summaryrefslogtreecommitdiff
path: root/debian/pam-configs/unix
Commit message (Collapse)AuthorAge
* pam-configs/unix: Default to yescript rather than sha512. From aSam Hartman2021-09-15
| | | | | | | | | theoretical security standpoint, it looks like yescript has similar security properties, assuming (as we typically do in the crypto protocol community) that sha256 is still reasonable. However, in terms of practical resistant to password cracking, particularly in terms of valuing space complexity as well as time complexity, yescript is superior, Closes: #978553
* debian/pam-configs/unix: use nullok, not nullok_secure.Steve Langasek2020-08-12
|
* debian/local/common-password, debian/pam-configs/unix: switch from "md5"Kees Cook2019-01-08
| | | | to "sha512" as password crypt default.
* Allow passwords to change on expired accounts, by passing new_authtok_reqd ↵Kees Cook2019-01-03
| | | | return codes immediately (LP: #291091).
* drop '-Final' from all of the field names, but support these field names forSteve Langasek2019-01-03
| | | | backwards compatibility
* refine the password profiles: these should be in a 'primary' block after all,Steve Langasek2019-01-03
| | | | paralleling the auth structure as much as possible.
* remove spurious 'conflict' with a non-existent module, which was added just forSteve Langasek2019-01-03
| | | | example
* condense the unix config, leaving out redundant features that were just forSteve Langasek2019-01-03
| | | | show
* use the proper name, Account instead of Acct, in the unix configSteve Langasek2019-01-03
|
* eliminate redundancy in the configs, which happens to also provide for betterSteve Langasek2019-01-03
| | | | | code reuse
* tweak profile priorities to reflect my best guess at how this should play outSteve Langasek2019-01-03
|
* drop out the 'nullok' argument in the password phase, since this happensSteve Langasek2019-01-03
| | | | to be meaningless
* add in acct/session/password templatesSteve Langasek2019-01-03
|
* first sample config for the pam frameworkSteve Langasek2019-01-03