tree f165f33a9aa13ba9132833aee2f341c9fc51f114
parent ca67d6eb5adf8a486eb9999af0347a1cc4ed5786
author Richard Marian Thomaiyar <richard.marian.thomaiyar@linux.intel.com> 1531683092 +0530
committer Brad Bishop <bradleyb@fuzziesquirrel.com> 1539780832 -0400

Enforce password security through pam

Add suitable pam modules in place which will enforce
password security
1. pam_cracklib is added with minimum length of 8. Length
greater than 8 can be configured through D-Bus interface.
2. pam_pwhistory is added to remember old password. Disabled
by default. Can be enabled through D-Bus interface
3. pam-tally2 used to lock out account after failed attempts.
Disabled by deault. Can be enabled through D-Bus interface

Note: pam_cracklib will do password verification one extra time,
hence with this fix, any password change will request,
Retype new password for 2 times.

(From meta-phosphor rev: bb70abc065a7eeb3206460ad20041bc132dab784)

Change-Id: Ibc5e275196509fb0b47c7174805195475d66590c
Signed-off-by: Richard Marian Thomaiyar <richard.marian.thomaiyar@linux.intel.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>