Add checks for words from passwd GECOS field and for maximum consecutive characters of same class.

2 files changed, 30 insertions, 0 deletions

diff --git a/doc/man/pam_pwquality.8 b/doc/man/pam_pwquality.8
index aead0c3..3c57716 100644
--- a/doc/man/pam_pwquality.8
+++ b/doc/man/pam_pwquality.8
@@ -217,6 +217,22 @@ Reject passwords which contain more than N same consecutive characters\&.
 The default is 0 which means that this check is disabled\&.
 .RE
 .PP
+\fBmaxclassrepeat=\fR\fB\fIN\fR\fR
+.RS 4
+Reject passwords which contain more than N consecutive characters of the
+same class\&.
+The default is 0 which means that this check is disabled\&.
+.RE
+.PP
+\fBgecoscheck=\fR\fB\fIN\fR\fR
+.RS 4
+If nonzero, check whether the individual words longer than 3 characters
+from the
+\fBpasswd GECOS\fR
+field of the user are contained in the new password\&.
+The default is 0 which means that this check is disabled\&.
+.RE
+.PP
 \fBuse_authtok\fR
 .RS 4
 This argument is used to
diff --git a/doc/man/pwquality.conf.5 b/doc/man/pwquality.conf.5
index 0418ff3..8306c2e 100644
--- a/doc/man/pwquality.conf.5
+++ b/doc/man/pwquality.conf.5
@@ -78,6 +78,20 @@ The maximum number of allowed same consecutive characters in the new password.
 The check is disabled if the value is 0. (default 0)
 .RE
 .PP
+\fBmaxclassrepeat\fR
+.RS 4
+The maximum number of allowed consecutive characters of the same class in the
+new password.
+The check is disabled if the value is 0. (default 0)
+.RE
+.PP
+\fBgecoscheck\fR
+.RS 4
+If nonzero, check whether the words longer than 3 characters from the GECOS
+field of the user's passwd entry are contained in the new password.
+The check is disabled if the value is 0. (default 0)
+.RE
+.PP
 \fBdictpath\fR
 .RS 4
 Path to the cracklib dictionaries. Default is to use the cracklib default.