From: Alejandro Colomar <alx@kernel.org>
Date: Mon, 15 Dec 2025 13:03:49 +0000 (+0100)
Subject: etc/login.defs: Remove defaults for password expiration
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=cd9773b6c74da5b1482033ed74fc20495496812b;p=thirdparty%2Fshadow.git

etc/login.defs: Remove defaults for password expiration

Expiring passwords has been determined to decrease safety.
Let's default to not expiring passwords.

Signed-off-by: Alejandro Colomar <alx@kernel.org>
---

diff --git a/etc/login.defs b/etc/login.defs
index 1b81afd82..f7c1618d0 100644
--- a/etc/login.defs
+++ b/etc/login.defs
@@ -209,13 +209,9 @@ UMASK		022
 #
 # Password aging controls:
 #
-#	PASS_MAX_DAYS	Maximum number of days a password may be used.
 #	PASS_MIN_LEN	Minimum acceptable password length.
-#	PASS_WARN_AGE	Number of days warning given before a password expires.
 #
-PASS_MAX_DAYS	99999
 PASS_MIN_LEN	5
-PASS_WARN_AGE	7
 
 #
 # If "yes", the user must be listed as a member of the first gid 0 group