Re: Do you think this is a security risk and if not is it a bad UI decision?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 2013-05-06 at 11:43 -0400, Rahul Sundaram wrote:
> On 05/06/2013 10:48 AM, Miloslav Trmač wrote:
> 
> > 
> > On Sat, May 4, 2013 at 6:31 AM, Rahul Sundaram wrote:
> >         On 05/04/2013 12:24 AM, Eric Sandeen wrote:
> >                 On the other hand, if it's the right thing to do,
> >                 then it needs to be done for GUI password change
> >                 dialogs and the passwd command should be updated as
> >                 well, for consistency, no?
> >         
> >         
> >         On a related note, Anaconda,  GNOME, KDE etc seems to be
> >         relying on different rules about what an acceptable password
> >         is.  We really need to settle on one library and provide a
> >         consistent way to tweak it.
> > "Everything" (certainly Anaconda and GNOME, not sure about KDE) is
> > supposed to use libpwquality.  Is that not so?
> > 
> 
> They are definitely not enforcing the same rules. 

One obvious area of inconsistency is that some of the tools _warn_ on
weak passwords, and some _block_ on weak passwords. We should
standardize on one or the other of those.
-- 
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Twitter: AdamW_Fedora | identi.ca: adamwfedora
http://www.happyassassin.net

-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel





[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux