From 15de5617293c4b67ace668f2701f7df7f6207fb5 Mon Sep 17 00:00:00 2001 From: Walter Lapchynski Date: Tue, 28 Jan 2025 17:18:26 +0000 Subject: [PATCH] [Lubuntu] add NIST pw requirements with user override option --- debian/changelog | 8 ++++++++ lubuntu/modules/users.conf | 10 +++++++++- 2 files changed, 17 insertions(+), 1 deletion(-) diff --git a/debian/changelog b/debian/changelog index fd36943..ab40dc5 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,11 @@ +calamares-settings-ubuntu (1:25.04.12) plucky; urgency=medium + + * [Lubuntu] Update password requirements to match NIST recommendations. + * [Lubuntu] Allow user to override password requirements, but not by + default. + + -- Walter Lapchynski Tue, 28 Jan 2025 17:14:06 +0000 + calamares-settings-ubuntu (1:25.04.11) plucky; urgency=medium * Rearrange the Lubuntu module order to account for packages with new stuff diff --git a/lubuntu/modules/users.conf b/lubuntu/modules/users.conf index 2070d86..e0163b1 100644 --- a/lubuntu/modules/users.conf +++ b/lubuntu/modules/users.conf @@ -13,8 +13,16 @@ defaultGroups: system: true - sudo passwordRequirements: - minLength: 1 + minLength: 8 maxLength: -1 + libpwquality: + - minlen=8 + - maxrepeat=3 + - maxsequence=3 + - usersubstr=4 + - badwords=linux +allowWeakPasswords: true +allowWeakPasswordsDefault: false # Explicitly set the shell instead of deferring to Calamares. We have a platform # expectation derived from Ubuntu here. #