BSD Ports

security/pwned-check 2.2_2,1 FreeBSD

Check whether password is known to have been exposed in a data breach

System
FreeBSD
Repository
FreeBSD ports
Maintainer
[email protected]
License
BSD2CLAUSE
Categories
security
Package size
4.9 KiB, 4.4 KiB installed

Description

Pwned Passwords are hundreds of millions of real world passwords exposed in data breaches. This exposure makes them unsuitable for ongoing use as they are at much greater risk of being used to take over other accounts.

This script offers 2 methods to check whether a password has been exposed in an uncovered breach:

  1. Online check implemented in such a way that the password to be checked does not need to be sent to the remote database server.

  2. Local check against a copy of the pawned passwords database.

Since the local copy of the database requires nearly 20 GB of disk space (and a download of more than 10 GB of compressed data) the access via the online check should be preferred, if the compatible with operational and security requirements.

In the other systems

SystemPortVersion
FreeBSDsecurity/pwned-check2.2_2,1
DragonFlysecurity/pwned-check2.2_2,1
HardenedBSDsecurity/pwned-check2.2_2,1
GhostBSDsecurity/pwned-check2.2_2,1

Install

Binary package:

pkg install pwned-check

From the ports tree:

cd /usr/ports/security/pwned-check/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	pwned-check>0:security/pwned-check

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest2.2_2,12.2_2,12.2_1,12.2_2,12.2_2,1
FreeBSD:14:quarterly2.2_2,12.2_2,1n/a2.2_2,12.2_2,1
FreeBSD:15:latest2.2_2,12.2_2,1n/a2.2_2,12.2_2,1
FreeBSD:15:quarterly2.2_2,12.2_2,1n/an/an/a
FreeBSD:16:latest2.2_2,12.2_2,1n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

The Makefile names none itself; they come from USES and USE_*.

The full lists below include those, and their dependencies in turn.

No port depends on this one.

Configuration

No options to configure.

Service scripts
none

Message after installing

This port needs a password hash database that is to be downloaded with
the following command:

    pwned-check -u

The database files will be installed into /var/db/pwned-check by default.
This directory can be changed in /usr/local/etc/pwned-check.conf.

The installation procedure will fetch 6 GB of compressed data and will
temporarily need 18 GB of free space in that directory and 13 GB when
the installation is complete.

------------------------------------------------------------------------------

If you are no longer using the pwned-check port, then manually delete
the following directory and all its contents:

	/var/db/pwned-check

------------------------------------------------------------------------------

Files

Manual pages 1
  • pwned-check(1)
pkg-plist 4
  • bin/pwned-check
  • @sample etc/pwned-check.conf.sample
  • share/man/man1/pwned-check.1.gz
  • @dir /var/db/pwned-check

Commit history 0

No commits in the history this site was built from.