# 安装libpam-pwquality软件包:
sudo apt-get -y install libpam-pwquality cracklib-runtime
# 在/etc/login.defs中存在如下配置:
PASS_MAX_DAYS 90
PASS_MIN_DAYS 1
PASS_MIN_LEN 8
PASS_WARN_AGE 7
# 在/etc/pam.d/common-password中存在如下配置:
password requisite pam_pwquality.so minlen="8 ucredit=-1 dcredit=-1 lcredit=-1 ocredit=-1 reject_username enforce_for_root
# 在/etc/pam.d/sshd中存在如下配置:
auth required pam_tally2.so deny="5 unlock_time=600 even_deny_root root_unlock_time=600
# 在/etc/profile中存在如下配置: export TMOUT=30