On Tue, Mar 24, 2015 at 09:36:21AM -0400, Paul W. Frields wrote: > On Mon, Mar 23, 2015 at 03:38:14PM -0400, Stephen Gallagher wrote: > > On Mon, 2015-03-23 at 15:17 -0400, Paul W. Frields wrote: > > > On Mon, Mar 23, 2015 at 05:54:34AM -0400, Jaroslav Reznik wrote: > > > > Hi, > > > > as this was hot topic on the lists and it's FESCo blocker, so in > > > > case you missed it (as it's very new), it's now possible to create > > > > product specific password policies in Anaconda! > > > > > > > > For details, check out > > > > https://bugzilla.redhat.com/show_bug.cgi?id=1191842#c14 > > > > > > > > Thanks bcl! > > > > > > Indeed. This looks like something we need to include in our > > > -productimg package. (Is that still being used for F22?) > > > > > > > Yes, the fedora-productimg-* packages are still in use, though they > > are slightly different now. They include the per-product theming used > > for Anaconda as well as things like default filesystem, default > > package environment group set, etc. > > > > This *is* probably where the pwpolicy stuff belongs. > > OK, so it looks like action items are: > > (1) Provide a new /etc/security/pwquality.conf in the productimg > > (2) Update our workstation KS file with %anaconda section as per > instructions here: > https://github.com/rhinstaller/anaconda/commit/e7e86a23d56bde2b2493d17c99b0781508435993 > > Did I miss anything? Do we just need something like this to be in line with defaults? -- Paul W. Frields http://paul.frields.org/ gpg fingerprint: 3DA6 A0AC 6D58 FEC4 0233 5906 ACDB C937 BD11 3717 http://redhat.com/ - - - - http://pfrields.fedorapeople.org/ The open source story continues to grow: http://opensource.com
diff --git a/fedora-live-workstation.ks b/fedora-live-workstation.ks index 9038413..dcc77b1 100644 --- a/fedora-live-workstation.ks +++ b/fedora-live-workstation.ks @@ -7,6 +7,10 @@ part / --size 6144 +# Get equivalent pwquality settings to default +%anaconda +pwpolicy root --nostrict --minlen=9 --minquality=1 --nochanges --emptyok + %post # This is a huge file and things work ok without it
-- desktop mailing list desktop@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/desktop
