Security bugs are reported here via bugzilla

[bugzilla-daemon AT metalab.unc.edu]

http://bugs.sourcemage.org/show_bug.cgi?id=5507

           Summary: Something repaces /etc/login.defs
           Product: Security
           Version: unspecified
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Security Issue
        AssignedTo: sm-security AT lists.ibiblio.org
        ReportedBy: eric AT sandall.us


/etc/login.defs originally has the following defined (originally as in from a
clean install of SMGL [any ISO]):

MD5_CRYPT_ENAB  yes

However, both KallDrexx and I noticed that after installing Linux-PAM (neither
of us tested it before, but KallDrexx accidently ran across it after LP was
installed) that it was later set to "no".

The "shadow" package installs a copy of /etc/login.defs, so it may be from 
here,
as even after removing Linux-PAM and recasting shadow (with "-r -c"), the
problem presists.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.