From 5242eef8fc54636a41701fd9d7083ba6e4a4e0b3 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Wed, 26 Jun 2024 18:18:39 +0200 Subject: Merging upstream version 1:4.15.2. Signed-off-by: Daniel Baumann --- man/passwd.1.xml | 73 ++++++++++++++++++++++++++++++++++++++++---------------- 1 file changed, 52 insertions(+), 21 deletions(-) (limited to 'man/passwd.1.xml') diff --git a/man/passwd.1.xml b/man/passwd.1.xml index 52b8637..506b134 100644 --- a/man/passwd.1.xml +++ b/man/passwd.1.xml @@ -6,6 +6,7 @@ --> @@ -13,6 +14,7 @@ + ]> @@ -94,27 +96,10 @@ - Then, the password is tested for complexity. As a general guideline, - passwords should consist of 6 to 8 characters including one or more - characters from each of the following sets: - - - - - lower case alphabetics - - - digits 0 thru 9 - - - punctuation marks - - - - - Care must be taken not to include the system default erase or kill - characters. passwd will reject any password which - is not suitably complex. + Then, the password is tested for complexity. + passwd will reject any password which is not + suitably complex. Care must be taken not to include the system + default erase or kill characters. @@ -139,6 +124,17 @@ used as guesses to violate system security. + + As a general guideline, passwords should be long and random. It's + fine to use simple character sets, such as passwords consisting + only of lowercase letters, if that helps memorizing longer + passwords. For a password consisting only of lowercase English + letters randomly chosen, and a length of 32, there are 26^32 + (approximately 2^150) different possible combinations. Being an + exponential equation, it's apparent that the exponent (the length) + is more important than the base (the size of the character set). + + You can find advice on how to choose a strong password on http://en.wikipedia.org/wiki/Password_strength @@ -286,6 +282,21 @@ + + + ,  PREFIX_DIR + + + + Apply changes to configuration files under the root filesystem + found under the directory PREFIX_DIR. + This option does not chroot and is intended for preparing a cross-compilation + target. Some limitations: NIS and LDAP users/groups are + not verified. PAM authentication is using the host files. + No SELINUX support. + + + , @@ -347,6 +358,17 @@ + + + , + + + + This option is used to indicate that passwd should read the new password from standard + input, which can be a pipe. + + + @@ -473,6 +495,9 @@ chpasswd8 , + + makepasswd1 + , passwd5 , @@ -488,5 +513,11 @@ usermod8 . + + + The following web page comically (yet correctly) compares the + strength of two different methods for choosing a password: + "https://xkcd.com/936/" + -- cgit v1.2.3