Allow to update password policy

canonical · Mar 7, 2023 · 66f2bd1 · 66f2bd1
1 parent 10050ea
commit 66f2bd1
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 0 deletions.
diff --git a/hooks/001-extra-packages.chroot b/hooks/001-extra-packages.chroot
@@ -50,6 +50,7 @@ apt install --no-install-recommends -y \
     libnss-extrausers \
     libpam-systemd \
     libpam-modules \
+    libpam-pwquality \
     distro-info-data \
     tzdata \
     openssh-server \

diff --git a/hooks/200-enable-pwquality.chroot b/hooks/200-enable-pwquality.chroot
@@ -0,0 +1,8 @@
+#!/bin/sh -x
+
+set -e
+
+# Enable pam configuration for pwquality
+pam-auth-update --enable pwquality
+# and verify it is available
+grep pam_pwquality.so /etc/pam.d/common-password
diff --git a/static/etc/system-image/writable-paths b/static/etc/system-image/writable-paths
@@ -65,3 +65,5 @@
 /etc/machine-id                         auto                    persistent  transition  none
 # make update-motd writable for branding purposes
 /etc/update-motd.d                      auto                    persistent  transition  none
+# allow to update password policy
+/etc/security/pwquality.conf            auto                    persistent  transition  none