Package: cracklib-runtime
Version: 2.9.6-2
Severity: normal
File: /etc/cron.daily/cracklib-runtime

Dear Maintainer,

I was looking over the installed cron jobs on my machine and noticed
/etc/cron.daily/cracklib-runtime which I think would be better if
it simply did not exist.

I really wonder what purpose running update-cracklib every day serves.
There must be a better solution.

While I'm not familiar with how cracklib works internally please let
me speculate on the different ways things could be affected by this
cronjobs existance or not.

Usecase: sysadm installs a new dictionary via a package, the package
postinst script most likely triggers the update-cracklib (or even better
if dpkg triggers are used which would likely be more effective).

Usecase: sysadm drops a file into a directory to use it as a
dictionary. Waits an entire days before its actually usable. ERRRR!
Wait, why would someone do this? Ofcourse they're going to manually
run update-cracklib so the dictonary becomes available at once, thus no
cron job needed.

I'm having a hard time coming up with more usecases. Please tell me what
purpose the cronjob serves. If the cron job gets removed the 99.999999%
of all users who had this installed via some dependency chain would
not waste resources, possibly battery time, etc.

Regards,
Andreas Henriksson


PS. if dropping the cronjob, please make sure to rm_conffile it so it
doesn't linger on upgrades and also drop this sentence from the manpage:
"By default this script is called by cron every day."

-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'testing-debug'), (500, 
'unstable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: armhf

Kernel: Linux 4.19.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages cracklib-runtime depends on:
ii  file       1:5.35-4
ii  libc6      2.28-8
ii  libcrack2  2.9.6-2

Versions of packages cracklib-runtime recommends:
ii  wamerican [wordlist]  2018.04.16-1

cracklib-runtime suggests no packages.

-- no debconf information

Reply via email to