On 12/21/2017 02:27 PM, Jeroen Roovers wrote:
> On Thu, 21 Dec 2017 10:10:30 -0500
> Michael Orlitzky <m...@gentoo.org> wrote:
>> The "cracklib" USE flag ... this commit removes it from base/make.defaults.
>> Closes: https://bugs.gentoo.org/635698
> As there:
>> ...
> Let me (easily) counter that by stating that having cracklib in place
> makes people pick better passwords. Especially the brand new Linux
> users we see so many of might benefit from a default mechanism that
> helps them make better security choices, but I am sure even advanced
> users and systems administrators might set a "temporary" POC password
> "quickly" and then later see their systems go into production without a
> second thought about using stronger passwords.
> Please close that bug report.

I don't think that "some people want it enabled" is enough justification
to keep this in the base profile that is the parent of all others.

If you disagree, please make your voice heard on the bug.

Reply via email to