[PATCH] su: support denying accounts with blank password

[Laurent Bercot]

On 09/06/2015 21:44, Natanael Copa wrote:
> It is an interesting dilemma. What is worse, blank root password or
> weak/default root password (eg 'root' or similar)?

  I'll suggest that it doesn't matter in the slightest, because a
machine should only be in either state when it's on a trusted
network where new machines are installed (or, if possible, on no
network at all) and should never find themselves in those states
out there in a place where users can connect to them.

  IOW, if a computer gets hacked because its root password was
blank or default, it's not a problem you can solve by choosing
the other solution. :)

-- 
  Laurent