits] r15193 - in moonbase/trunk/security: Linux-PAM/pam.d shadow/pam.d

[Auke Kok]

Author: sofar
Date: 2005-05-31 21:05:51 +0000 (Tue, 31 May 2005)
New Revision: 15193

Modified:
   moonbase/trunk/security/Linux-PAM/pam.d/system-auth
   moonbase/trunk/security/shadow/pam.d/passwd
Log:
I believe that this fixes the Linux-PAM problem: I can set passwords and cracklib is only enforced for users, not root.


Modified: moonbase/trunk/security/Linux-PAM/pam.d/system-auth
===================================================================
--- moonbase/trunk/security/Linux-PAM/pam.d/system-auth	2005-05-31 20:58:33 UTC (rev 15192)
+++ moonbase/trunk/security/Linux-PAM/pam.d/system-auth	2005-05-31 21:05:51 UTC (rev 15193)
@@ -7,7 +7,7 @@
 account     sufficient	  pam_succeed_if.so uid < 100 quiet
 account     required      pam_permit.so
 
-password    sufficient    pam_cracklib.so retry=3
+password    requisite     pam_cracklib.so retry=3
 password    sufficient    pam_unix.so nullok use_authtok md5 shadow
 password    required      pam_deny.so
 

Modified: moonbase/trunk/security/shadow/pam.d/passwd
===================================================================
--- moonbase/trunk/security/shadow/pam.d/passwd	2005-05-31 20:58:33 UTC (rev 15192)
+++ moonbase/trunk/security/shadow/pam.d/passwd	2005-05-31 21:05:51 UTC (rev 15193)
@@ -1,6 +1,7 @@
 #
 # The PAM configuration file for the `passwd' service
 #
+auth        sufficient  pam_rootok.so
 auth		required	pam_stack.so service=system-auth
 account		required	pam_stack.so service=system-auth
 password	required	pam_stack.so service=system-auth