Serge,
Don't we also need to change /etc/login.defs ?
ENCRYPT_METHOD SHA512
Or is that not required with PAM ?
--
Regards
Heiko Zuerker
http://www.devil-linux.org
> -----Original Message-----
> From: Serge Leschinsky [mailto:sma...@us...]
> Sent: Friday, April 06, 2012 2:31 AM
> To: dev...@li...
> Subject: [Devil-linux-commit] build/config/etc/pam.d login, 1.3, 1.4
passwd,
> 1.4, 1.5
>
> Update of /cvsroot/devil-linux/build/config/etc/pam.d
> In directory vz-cvs-3.sog:/tmp/cvs-serv23906
>
> Modified Files:
> login passwd
> Log Message:
> improve protection of local passwords - switch from md5 to sha512
>
>
> Index: passwd
> ==========================================================
> =========
> RCS file: /cvsroot/devil-linux/build/config/etc/pam.d/passwd,v
> retrieving revision 1.4
> retrieving revision 1.5
> diff -u -d -r1.4 -r1.5
> --- passwd 6 Sep 2008 20:52:25 -0000 1.4
> +++ passwd 6 Apr 2012 07:30:27 -0000 1.5
> @@ -5,6 +5,6 @@
> dcredit=1 ucredit=1 lcredit=1
\
> ocredit=1 \
>
dictpath=/lib/cracklib/pw_dict
> -password required pam_unix.so md5 shadow use_authtok
> +password required pam_unix.so sha512 shadow use_authtok
>
> # End /etc/pam.d/passwd
>
> Index: login
> ==========================================================
> =========
> RCS file: /cvsroot/devil-linux/build/config/etc/pam.d/login,v
> retrieving revision 1.3
> retrieving revision 1.4
> diff -u -d -r1.3 -r1.4
> --- login 27 Mar 2008 14:27:03 -0000 1.3
> +++ login 6 Apr 2012 07:30:27 -0000 1.4
> @@ -12,6 +12,6 @@
> session optional pam_lastlog.so
> session required pam_unix.so
> password required pam_cracklib.so retry=3
> -password required pam_unix.so md5 shadow use_authtok
> +password required pam_unix.so sha512 shadow use_authtok
>
> # End /etc/pam.d/login
>
>
>
----------------------------------------------------------------------------
--
> For Developers, A Lot Can Happen In A Second.
> Boundary is the first to Know...and Tell You.
> Monitor Your Applications in Ultra-Fine Resolution. Try it FREE!
> http://p.sf.net/sfu/Boundary-d2dvs2
> _______________________________________________
> Devil-linux-commit mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-commit
|
