From: Alejandro Colomar <alx@kernel.org>
Date: Tue, 16 Dec 2025 12:33:17 +0000 (+0100)
Subject: etc/login.defs: Group password strength controls
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=1aac1f1580c71d0417ab9d6d8d7e49459c0250cb;p=thirdparty%2Fshadow.git

etc/login.defs: Group password strength controls

Reported-by: Tobias Stoeckmann <tobias@stoeckmann.org>
Signed-off-by: Alejandro Colomar <alx@kernel.org>
---

diff --git a/etc/login.defs b/etc/login.defs
index f7c1618d0..83f58d1fa 100644
--- a/etc/login.defs
+++ b/etc/login.defs
@@ -206,13 +206,6 @@ UMASK		022
 # If HOME_MODE is not set, the value of UMASK is used to create the mode.
 #HOME_MODE	0700
 
-#
-# Password aging controls:
-#
-#	PASS_MIN_LEN	Minimum acceptable password length.
-#
-PASS_MIN_LEN	5
-
 #
 # If "yes", the user must be listed as a member of the first gid 0 group
 # in /etc/group (called "root" on most Linux systems) to be able to "su"
@@ -333,15 +326,15 @@ LOGIN_TIMEOUT		60
 PASS_CHANGE_TRIES	5
 
 #
-# Warn about weak passwords (but still allow them) if you are root.
+# Password strength controls:
 #
+# Warn about weak passwords (but still allow them) if you are root.
 PASS_ALWAYS_WARN	yes
-
-#
+# Minimum acceptable password length.
+PASS_MIN_LEN	5
 # Number of significant characters in the password for crypt().
 # Default is 8, don't change unless your crypt() is better.
 # Only used for DES encryption algorithm.
-#
 #PASS_MAX_LEN		8
 
 #