tree 354083c46b19b3071778fa03935b653b0b9446a7
parent d32b6818513b069ad59fa60a5301d5a52ebf4d2f
author Richard Marian Thomaiyar <richard.marian.thomaiyar@linux.intel.com> 1531683092 +0530
committer Brad Bishop <bradleyb@fuzziesquirrel.com> 1539780597 +0000

Enforce password security through pam

Add suitable pam modules in place which will enforce
password security
1. pam_cracklib is added with minimum length of 8. Length
greater than 8 can be configured through D-Bus interface.
2. pam_pwhistory is added to remember old password. Disabled
by default. Can be enabled through D-Bus interface
3. pam-tally2 used to lock out account after failed attempts.
Disabled by deault. Can be enabled through D-Bus interface

Note: pam_cracklib will do password verification one extra time,
hence with this fix, any password change will request,
Retype new password for 2 times.

Change-Id: I3deb2f9b729fff1f44f0e7df517a6cf04b1d2bfd
Signed-off-by: Richard Marian Thomaiyar <richard.marian.thomaiyar@linux.intel.com>