Subject: Re: security/10206 - proposed solution (concept)
To: None <tech-security@NetBSD.org>
From: Alan Barrett <apb@cequrux.com>
List: tech-security
Date: 08/17/2005 00:26:07
On Wed, 17 Aug 2005, Elad Efrat wrote:
> An example entry in /etc/passwd.conf for at least 8 character passwords
> combining both upper/lower case and digits can be:
>
> policy:
> minlen = 8
> upper = yes
> lower = yes
> digits = yes
If I understand correctly, "upper = yes" really means "uppercase
characters are required", and "upper = no" really means "uppercase
characters are optional (not required)". Or do I misunderstand, and
"upper = no" really means "uppercase characters are prohibited"?
I'd prefer to see keywords like "required", "optional" and "prohibited",
rather than "yes" and "no".
--apb (Alan Barrett)