Changeset 524c5e3 for chapter08/shadow.xml
- Timestamp:
- 12/09/2022 07:53:16 AM (17 months ago)
- Branches:
- xry111/clfs-ng
- Children:
- f16e611
- Parents:
- 2ef64c4 (diff), 4640b37d (diff)
Note: this is a merge changeset, the changes displayed below correspond to the merge itself.
Use the(diff)
links above to see all the changes relative to each parent. - File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
chapter08/shadow.xml
r2ef64c4 r524c5e3 63 63 <emphasis>crypt</emphasis> method, use the more secure 64 64 <emphasis>SHA-512</emphasis> method of password encryption, which also 65 allows passwords longer than 8 characters. It is also necessary to change 65 allows passwords longer than 8 characters. In addition, set the number of 66 rounds to 500,000 instead of the default 5000, which is much too low to 67 prevent brute force password attacks. It is also necessary to change 66 68 the obsolete <filename class="directory">/var/spool/mail</filename> location 67 69 for user mailboxes that Shadow uses by default to the <filename … … 81 83 82 84 <screen><userinput remap="pre">sed -e 's:#ENCRYPT_METHOD DES:ENCRYPT_METHOD SHA512:' \ 85 -e 's@#\(SHA_CRYPT_..._ROUNDS 5000\)@\100@' \ 83 86 -e 's:/var/spool/mail:/var/mail:' \ 84 87 -e '/PATH=/{s@/sbin:@@;s@/bin:@@}' \ … … 640 643 <term><filename class='libraryfile'>libsubid</filename></term> 641 644 <listitem> 642 <para>library for processing subordinate id ranges for users</para>645 <para>library to handle subordinate id ranges for users and groups</para> 643 646 <indexterm zone="ch-system-shadow libsubid"> 644 647 <primary sortas="c-libsubid">libsubid</primary>
Note:
See TracChangeset
for help on using the changeset viewer.