LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Mandriva
User Name
Password
Mandriva This Forum is for the discussion of Mandriva (Mandrake) Linux.

Notices


Reply
  Search this Thread
Old 12-03-2004, 08:29 AM   #1
Seube
LQ Newbie
 
Registered: Dec 2004
Posts: 1

Rep: Reputation: 0
Disable password aging check in MSEC


The MSEC security level of my system is set to 4.
I want to know how to disable in MSEC the password aging verification.
With level=4, all users need to change their password every 60 days by default.
I would like never to have to change the password. We can set password duration to a high value (i.e 99999) by using 'chage' command or by editing /etc/shadow but MSEC avoids this by periodically checks of shadow file ( re-sets the duration to 60 days by default ).

I don't want to decrease security level to 3.

I tried unsuccessfully these solutions:
- In /etc/security/msec/security.conf, overrule by adding CHECK_SHADOW=no next by adding also CHECK_PASSWD=no
- In /etc/security/msec/level.local, add set_security_conf('CHECK_SHADOW', 'no') next add also set_security_conf('CHECK_PASSWD', 'no')
- In /etc/security/msec/level.local, add no_password_aging_for(user)

Thanks for you help.
 
Old 12-15-2004, 09:39 PM   #2
drdiu
LQ Newbie
 
Registered: Aug 2003
Posts: 2

Rep: Reputation: 0
/var/share/msec/msec.py

# differences between level 4,5 and others
if level >= 4:
set_user_umask('077')
set_shell_history_size(10)
allow_root_login(no)
enable_sulogin(yes)
allow_user_list(no)
enable_promisc_check(yes)
accept_icmp_echo(no)
accept_broadcasted_icmp_echo(no)
accept_bogus_error_responses(no)
allow_reboot(no)
enable_at_crontab(no)
if level == 4:
password_aging(60 30) password_aging(99999)
allow_remote_root_login(without_password)

then run msec and check /etc/login.defs
Try it
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
disable msec warning loloms893 Mandriva 3 11-21-2005 02:31 AM
How to disable password changing permissions to normal users ? toraghun Linux - Newbie 14 11-17-2005 10:17 AM
Password aging help szahri Linux - Newbie 5 03-23-2005 08:02 PM
how do u check if password has enough characters?? luxpops Programming 4 09-12-2004 04:30 AM
How do you implement password aging in samba? colpaarm Linux - Software 1 07-30-2003 10:37 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Mandriva

All times are GMT -5. The time now is 08:29 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration