password length

[Randy_9]

My system 11.23 ( non-trusted )has the following line in /etc/default/security ( permission = 644 ):
MIN_PASSWORD_LENGTH=8

Yet when I change a password for a local
account and give it only 7 characters, it accepts it?

Why isn't it enforcing it?

[Randy_9]

Just an FYI, it is a "root equivalent" account UID = 0.

[Jeff_Traigle · Accepted solution]

Answered your own question... the restriction doesn't apply to root. See security(4) man page.

MIN_PASSWORD_LENGTH
This parameter controls the minimum length of new passwords. It is not applicable to the root user on an untrusted system.

[Randy_9]

Duh!, okay I tried it for another local user
( UID = 66770 ) and gave it a 6 character password and it also accepted it?

[Jeff_Traigle]

Missed the update... It doesn't matter what account you try to set the password for as root, the restriction will not be applied. Were you changing that password as root also? Or did you mean that logged in as that user, you were able to have a shorter password?

[Pete Randall]

The min length will be enforced for users other than root, so, if you're logged in as root and changing the password, it will accept whatever length password you give it. If you are logged in as a regular user the minimum should be enforced.


Pete