鍒╃敤pam妯″潡passwdqc闄愬畾linux鐢ㄦ埛瀵嗙爜寮哄害
     闄愬畾linux涓婄殑root瀵嗙爜寮哄害鏈韩灏辨槸涓€涓吉鍛介銆俽oot鐢ㄦ埛鍙互鐩存帴鎿嶄綔/etc/shadow 淇敼瀵嗙爜銆備箣鎵€浠ヨ杩欎箞鎼炰富瑕佽繕鏄负浜嗙◢寰彁楂樹竴涓嬬郴缁熺殑瀹夊叏鎬э紝姣曠珶涓嶆槸浜轰汉閮界煡閬搒hadow鐨勬敼娉曘€?
     windows涔熺被浼硷紝鍙互閫氳繃淇敼娉ㄥ唽琛ㄧ殑鏂瑰紡淇敼瀵嗙爜锛屼絾鏄痺indows鐨勫畨鍏ㄧ瓥鐣ヤ緷鐒舵湁瀵嗙爜寮哄害鐨勯€夐」銆?
     涔嬫墍浠ラ€夋嫨passwdqc锛屾槸鍥犱负缃戜笂鎵句簡涓€涓嬶紝鍙戠幇缁濆ぇ澶氭暟鐨刲inux瀵嗙爜寮哄害绛栫暐闄愬埗閮藉彧閽堝闈瀝oot鐢ㄦ埛锛岃€宲asswdqc鍙互闄愬畾鍒皉oot鐢ㄦ埛銆?
      passwdqc鐨勪富椤靛涓嬶細
             http://www.openwall.com/passwdqc/
      閰嶇疆鏂囦欢鐨勮鍒欒鏄庡涓嬶細
             http://www.openwall.com/passwdqc/README.shtml

    绠€鍗曟壘涓€涓垜鐨勮鍒欒В閲婁竴涓嬶細
(娉細ubuntu鐨勯厤缃枃浠跺湪/etc/pam.d/common-password redhat鍜宑entos鐨勯厤缃枃浠跺湪/etc/pam.d/sys-auth)
    鎴戠殑瑙勫垯鏄繖鏍风殑锛?

password required  pam_passwdqc.so min=disabled,disabled,12,8,8 max=30 passphrase=3 match=4 similar=deny enforce=everyone disable_firstupper_lastdigit_check

瑙勫垯瑙ｉ噴濡備笅锛?
1锛夊彧鍖呭惈涓€绉嶅瓧绗︾殑瀵嗙爜锛屾嫆缁濓紙澶у皬鍐欙紝鏁板瓧锛岀壒娈婂瓧绗﹀垎鍒负4绉嶅瓧绗︼級
2锛夊彧鍖呭惈涓ょ瀛楃鐨勫瘑鐮侊紝鎷掔粷
3锛夊鏋滃瘑鐮佷腑琚瘑鍒嚭浜嗗父鐢ㄧ殑鍗曡瘝锛岄偅涔堟渶灏忛暱搴﹀氨蹇呴』涓?2浣嶃€傚父鐢ㄥ崟璇嶇殑鏈€灏忚瘑鍒暱搴︿负3.(鐢眕assphrase=3鍒跺畾)
4锛夊寘鍚笁绉嶅瓧绗︾殑瀵嗙爜锛屾渶灏忛暱搴︿负8浣?
5) 鍖呭惈鍥涚瀛楃鐨勫瘑鐮侊紝鏈€灏忛暱搴︿负8浣?
6锛夊鏋滃彂鐜版湰娆′慨鏀圭殑瀵嗙爜璺熻€佸瘑鐮佹湁4涓猻ubstring鐨勯暱搴︾被浼硷紝灏辫涓烘槸寮卞瘑鐮併€傦紙match=4 similar=deny)
7) 杩欎釜绛栫暐瀵规墍鏈夌敤鎴烽兘鐢熸晥銆傦紙enforce=everyone 锛?
8锛夐粯璁ゆ儏鍐典笅锛屽浜庤緭鍏ョ殑瀵嗙爜锛屽鏋滅涓€涓瓧姣嶆槸澶у啓瀛楁瘝锛屾垨鑰呮渶鍚庝竴涓瓧姣嶄负鏁板瓧锛屽垯涓嶄細璁″叆瀵嗙爜瀛楃鐨勭绫汇€傛瘮濡傦細Fuck1234锛岀敱浜庣涓€涓狥鏄ぇ鍐欏瓧姣嶏紝鎵€浠ヤ細琚涓猴紝璇ュ瘑鐮佸彧鏈夊皬鍐欏瓧姣嶅拰鏁板瓧涓ょ瀛楃銆傝繖涓潪甯稿鎬紝鎴戜篃涓嶇煡閬撳師鍥犳槸浠€涔堛€傛垜浠敤disable_firstupper_lastdigit_check 绂佹浜嗚繖绉嶈瘑鍒€?

闇€瑕佹敞鎰忕殑鏄痙isable_firstupper_lastdigit_check骞朵笉鏄畼鏂圭殑涓€涓姛鑳斤紝瀹樻柟鐨勭増鏈彂甯冨埌1.0.5灏辩粨鏉熶簡锛岃繖涓姛鑳芥槸鍦?.0.5-4鍙戝竷鐨勶紝鏄痳edhat鐨勪竴涓紑鍙戜汉鍛樻彁浜ょ殑銆?
濡備笅鍥撅細


fedora涓湁涓€涓猻rpms:ftp://mirrors1.kernel.org/fedora-secondary/releases/15/Everything/source/SRPMS/pam_passwdqc-1.0.5-7.fc15.src.rpm
杩欎釜鏄?.0.5-7鐗堟湰銆?
鎴戣繖杈归檮浠舵彁渚涗簡涓€涓敱姝atch鍑烘潵鐨刾am_passwdqc.so鏂囦欢銆傚ぇ瀹堕渶瑕佺殑鍙互涓嬭浇銆?

鏈変簡杩欐牱鐨勯厤缃紝鎴戜滑灏卞彲浠ユ斁蹇冧慨鏀瑰瘑鐮佷簡锛屽鏋滀笉绗﹀悎涓婅堪瑙勮寖锛屼細鎻愮ず鍑烘潵鐨勩€?