search

64studio / dibby

Generate Custom Debian images for your embedded projects
BSD 3-Clause "New" or "Revised" License
8 stars 2 forks source link

Enable root password strength checking with cracklib #16

Closed danielhjames closed 5 years ago

danielhjames commented 5 years ago

Update readme and control files for additional dependency

obbardc commented 5 years ago

Can this only throw a warning if the password is not strong enough?

danielhjames commented 5 years ago

It warns of low password strength by displaying a score out of 100, where 100 is most secure. It only quits the script if there is no score, i.e. a truly terrible password. As dibby is likely to be used by newbie distro builders, I do think we need to protect the end users from being hacked too easily.

obbardc commented 5 years ago

I am in the view of using truly terrible root passwords on embedded systems is OK, it is up to the user of the script to take our warning advice rather than flat out refuse.

obbardc commented 5 years ago

Awesome, happy to merge that

danielhjames commented 5 years ago

No problem, I've removed the exit 1 from the script in the commit https://github.com/64studio/dibby/pull/16/commits/7c07f0ccb5c0bebb4afd0d0f9341334c3572560d