Go to:
Gentoo Home
Documentation
Forums
Lists
Bugs
Planet
Store
Wiki
Get Gentoo!
Gentoo's Bugzilla – Attachment 84729 Details for
Bug 129998
[ru] Gentoo Security Handbook started translation
Home
|
New
–
[Ex]
|
Browse
|
Search
|
Privacy Policy
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
chapter shb-pam.xml
shb-pam.xml (text/plain), 3.67 KB, created by
Azamat H. Hackimov
on 2006-04-15 12:03:01 UTC
(
hide
)
Description:
chapter shb-pam.xml
Filename:
MIME Type:
Creator:
Azamat H. Hackimov
Created:
2006-04-15 12:03:01 UTC
Size:
3.67 KB
patch
obsolete
><?xml version='1.0' encoding='UTF-8'?> ><!-- $Header: /var/www/www.gentoo.org/raw_cvs/gentoo/xml/htdocs/doc/en/security/shb-pam.xml,v 1.2 2005/06/01 17:42:46 neysx Exp $ --> ><!DOCTYPE sections SYSTEM "/dtd/book.dtd"> > ><!-- The content of this document is licensed under the CC-BY-SA license --> ><!-- See http://creativecommons.org/licenses/by-sa/1.0 --> > ><sections> > ><version>1.0</version> ><date>2005-05-31</date> > ><section> ><title>PAM</title> ><body> > ><p> >PAM — ÑÑо Ð½Ð°Ð±Ð¾Ñ Ð±Ð¸Ð±Ð»Ð¸Ð¾Ñек, пÑедоÑÑавлÑÑÑÐ¸Ñ Ð°Ð»ÑÑеÑнаÑивнÑй ÑпоÑоб >аÑÑенÑиÑикаÑии полÑзоваÑÐµÐ»Ñ Ð² пÑогÑÐ°Ð¼Ð¼Ð°Ñ . USE-Ñлаг <c>pam</c> Ñже вклÑÑен по >ÑмолÑаниÑ. ХоÑÑ Ð½Ð°ÑÑÑойки PAM в Gentoo Linux доволÑно ÑазÑмнÑ, вÑегда еÑÑÑ >возможноÑÑÑ ÑÑо-нибÑÐ´Ñ ÑлÑÑÑиÑÑ. ÐÐ»Ñ Ð½Ð°Ñала ÑÑÑановиÑе cracklib. ></p> > ><pre caption="УÑÑановка cracklib"> ># <i>emerge cracklib</i> ></pre> > ><pre caption="/etc/pam.d/passwd"> >auth required pam_unix.so shadow nullok >account required pam_unix.so >password required pam_cracklib.so difok=3 retry=3 minlen=8 dcredit=2 ocredit=2 >password required pam_unix.so md5 use_authtok >session required pam_unix.so ></pre> > ><p> >ÐоÑле ÑÑого Ñ Ð¿Ð¾Ð¼Ð¾ÑÑÑ cracklib бÑÐ´ÐµÑ Ð¿ÑовеÑÑÑÑÑÑ Ð¿Ð°ÑÐ¾Ð»Ñ Ð¿Ð¾Ð»ÑзоваÑелÑ, Ð¸Ð¼ÐµÐµÑ Ð»Ð¸ >он Ð´Ð»Ð¸Ð½Ñ Ð¿Ð¾ кÑайней меÑе 8 Ñимволов, ÑодеÑÐ¶Ð¸Ñ Ð»Ð¸ он по кÑайней меÑе 2 ÑиÑÑÑ, 2 >дÑÑÐ³Ð¸Ñ Ñимвола и не менее 3 Ñимволов, оÑлиÑаÑÑÐ¸Ñ ÑÑ Ð¾Ñ Ñимволов пÑоÑлого паÑолÑ. >ÐлагодаÑÑ ÑÑÐ¾Ð¼Ñ Ð¿Ð¾Ð»ÑзоваÑÐµÐ»Ñ Ð±ÑÐ´ÐµÑ Ð²ÑбиÑаÑÑ ÑÑойкие паÑоли. ÐÑовеÑÑÑе <uri >link="http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/pam-6.html#ss6.3"> >докÑменÑаÑÐ¸Ñ PAM</uri> Ð´Ð»Ñ Ð´ÑÑÐ³Ð¸Ñ Ð¿Ð°ÑамеÑÑов. ></p> > ><pre caption="/etc/pam.d/sshd"> >auth required pam_unix.so nullok >auth required pam_shells.so >auth required pam_nologin.so >auth required pam_env.so >account required pam_unix.so >password required pam_cracklib.so difok=3 retry=3 minlen=8 dcredit=2 ocredit=2 use_authtok >password required pam_unix.so shadow md5 >session required pam_unix.so >session required pam_limits.so ></pre> > ><p> >ÐÑÐ±Ð°Ñ ÑлÑжба, не опиÑÐ°Ð½Ð½Ð°Ñ Ð² одном из Ñайлов PAM ииз каÑалога ><path>/etc/pam.d</path>, бÑÐ´ÐµÑ Ð¸ÑполÑзоваÑÑ Ð¿Ñавила, взÑÑÑе из ><path>/etc/pam.d/other</path>. Ðо ÑмолÑÐ°Ð½Ð¸Ñ ÑÑÑановлена полиÑика <c>deny</c>, >как и должно бÑÑÑ. Ðо нам нÑÐ¶Ð½Ñ Ð»Ð¾Ð³Ð¸Ñование, поÑÑÐ¾Ð¼Ñ Ð½Ñжно добавиÑÑ ><c>pam_warn.so</c>. ÐоÑледнÑÑ ÐºÐ¾Ð½ÑигÑÑаÑÐ¸Ñ — ÑÑо <c>pam_limits</c>, >коÑоÑÐ°Ñ ÑпÑавлÑеÑÑÑ Ñ Ð¿Ð¾Ð¼Ð¾ÑÑÑ <path>/etc/security/limits.conf</path>. См. >Ñаздел <uri >link="?part=1&chap=5#limits_conf">/etc/security/limits.conf</uri> Ð´Ð»Ñ >подÑобного опиÑÐ°Ð½Ð¸Ñ ÑÑÐ¸Ñ Ð½Ð°ÑÑÑоек. ></p> > ><pre caption="/etc/pam.d/other"> >auth required pam_deny.so >auth required pam_warn.so >account required pam_deny.so >account required pam_warn.so >password required pam_deny.so >password required pam_warn.so >session required pam_deny.so >session required pam_warn.so ></pre> > ></body> ></section> ></sections> > ><!-- *$Localization: > target-language: Russian > target-version: 1.0-r1 > target-date: 2006-04-11 > source-cvs-revision: 1.2 > translated-by: Azamat H. Hackimov <azazello1984@mail.ru> > edited-by: none > notes: >-->
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=84729">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 129998
: 84729 |
101478
|
101914
|
102268
