On Thu, Jan 26, 2012 at 03:25:11PM +0100, Fabian Greffrath wrote: > Am 26.01.2012 14:48, schrieb Jan Dittberner: > >I think it would be better to have this list as a wordlist package > >instead of bundling it with libcrack2. With this approach the list > >could be updated with no need for a new libcrack2 version. > > You are right, it would be sufficient to drop the list in > /usr/share/dict and re-run /usr/sbin/update-cracklib.
If the file is put into /usr/share/dict by dpkg
/usr/sbin/update-cracklib is triggered automatically.
Maybe this bug could be reassigned to wnpp and be formulated as an ITP
for a package wknownbadpasswords that Provides: wordlist.
> BTW, is it right that libcrack2 cannot use plain text word lists but
> depends on databases in /var/cache/cracklib/ and these databases can
> only get created by tools in cracklib-runtime?
This is correct.
> Sounds like the libcrack2 package is pretty useless without
> cracklib-runtime then.
I added cracklib-runtime as Recommends to allow small systems to use
libcrack2 with pre generated cracklib formatted files and without
installing cracklib-runtime. AFAIR this was a request from Emdebian
people but I'm not sure.
Kind regards,
Jan
--
Jan Dittberner - Debian Developer
GPG-key: 4096R/558FB8DD 2009-05-10
B2FF 1D95 CE8F 7A22 DF4C F09B A73E 0055 558F B8DD
http://ddportfolio.debian.net/ - http://people.debian.org/~jandd/
signature.asc
Description: Digital signature
