Shadow Package Instructions

Joel Miller cheeziologist at mail.isc.rit.edu
Sun Sep 14 20:51:11 PDT 2003


On Sun, 14 Sep 2003 22:37:06 -0500, Bruce Dubbs <bdubbs at swbell.net> wrote:

> Right now the shadow package says:
>
> Before you install this package, you may want to have a look at the 
> Shadow hint. It discusses how you can make your system more secure 
> regarding passwords, such as how to enable the more secure MD5 passwords 
> and how to get the most out of this Shadow package. The Shadow hint can 
> be found at 
> http://www.linuxfromscratch.org/hints/downloads/files/shadowpasswd_plus.txt.
>
> ----------------------
>
> I don't think this is really necessary any more.  No one in their right 
> mind would install a Linux system without shadow passwords.  (Note: the 
> link is broken.) Also, no one would NOT want to use MD5 based passwords.
>
> We only need to change the sed statement:
>
> sed 's%/var/spool/mail%/var/mail%' \
> etc/login.defs.linux > /etc/login.defs
>
>
> to:
>
> sed -e 's%/var/spool/mail%/var/mail%' \
> -e 's%#MD5_CRYPT_ENAB  no%MD5_CRYPT_ENAB  yes%' \
> etc/login.defs.linux > /etc/login.defs
>
> to enable MD5 passwords.
>
> -- Bruce*
> *

I agree with this.

-- 
Registered LFS User 6929
Registered Linux User 298182




More information about the lfs-dev mailing list