[PATCH 2/4] Don't allow weak root passwords

Brian C. Lane bcl at redhat.com
Tue Jan 27 18:24:24 UTC 2015


On Tue, Jan 27, 2015 at 12:57:30PM -0500, David Shea wrote:
> On 01/26/2015 08:33 PM, Brian C. Lane wrote:
> >Remove the double done click for weak passwords. Root passwords must
> >meet pwquality's minimum requirements in order to be used.
> >---
> >  pyanaconda/ui/gui/spokes/password.py | 27 +++++++--------------------
> >  1 file changed, 7 insertions(+), 20 deletions(-)
> >
> 
> I'm not fond of removing the option for weak passwords entirely. We can make
> the warning louder maybe, but if we remove any option to waive it are we
> really helping users or just annoying them?

I used to agree. But it really it isn't hard to come up with a password
that passes the checks and is easy to remember. eg. 1q0o2w9i3e8u (a
keyboard pattern)

The people who are most effected by this are us, and testers. But the
goal is more secure installations, not to not annoy ourselves :)

-- 
Brian C. Lane | Anaconda Team | IRC: bcl #anaconda | Port Orchard, WA (PST8PDT)


More information about the anaconda-patches mailing list