<?xml version="1.0" encoding="UTF-8" ?>

<bugzilla version="5.2"
          urlbase="https://bugzilla.altlinux.org/"
          
          maintainer="jenya@basealt.ru"
>

    <bug>
          <bug_id>51342</bug_id>
          
          <creation_ts>2024-08-30 13:41:51 +0300</creation_ts>
          <short_desc>Возможность устанавливать пинкоды в качестве пароля</short_desc>
          <delta_ts>2024-10-02 13:06:41 +0300</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>4</classification_id>
          <classification>Development</classification>
          <product>Sisyphus</product>
          <component>passwdqc-control</component>
          <version>unstable</version>
          <rep_platform>all</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>REOPENED</bug_status>
          <resolution></resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P5</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Egor Shestakov">vedingrot</reporter>
          <assigned_to name="Dmitry V. Levin">ldv</assigned_to>
          <cc>aen</cc>
    
    <cc>aris</cc>
    
    <cc>bircoph</cc>
    
    <cc>ldv</cc>
    
    <cc>oleg</cc>
    
    <cc>placeholder</cc>
    
    <cc>vedingrot</cc>
          
          <qa_contact>qa-sisyphus</qa_contact>

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>250904</commentid>
    <comment_count>0</comment_count>
      <attachid>16760</attachid>
    <who name="Egor Shestakov">vedingrot</who>
    <bug_when>2024-08-30 13:41:51 +0300</bug_when>
    <thetext>Created attachment 16760
passwdqc-min.control

Добрый день, возникла потребность разрешать обычным пользователям 
устанавливать простой пароль без рутовых привилегий на мобильных
устройствах, для этого необходимо добавить средства в control для
управления полями min и match в passwdqc.conf.

Варианты facilities для min и match прикладываю.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>250905</commentid>
    <comment_count>1</comment_count>
      <attachid>16761</attachid>
    <who name="Egor Shestakov">vedingrot</who>
    <bug_when>2024-08-30 13:42:31 +0300</bug_when>
    <thetext>Created attachment 16761
passwdqc-match.control</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>251348</commentid>
    <comment_count>2</comment_count>
    <who name="Andrew Savchenko">bircoph</who>
    <bug_when>2024-09-06 14:13:58 +0300</bug_when>
    <thetext>см. также задание 356762</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>251365</commentid>
    <comment_count>3</comment_count>
    <who name="Dmitry V. Levin">ldv</who>
    <bug_when>2024-09-07 09:37:12 +0300</bug_when>
    <thetext>Добавьте, пожалуйста, в %changelog пакета ссылку сюда,
см. напр. раздел &quot;Автозакрытие багов&quot; в https://www.altlinux.org/%D0%A0%D1%83%D0%BA%D0%BE%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE_%D0%BF%D0%BE_%D0%BD%D0%B0%D0%BF%D0%B8%D1%81%D0%B0%D0%BD%D0%B8%D1%8E_changelog</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>251944</commentid>
    <comment_count>4</comment_count>
    <who name="Egor Shestakov">vedingrot</who>
    <bug_when>2024-09-23 11:53:51 +0300</bug_when>
    <thetext>(Ответ для Dmitry V. Levin на комментарий #3)
&gt; Добавьте, пожалуйста, в %changelog пакета ссылку сюда,

Добавил автозакрытие бага</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>252074</commentid>
    <comment_count>5</comment_count>
    <who name="Олег Щавелев">oleg</who>
    <bug_when>2024-09-24 17:17:07 +0300</bug_when>
    <thetext>Результат тестирования баг-репорта 51342 с обновлением до таска 356762.

Тестировочный стенд:
==============================
- SESSION_TYPE: wayland
- OS: ALT Mobile
- Kernel: 6.10.6-pine-alt1
- DE: Phosh

Система обновлена: 24.09.2024

==============================
Пакет: passwdqc-control-2.0.3-alt2.noarch

Шаги, приводящие к ошибке:
==============================
1. Обновить пакет до версии passwdqc-control-2.0.3-alt2.noarch;
2. Авторизироваться под пользователем root, su -;
3. Ввести в терминал control passwdqc-match no_check &amp;&amp; control passwdqc-min allow_pincode;
4. Авторизироваться под пользователем altlinux и изменить пароль 1346, используя утилиту passwd.

Фактический результат:
==============================
Пароль успешно изменен. Эти требования не относятся к приложению «Настройки» (gnome-control-center-47.0.1-alt1.aarch64) и в форме ввода минимальный размер пароля составляет 8 символов.

Дополнительная информация:
==============================
[root@alt-mobile ~]# control passwdqc-match help
default: Default password substring match check
no_check: No password substring match check
[root@alt-mobile ~]# control passwdqc-match status
no_check
[root@alt-mobile ~]# control passwdqc-min help
default: Default minimal password length requirements
allow_pincode: Allow short pincodes
[root@alt-mobile ~]# control passwdqc-min status
allow_pincode

[altlinux@alt-mobile ~]$ cat /etc/passwdqc.conf
min=4,4,4,4,4
max=72
passphrase=3
match=0
similar=deny
random=47
enforce=users
retry=3
# The below are just examples, by default none of these are used
#wordlist=/usr/share/john/password.lst
#denylist=/etc/passwdqc.deny
#filter=/opt/passwdqc/hibp.pwq

[altlinux@alt-mobile ~]$ passwd
Changing password for altlinux.
Current password: 

You can now choose the new password or passphrase.

A good password should be a mix of upper and lower case letters, digits, and
other characters.  You can use a password containing at least 4 characters.

A passphrase should be of at least 3 words, 4 to 72 characters long, and
contain enough different characters.

Alternatively, if no one else can see your terminal now, you can pick this as
your password: &quot;icon_Senile3world&quot;.

Enter new password: 
Re-type new password: 
passwd: all authentication tokens updated successfully.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>252401</commentid>
    <comment_count>6</comment_count>
    <who name="Repository Robot">repository-robot</who>
    <bug_when>2024-10-01 15:28:26 +0300</bug_when>
    <thetext>passwdqc-2.0.3-alt2 -&gt; sisyphus:

 Fri Aug 30 2024 Egor Shestakov &lt;ved@altlinux&gt; 2.0.3-alt2
 - Added control(8) for passwdqc min and match properties (Closes: #51342).</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>252430</commentid>
    <comment_count>7</comment_count>
    <who name="Yuri N. Sedunov">aris</who>
    <bug_when>2024-10-02 09:44:43 +0300</bug_when>
    <thetext>31: libpasswdqc-2.0.3-alt2                                                        #################################################################################################### [ 23%]
control-restore: Status &quot;unknown&quot; for &quot;passwdqc-min&quot; facility cannot be restored

$ control passwdqc-min
unknown
$ control passwdqc-min help
default: Default minimal password length requirements
allow_pincode: Allow short pincodes

Надо бы по-умолчанию установить в default.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>252446</commentid>
    <comment_count>8</comment_count>
    <who name="Egor Shestakov">vedingrot</who>
    <bug_when>2024-10-02 13:06:41 +0300</bug_when>
    <thetext>Юрий, Вы, видимо, поменяли поле min на своё собственное. В данном
случае поведение корректно и устанавливать в default не надо.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>16760</attachid>
            <date>2024-08-30 13:41:51 +0300</date>
            <delta_ts>2024-08-30 13:41:51 +0300</delta_ts>
            <desc>passwdqc-min.control</desc>
            <filename>passwdqc-min.control</filename>
            <type>application/x-shellscript</type>
            <size>424</size>
            <attacher name="Egor Shestakov">vedingrot</attacher>
            
              <data encoding="base64">IyEvYmluL3NoCgouIC9ldGMvY29udHJvbC5kL2Z1bmN0aW9ucwoKQ09ORklHPS9ldGMvcGFzc3dk
cWMuY29uZgoKbmV3X3N1YnN0IGRlZmF1bHQgXAoJJ15taW49ZGlzYWJsZWQsMjQsMTEsOCw3JCcg
XAoJJ3MvXm1pbj0uKiQvbWluPWRpc2FibGVkLDI0LDExLDgsNy8nCgpuZXdfc3Vic3QgYWxsb3df
cGluY29kZSBcCgknXm1pbj00LDQsNCw0LDQkJyBcCgkncy9ebWluPS4qJC9taW49NCw0LDQsNCw0
LycKCm5ld19oZWxwIGRlZmF1bHQgJ0RlZmF1bHQgbWluaW1hbCBwYXNzd29yZCBsZW5ndGggcmVx
dWlyZW1lbnRzJwpuZXdfaGVscCBhbGxvd19waW5jb2RlICdBbGxvdyBzaG9ydCBwaW5jb2RlcycK
Cm5ld19zdW1tYXJ5ICdNaW5pbWFsIHBhc3N3b3JkIGxlbmd0aCByZXF1aXJlbWVudHMnCgpjb250
cm9sX3N1YnN0ICIkQ09ORklHIiAiJCoiCg==
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>16761</attachid>
            <date>2024-08-30 13:42:31 +0300</date>
            <delta_ts>2024-08-30 13:42:31 +0300</delta_ts>
            <desc>passwdqc-match.control</desc>
            <filename>passwdqc-match.control</filename>
            <type>application/x-shellscript</type>
            <size>377</size>
            <attacher name="Egor Shestakov">vedingrot</attacher>
            
              <data encoding="base64">IyEvYmluL3NoCgouIC9ldGMvY29udHJvbC5kL2Z1bmN0aW9ucwoKQ09ORklHPS9ldGMvcGFzc3dk
cWMuY29uZgoKbmV3X3N1YnN0IGRlZmF1bHQgXAoJJ15tYXRjaD00JCcgXAoJJ3MvXm1hdGNoPS4q
JC9tYXRjaD00LycKCm5ld19zdWJzdCBub19jaGVjayBcCgknXm1hdGNoPTAkJyBcCgkncy9ebWF0
Y2g9LiokL21hdGNoPTAvJwoKbmV3X2hlbHAgZGVmYXVsdCAnRGVmYXVsdCBwYXNzd29yZCBzdWJz
dHJpbmcgbWF0Y2ggY2hlY2snCm5ld19oZWxwIG5vX2NoZWNrICdObyBwYXNzd29yZCBzdWJzdHJp
bmcgbWF0Y2ggY2hlY2snCgpuZXdfc3VtbWFyeSAnUGFzc3dvcmQgc3Vic3RyaW5nIG1hdGNoIGNo
ZWNrJwoKY29udHJvbF9zdWJzdCAiJENPTkZJRyIgIiQqIgo=
</data>

          </attachment>
      

    </bug>

</bugzilla>