Red Hat Bugzilla – Bug 986401
cracklib-check doesn't recognize dictionary words as based on wordlist
Last modified: 2014-06-18 03:10:37 EDT
Proposing as blocker, rationale: regression from RHEL 6.
+++ This bug was initially created as a clone of Bug #964118 +++
Description of problem:
When using English wordlist from package words to create cracklib dictionary some words are not recognized as being based on dictionary words
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. create-cracklib-dict /usr/share/dict/words
2. cat /usr/share/dict/words | cracklib-check | grep ': OK'
3. echo $?
--- Additional comment from Fedora Admin XMLRPC Client on 2013-06-10 13:35:05 EDT ---
This package has changed ownership in the Fedora Package Database. Reassigning to the new owner of this component.
--- Additional comment from Hubert Kario on 2013-06-25 06:19:30 EDT ---
Issue is also present on Fedora 19, same results as in Comment 0.
--- Additional comment from Hubert Kario on 2013-07-17 06:07:00 EDT ---
Issue is also present on Fedora rawhide, same results as in Comment 0.
If the dictionary is made of random words, cracklib-check in many cases doesn't recognize more than half of the input words:
for i in `seq 1 34`; do
echo -n > wordlist
for j in `seq 1 20`; do
tr -cd '[:alpha:]' < /dev/urandom | dd bs=1 count=$i 2>/dev/null >> wordlist
echo >> wordlist
create-cracklib-dict wordlist > /dev/null
cracklib-check < wordlist | grep ': OK' | wc -l
Words with punctuation are now ignored:
[root@rhel7-64 test]# create-cracklib-dict /usr/share/dict/words
[root@rhel7-64 test]# cat /usr/share/dict/words | cracklib-check | grep ': OK'
That's actually problem in cracklib-format script as called by create-cracklib-dict. The punctuation is removed from the created dictionary, but we do not ignore all punctuation now when checking for the dictionary match. (bug 985378)
I'll change the cracklib-format script and eagerly await what regresses next. :)
yes, I meant ignored by create-cracklib-dict, not by cracklib-check
This request was resolved in Red Hat Enterprise Linux 7.0.
Contact your manager or support representative in case you have further questions about the request.