Re: [Devil-linux-develop] build/config/etc/pam.d login, 1.3, 1.4 passwd, 1.4, 1.5

[Heiko Z. <he...@zu...>]

Serge,

Don't we also need to change /etc/login.defs ?
ENCRYPT_METHOD SHA512

Or is that not required with PAM ?

-- 

Regards
   Heiko Zuerker
   http://www.devil-linux.org

> -----Original Message-----
> From: Serge Leschinsky [mailto:sma...@us...]
> Sent: Friday, April 06, 2012 2:31 AM
> To: dev...@li...
> Subject: [Devil-linux-commit] build/config/etc/pam.d login, 1.3, 1.4
passwd,
> 1.4, 1.5
> 
> Update of /cvsroot/devil-linux/build/config/etc/pam.d
> In directory vz-cvs-3.sog:/tmp/cvs-serv23906
> 
> Modified Files:
> 	login passwd
> Log Message:
> improve protection of local passwords - switch from md5 to sha512
> 
> 
> Index: passwd
> ==========================================================
> =========
> RCS file: /cvsroot/devil-linux/build/config/etc/pam.d/passwd,v
> retrieving revision 1.4
> retrieving revision 1.5
> diff -u -d -r1.4 -r1.5
> --- passwd	6 Sep 2008 20:52:25 -0000	1.4
> +++ passwd	6 Apr 2012 07:30:27 -0000	1.5
> @@ -5,6 +5,6 @@
>                                              dcredit=1 ucredit=1 lcredit=1
\
>                                              ocredit=1 \
>
dictpath=/lib/cracklib/pw_dict
> -password    required       pam_unix.so      md5 shadow use_authtok
> +password    required       pam_unix.so      sha512 shadow use_authtok
> 
>  # End /etc/pam.d/passwd
> 
> Index: login
> ==========================================================
> =========
> RCS file: /cvsroot/devil-linux/build/config/etc/pam.d/login,v
> retrieving revision 1.3
> retrieving revision 1.4
> diff -u -d -r1.3 -r1.4
> --- login	27 Mar 2008 14:27:03 -0000	1.3
> +++ login	6 Apr 2012 07:30:27 -0000	1.4
> @@ -12,6 +12,6 @@
>  session     optional       pam_lastlog.so
>  session     required       pam_unix.so
>  password    required       pam_cracklib.so  retry=3
> -password    required       pam_unix.so      md5 shadow use_authtok
> +password    required       pam_unix.so      sha512 shadow use_authtok
> 
>  # End /etc/pam.d/login
> 
> 
>
----------------------------------------------------------------------------
--
> For Developers, A Lot Can Happen In A Second.
> Boundary is the first to Know...and Tell You.
> Monitor Your Applications in Ultra-Fine Resolution. Try it FREE!
> http://p.sf.net/sfu/Boundary-d2dvs2
> _______________________________________________
> Devil-linux-commit mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-commit