Bug 190014

Summary:	locally configured /etc/login.defs file was replaced by an update
Product:	[Fedora] Fedora	Reporter:	Bill Petersen <bill.petersen>
Component:	shadow-utils	Assignee:	Peter Vrabec <pvrabec>
Status:	CLOSED RAWHIDE	QA Contact:	David Lawrence <dkl>
Severity:	high	Docs Contact:
Priority:	medium
Version:	5
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2006-05-31 13:00:23 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Bill Petersen 2006-04-26 17:52:06 UTC

Description of problem:
Installing an 'updated' shadow-utils (4.0.14-16.FC5) (with yum -y update)
replaced a local site configured file (/etc/login.defs) with stronger constraints

Version-Release number of selected component (if applicable):
4.0.14-16.FC5

How reproducible:
always

Steps to Reproduce:
1. yum -y update  or yum -y update  shadow-utils
2.
3.
  
Actual results:
The local /etc/login.defs file had been modified to make the system 'stronger'.
Specifically PASS_MAX_DAYS had been changed to 90 from 99999
PASS_MIN_DAYS had been changed to 7 from 0
PASS_MIN_LEN had been changed to 8 from 5

Expected results:
If the /etc/login.defs file has been modified from the original, don't replace
it.  After my system 'passed inspection' it later failed a security assessment
because the new shadow-utils has weak requirements such as never changing the
password (99999 days) min password length of 5, etc.

Additional info:

Comment 1 Peter Vrabec 2006-05-31 13:00:23 UTC

I have marked login.defs as noreplace.