Changeset 024fb949

Timestamp:

11/25/2022 07:31:43 AM (22 months ago)

Author:

Pierre Labastie <pierre.labastie@…>

Branches:

11.3, 12.0, 12.1, 12.2, gimp3, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, xry111/for-12.3, xry111/llvm18, xry111/spidermonkey128, xry111/xf86-video-removal

Children:

b3c16a78

Parents:

353fc67

Message:

Returns to a more reasonable value of rounds in shadow

Location:

postlfs/security

Files:

• libpwquality.xml (modified) (1 diff)
• linux-pam.xml (modified) (1 diff)
• shadow.xml (modified) (2 diffs)

postlfs/security/libpwquality.xml

@@ -161 +161 @@
 # to the value used in shadow.
 password  required    pam_unix.so        sha512 shadow use_authtok \
-                                         rounds=5000000
+                                         rounds=500000
 
 # End /etc/pam.d/system-password</literal>

postlfs/security/linux-pam.xml

@@ -350 +350 @@
 # Use the same number of rounds as shadow.
 password  required    pam_unix.so       sha512 shadow try_first_pass \
-                                        rounds=5000000
+                                        rounds=500000
 
 # End /etc/pam.d/system-password</literal>

postlfs/security/shadow.xml

@@ -139 +139 @@
 
 sed -e 's@#ENCRYPT_METHOD DES@ENCRYPT_METHOD SHA512@' \
-    -e 's@#\(SHA_CRYPT_..._ROUNDS 5000\)@\1000@'      \
+    -e 's@#\(SHA_CRYPT_..._ROUNDS 5000\)@\100@'      \
     -e 's@/var/spool/mail@/var/mail@'                 \
     -e '/PATH=/{s@/sbin:@@;s@/bin:@@}'                \
@@ -189 +189 @@
     <para>
       <command>sed -e 's@#ENCRYPT_METHOD DES@ENCRYPT_METHOD SHA512@' -e
-        's@#SHA_CRYPT_..._ROUNDS 5000@&amp;000@' -e
+        's@#\(SHA_CRYPT_..._ROUNDS 5000\)@\100@' -e
         's@/var/spool/mail@/var/mail@' -e '/PATH=/{s@/sbin:@@;s@/bin:@@}'
         -i etc/login.defs</command>: Instead of using the default 'DES'