From 0e4d0dbd6405f08031559032e1dfc2adfbc716e8 Mon Sep 17 00:00:00 2001 From: Tomas Mraz Date: Thu, 24 Nov 2011 15:05:57 +0100 Subject: [PATCH] use pam_pwquality instead of pam_cracklib --- pam.spec | 6 +++++- password-auth.pamd | 2 +- smartcard-auth.pamd | 1 - system-auth.pamd | 2 +- 4 files changed, 7 insertions(+), 4 deletions(-) diff --git a/pam.spec b/pam.spec index 3fac661..e388312 100644 --- a/pam.spec +++ b/pam.spec @@ -3,7 +3,7 @@ Summary: An extensible library which provides authentication for applications Name: pam Version: 1.1.5 -Release: 1%{?dist} +Release: 2%{?dist} # The library is BSD licensed with option to relicense as GPLv2+ # - this option is redundant as the BSD license allows that anyway. # pam_timestamp, pam_loginuid, and pam_console modules are GPLv2+. @@ -52,6 +52,7 @@ Patch12: pam-1.1.3-faillock-screensaver.patch BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) Requires: cracklib-dicts >= 2.8 +Requires: libpwquality >= 0.9.9 Requires(post): coreutils, /sbin/ldconfig BuildRequires: autoconf >= 2.60 BuildRequires: automake, libtool @@ -361,6 +362,9 @@ fi %doc doc/adg/*.txt doc/adg/html %changelog +* Thu Nov 24 2011 Tomas Mraz 1.1.5-2 +- use pam_pwquality instead of pam_cracklib + * Thu Nov 24 2011 Tomas Mraz 1.1.5-1 - upgrade to new upstream release diff --git a/password-auth.pamd b/password-auth.pamd index aee23d0..d598c67 100644 --- a/password-auth.pamd +++ b/password-auth.pamd @@ -7,7 +7,7 @@ auth required pam_deny.so account required pam_unix.so -password requisite pam_cracklib.so try_first_pass retry=3 type= +password requisite pam_pwquality.so try_first_pass retry=3 type= password sufficient pam_unix.so try_first_pass use_authtok nullok sha512 shadow password required pam_deny.so diff --git a/smartcard-auth.pamd b/smartcard-auth.pamd index e8e51f3..07f03f3 100644 --- a/smartcard-auth.pamd +++ b/smartcard-auth.pamd @@ -11,7 +11,6 @@ account sufficient pam_succeed_if.so uid < 500 quiet account required pam_permit.so password optional pam_pkcs11.so -password requisite pam_cracklib.so try_first_pass retry=3 type= session optional pam_keyinit.so revoke session required pam_limits.so diff --git a/system-auth.pamd b/system-auth.pamd index aee23d0..d598c67 100644 --- a/system-auth.pamd +++ b/system-auth.pamd @@ -7,7 +7,7 @@ auth required pam_deny.so account required pam_unix.so -password requisite pam_cracklib.so try_first_pass retry=3 type= +password requisite pam_pwquality.so try_first_pass retry=3 type= password sufficient pam_unix.so try_first_pass use_authtok nullok sha512 shadow password required pam_deny.so