The "cracklib" USE flag has long (since 2007ish) been enabled by
default for all profiles. But, the features that it provides are not
critical for any of the packages that use it: typically, the library
is used to evaluate a candidate password and to prevent the user from
choosing a weak one.

Since the flag is not critical, and because we now have per-package
USE defaults, this commit removes it from base/make.defaults.

 profiles/base/make.defaults | 10 ----------
 1 file changed, 10 deletions(-)

diff --git a/profiles/base/make.defaults b/profiles/base/make.defaults
index db5f5389791..8139749349d 100644
--- a/profiles/base/make.defaults
+++ b/profiles/base/make.defaults
@@ -71,16 +71,6 @@ XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options 
ipset ipp2p iface ge
 # Some common lcd devices
 LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses 
-# 2006/10/17 - Daniel Drake <>
-# cracklib is becoming optional in shadow (and removed from system) as of
-# today. However, cracklib is very standard across the Linux world so we
-# enable it by default.
-# Diego Pettenò <> (14 Jul 2007)
-# Moved to base/ profile from default-linux/ so that it also applies to
-# embedded and hardened profiles.
 # Miroslav Šulc <> (19 Nov 2008)
 # Netbeans modules/clusters
 NETBEANS="apisupport cnd groovy gsf harness ide identity j2ee java mobility nb 
php profiler soa visualweb webcommon websvccommon xml"

Reply via email to