diff options
author | 2020-08-15 11:44:57 +0300 | |
---|---|---|
committer | 2020-08-15 11:50:19 +0300 | |
commit | 1e2706575348150992737c5415df36f6517b20fe (patch) | |
tree | d9b434d4419ea6a98bbcbfd12991a6b6ec64043b | |
parent | pambase.py: rename system-service -> system-services (diff) | |
download | pambase-1e2706575348150992737c5415df36f6517b20fe.tar.gz pambase-1e2706575348150992737c5415df36f6517b20fe.tar.bz2 pambase-1e2706575348150992737c5415df36f6517b20fe.zip |
Add pam_pwquality.so supportpambase-20200815
Signed-off-by: Mikle Kolyada <zlogene@gentoo.org>
-rwxr-xr-x | pambase.py | 1 | ||||
-rw-r--r-- | templates/system-auth.tpl | 4 |
2 files changed, 5 insertions, 0 deletions
@@ -9,6 +9,7 @@ def main(): parser = argparse.ArgumentParser(description='basic Gentoo PAM configuration files') parser.add_argument('--libcap', action="store_true", help='enable pam_caps.so module') parser.add_argument('--passwdqc', action="store_true", help='enable pam_passwdqc.so module') + parser.add_argument('--pwquality', action="store_true", help='enable pam_pwquality.so module') parser.add_argument('--elogind', action="store_true", help='enable pam_elogind.so module') parser.add_argument('--systemd', action="store_true", help='enable pam_systemd.so module') parser.add_argument('--selinux', action="store_true", help='enable pam_selinux.so module') diff --git a/templates/system-auth.tpl b/templates/system-auth.tpl index 298e45c..69cc472 100644 --- a/templates/system-auth.tpl +++ b/templates/system-auth.tpl @@ -28,6 +28,10 @@ account required pam_faillock.so password required pam_passwdqc.so min=8,8,8,8,8 retry=3 {% endif %} +{% if pwquality %} +password required pam_pwquality.so retry=3 minlen=8 lcredit=2 ucredit=2 dcredit=2 ocredit=2 difok=3 enforce_for_root +{% endif %} + {% if krb5 %} password [success=1 default=ignore] pam_krb5.so {{ krb5_params }} {% endif %} |