MARIADB_RANDOM_ROOT_PASSWORD - much more random #357
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
tianon
reviewed
Mar 12, 2021
With https://mariadb.com/kb/en/password-validation/#examples it may be the case that the random root password fails to meet the complexity requirements. We take advantage that both bionic (for 10.2) and focal onwards include pwgen-2.08 that included the added options to be secure on multiple ways. Though not necessary, take away a few characters in realization that the scripting ability of our users may not contain the basic escaping needed to process this added security.
grooverdan
force-pushed
the
password_complexity
branch
from
6b8f0a1 to
ad1e335
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
With https://mariadb.com/kb/en/password-validation/#examples
it may be the case that the random root password fails
to meet the complexity requirements.
We take advantage that both bionic (for 10.2) and focal
onwards include pwgen-2.08 that included the added options
to be secure on multiple ways.
Though not necessary, take away a few characters in
realization that the scripting ability of our users
may not contain the basic escaping needed to process
this added security.