Changeset 22861b3 for postlfs

Timestamp:

08/10/2005 12:33:22 AM (19 years ago)

Author:

Randy McMurchy <randy@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 6.2, 6.2.0, 6.2.0-rc1, 6.2.0-rc2, 6.3, 6.3-rc1, 6.3-rc2, 6.3-rc3, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

6b104248

Parents:

c0ed152

Message:

Modified the CrackLib instructions to use some contributed text from Alex and provided additional word lists and instructions

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@4904 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:

• postlfs/security/cracklib.xml (modified) (4 diffs)

postlfs/security/cracklib.xml

@@ -62 +62 @@
     <itemizedlist spacing='compact'>
       <listitem>
-        <para>Recommended word list (size: &crackdict-size;;
-        md5sum: &crackdict-md5sum;): <ulink url="&crackdict-download;"/></para>
+        <para>Recommended word list for English-speaking locales (size:
+        &crackdict-size;; md5sum: &crackdict-md5sum;):
+        <ulink url="&crackdict-download;"/></para>
+      </listitem>
+      <listitem>
+        <para>Additional word lists:
+        <ulink url="http://www.cotse.com/tools/wordlists.htm"/></para>
       </listitem>
       <listitem>
@@ -72 +77 @@
     </itemizedlist>
 
-    <!-- <para>You will also need to download a wordlist for use with
-    <application>cracklib</application>. There are two wordlists
-    to choose from at the following location.  Use the
-    <filename>cracklib</filename> word list for good security, or
-    opt for the <filename>allwords</filename> word list for
-    lightweight machines short on RAM. You can of course choose
-    any other word list that you have at your disposal.</para> -->
+    <important>
+      <para>Users tend to base their passwords on regular words of the spoken
+      language, and crackers know that. <application>CrackLib</application> is
+      intended to filter out such bad passwords at the source using a
+      dictionary created from word lists. To accomplish this, the word list(s)
+      for use with <application>CrackLib</application> must be an exhaustive
+      list of words and word-based keystroke combinations likely to be chosen
+      by users of the system as (guessable) passwords.</para>
+
+      <para>The default word list recommended above for downloading mostly
+      satisfies this role in English-speaking countries. In other situations,
+      it may be necessary to download (or even create) additional word
+      lists.</para>
+
+      <para>Note that word lists suitable for spell-checking are not usable
+      as <application>CrackLib</application> word lists in countries with
+      non-Latin based alphabets, because of <quote>word-based keystroke
+      combinations</quote> that make bad passwords.</para>
+    </important>
 
   </sect2>
@@ -102 +119 @@
 <screen role="root"><userinput>make install &amp;&amp;
 mv -v /usr/lib/libcrack.so.2* /lib &amp;&amp;
-ln -v -sf ../../lib/libcrack.so.2.8.0 /usr/lib/libcrack.so &amp;&amp;
-install -v -m644 -D ../cracklib-words.gz \
+ln -v -sf ../../lib/libcrack.so.2.8.0 /usr/lib/libcrack.so</userinput></screen>
+
+    <para>The following commands can be used to install the recommended word
+    list. Other word lists (text based, one word per line) can also be used by
+    simply installing them into
+    <filename class='directory'>/usr/share/dict</filename>.</para>
+
+<screen role="root"><userinput>install -v -m644 -D ../cracklib-words.gz \
     /usr/share/dict/cracklib-words.gz &amp;&amp;
 gunzip -v /usr/share/dict/cracklib-words.gz &amp;&amp;
@@ -153 +176 @@
 
     <para><command>create-cracklib-dict ...</command>: This command creates the
-    <application>CrackLib</application> dictionary from the word lists.</para>
+    <application>CrackLib</application> dictionary from the word lists. Modify
+    the command to add any additional word lists you have installed.</para>
 
   </sect2>