diff options
author | Balint Reczey <balint@balintreczey.hu> | 2021-11-07 21:59:50 +0100 |
---|---|---|
committer | Balint Reczey <balint@balintreczey.hu> | 2022-01-22 21:53:25 +0100 |
commit | 600860fd1b21acde3633262cb166a9013ff02139 (patch) | |
tree | 8f10c88a4faa2e17d4ffa38bc73dfebb13a3d7ff /debian/login.defs | |
parent | 0246ee1e32ebbf1a5256a45ea16362e6a4adb159 (diff) | |
download | shadow-600860fd1b21acde3633262cb166a9013ff02139.tar.gz |
debian/NEWS: Mention new login behaviour regarding empty password field
Also set PREVENT_NO_AUTH in shipped login.defs accordingly.
Diffstat (limited to 'debian/login.defs')
-rw-r--r-- | debian/login.defs | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/debian/login.defs b/debian/login.defs index 28ba638d..6c02b6fc 100644 --- a/debian/login.defs +++ b/debian/login.defs @@ -321,6 +321,14 @@ NONEXISTENT /nonexistent # #GRANT_AUX_GROUP_SUBIDS yes +# +# Prevents an empty password field to be interpreted as "no authentication +# required". +# Set to "yes" to prevent for all accounts +# Set to "superuser" to prevent for UID 0 / root (default) +# Set to "no" to not prevent for any account (dangerous, historical default) +PREVENT_NO_AUTH superuser + ################# OBSOLETED BY PAM ############## # # # These options are now handled by PAM. Please # |