OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Chapter 8 security

From: Steven M. Bellovin (smbresearch.att.com)
Date: Fri Apr 16 2004 - 14:12:38 CDT


In message <20040416190325.GA26196panix.com>, Thor Lancelot Simon writes:

>
>1) The password-strength requirements earlier in the document (you'll need
> to modify /etc/passwd to enforce these restrictions, but I believe you
> can in fact use the cracklib package to do this quite easily)
>

There's another section that speaks of password generation. See pkgsrc/
security/apg, which implements a NIST scheme for password generation.

                --Steve Bellovin, http://www.research.att.com/~smb