Changeset 524c5e3 for chapter08/shadow.xml

Timestamp:

12/09/2022 07:53:16 AM (17 months ago)

Author:

Xi Ruoyao <xry111@…>

Branches:

xry111/clfs-ng

Children:

f16e611

Parents:

2ef64c4 (diff), 4640b37d (diff)
Note: this is a merge changeset, the changes displayed below correspond to the merge itself.
Use the (diff) links above to see all the changes relative to each parent.

Message:

Merge remote-tracking branch 'origin/trunk' into xry111/clfs-ng

File:

• chapter08/shadow.xml (modified) (3 diffs)

chapter08/shadow.xml

@@ -63 +63 @@
     <emphasis>crypt</emphasis> method, use the more secure
     <emphasis>SHA-512</emphasis> method of password encryption, which also
-    allows passwords longer than 8 characters. It is also necessary to change
+    allows passwords longer than 8 characters. In addition, set the number of
+    rounds to 500,000 instead of the default 5000, which is much too low to
+    prevent brute force password attacks. It is also necessary to change
     the obsolete <filename class="directory">/var/spool/mail</filename> location
     for user mailboxes that Shadow uses by default to the <filename
@@ -81 +83 @@
 
 <screen><userinput remap="pre">sed -e 's:#ENCRYPT_METHOD DES:ENCRYPT_METHOD SHA512:' \
+    -e 's@#\(SHA_CRYPT_..._ROUNDS 5000\)@\100@'       \
     -e 's:/var/spool/mail:/var/mail:'                 \
     -e '/PATH=/{s@/sbin:@@;s@/bin:@@}'                \
@@ -640 +643 @@
         <term><filename class='libraryfile'>libsubid</filename></term>
         <listitem>
-          <para>library for processing subordinate id ranges for users</para>
+          <para>library to handle subordinate id ranges for users and groups</para>
           <indexterm zone="ch-system-shadow libsubid">
             <primary sortas="c-libsubid">libsubid</primary>