Difference between revisions of "Operating Systems/Linux/Ubuntu/Ubuntu 16.04 LTS/Program-Settings"
Jump to navigation
Jump to search
| Line 2: | Line 2: | ||
Two other useful files are <code>/etc/pam.d/common-password</code> and <code>/etc/login.defs</code> | Two other useful files are <code>/etc/pam.d/common-password</code> and <code>/etc/login.defs</code> | ||
| − | === | + | ===Minimum Password Length=== |
This file controls the minimum password length, whether previous passwords are remembered, and whether dictionary-based password checks are enabled. | This file controls the minimum password length, whether previous passwords are remembered, and whether dictionary-based password checks are enabled. | ||
# <code>sudo nano /etc/pam.d/common-password</code> | # <code>sudo nano /etc/pam.d/common-password</code> | ||
# The minimum password length can be set to 10 by adding "minlen=10" to the end of this line: <code>password [success=1 default=ignore] pam_unix.so obscure yescrypt minlen=10</code> | # The minimum password length can be set to 10 by adding "minlen=10" to the end of this line: <code>password [success=1 default=ignore] pam_unix.so obscure yescrypt minlen=10</code> | ||
| + | ===Dictionary Based Password Checks=== | ||
| + | # <code>sudo nano /etc/pam.d/common-password</code> | ||
# Dictionary-based password checks can be enabled by adding the line <code>password requisite pam_pwquality.so</code> to the end of the file | # Dictionary-based password checks can be enabled by adding the line <code>password requisite pam_pwquality.so</code> to the end of the file | ||
#* This is important because it prevents users from using common words in their password | #* This is important because it prevents users from using common words in their password | ||
| + | ===Remembering Previous Passwords=== | ||
| + | # <code>sudo nano /etc/pam.d/common-password</code> | ||
# Enabling previous passwords being remembered can be enabled by adding the line <code>password required pam_unix.so remember=5</code> to the end of the file | # Enabling previous passwords being remembered can be enabled by adding the line <code>password required pam_unix.so remember=5</code> to the end of the file | ||
#* This is important because it will prevent users from using the same password multiple times | #* This is important because it will prevent users from using the same password multiple times | ||
| − | + | ===Max/Min password age=== | |
| − | === | ||
This file determines the maximum/minimum password age | This file determines the maximum/minimum password age | ||
# <code>sudo nano /etc/login.defs</code> | # <code>sudo nano /etc/login.defs</code> | ||
# Scroll very far down until you reach the line PASS_MAX_DAYS. Set it equal to 30, and set PASS_MIN_DAYS equal to 5. | # Scroll very far down until you reach the line PASS_MAX_DAYS. Set it equal to 30, and set PASS_MIN_DAYS equal to 5. | ||
Revision as of 16:53, 20 November 2023
When you need to mess with security policy in Linux a need to know command to start diving in is "sudo nano /etc/security/pwquality.conf". This command can help with accessing the security policy of linux and editing it.
Two other useful files are /etc/pam.d/common-password and /etc/login.defs
Minimum Password Length
This file controls the minimum password length, whether previous passwords are remembered, and whether dictionary-based password checks are enabled.
sudo nano /etc/pam.d/common-password- The minimum password length can be set to 10 by adding "minlen=10" to the end of this line:
password [success=1 default=ignore] pam_unix.so obscure yescrypt minlen=10
Dictionary Based Password Checks
sudo nano /etc/pam.d/common-password- Dictionary-based password checks can be enabled by adding the line
password requisite pam_pwquality.soto the end of the file- This is important because it prevents users from using common words in their password
Remembering Previous Passwords
sudo nano /etc/pam.d/common-password- Enabling previous passwords being remembered can be enabled by adding the line
password required pam_unix.so remember=5to the end of the file- This is important because it will prevent users from using the same password multiple times
Max/Min password age
This file determines the maximum/minimum password age
sudo nano /etc/login.defs- Scroll very far down until you reach the line PASS_MAX_DAYS. Set it equal to 30, and set PASS_MIN_DAYS equal to 5.