F23 Self Contained Change: Standardized Passphrase Policy

[Jan Kurik]

= Proposed Self Contained Change: Standardized Passphrase Policy =
https://fedoraproject.org/wiki/Changes/Standardized_passphrase_policy

Change owner(s):
* Kevin Fenzi <kevin at scrye dot com>
* David Cantrell <dcantrell at redhat dot com>
* Tomas Mraz <tmraz at redhat dot com> 

Currently a number of places ask users to set passphrases/passwords. Some of them enforce some kind of rules for passphrases/passwords, others different rules. This change would create a common base policy for as many of these applications as possible, allowing for local users or products to override this base in cases they need to do so. 

== Detailed Description ==
We should have a base passphrase/password policy for applications to use. This allows them all to be consistent and also provide our users with needed security. Additionally, we should make it possible for our users to adjust this base policy as they need depending on their use cases.

The applications involved in this change should be at least:
* anaconda - sets initial root and user passphrases/passwords. 
* passwd - command line utility that changes passphrases/passwords. 
* initial-setup - sets up users if they were not setup in anaconda. 
* libpwquality - doesn't set passwords, but should be used in common for quality checking in a consistent manner. 

We should provide a way for users or products to adjust this policy, and also a way to allow overriding it (if the policy allows). 


== Scope ==
* Proposal owners: Will work with owners of these components to try and come up with a generic policy for passphrases/passwords and how to implement it, then get FESCo to approve this policy and then implement it. 
* Other developers: Will need to adjust applications and config to use a common set of requirements that can be overriden in one place. 
* Release engineering: None 
* Policies and guidelines: Will need to be approved by FESCo and FPC (not a System Wide Change) 
* Trademark approval: N/A (not needed for this Change) 

-- 
Jan Kuřík
_______________________________________________
devel-announce mailing list
devel-announce at lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel-announce