[users] Set allowWeakPasswords and allowWeakPasswordsDefault to false for all three flavors, but add some basic password recommendations based on NIST standards, warning if the password falls outside of that.

This commit is contained in:
Simon Quigley 2025-02-16 18:05:13 -06:00
parent 15de561729
commit 636fb54564
4 changed files with 27 additions and 3 deletions

8
debian/changelog vendored
View File

@ -1,3 +1,11 @@
calamares-settings-ubuntu (1:25.04.13) UNRELEASED; urgency=medium
* [users] Set allowWeakPasswords and allowWeakPasswordsDefault to false for
all three flavors, but add some basic password recommendations based on
NIST standards, warning if the password falls outside of that.
-- Simon Quigley <tsimonq2@ubuntu.com> Sun, 16 Feb 2025 17:55:11 -0600
calamares-settings-ubuntu (1:25.04.12) plucky; urgency=medium calamares-settings-ubuntu (1:25.04.12) plucky; urgency=medium
* [Lubuntu] Update password requirements to match NIST recommendations. * [Lubuntu] Update password requirements to match NIST recommendations.

View File

@ -13,8 +13,16 @@ defaultGroups:
system: true system: true
- sudo - sudo
passwordRequirements: passwordRequirements:
minLength: 1 minLength: 8
maxLength: -1 maxLength: -1
libpwquality:
- minlen=8
- maxrepeat=3
- maxsequence=3
- usersubstr=4
- badwords=linux
allowWeakPasswords: false
allowWeakPasswordsDefault: false
# Explicitly set the shell instead of deferring to Calamares. We have a platform # Explicitly set the shell instead of deferring to Calamares. We have a platform
# expectation derived from Ubuntu here. # expectation derived from Ubuntu here.
user: user:

View File

@ -21,7 +21,7 @@ passwordRequirements:
- maxsequence=3 - maxsequence=3
- usersubstr=4 - usersubstr=4
- badwords=linux - badwords=linux
allowWeakPasswords: true allowWeakPasswords: false
allowWeakPasswordsDefault: false allowWeakPasswordsDefault: false
# Explicitly set the shell instead of deferring to Calamares. We have a platform # Explicitly set the shell instead of deferring to Calamares. We have a platform
# expectation derived from Ubuntu here. # expectation derived from Ubuntu here.

View File

@ -13,8 +13,16 @@ defaultGroups:
system: true system: true
- sudo - sudo
passwordRequirements: passwordRequirements:
minLength: 1 minLength: 8
maxLength: -1 maxLength: -1
libpwquality:
- minlen=8
- maxrepeat=3
- maxsequence=3
- usersubstr=4
- badwords=linux
allowWeakPasswords: false
allowWeakPasswordsDefault: false
# Explicitly set the shell instead of deferring to Calamares. We have a platform # Explicitly set the shell instead of deferring to Calamares. We have a platform
# expectation derived from Ubuntu here. # expectation derived from Ubuntu here.
user: user: