Instead of using the default <emphasis>crypt</emphasis> method, use the much more secure <emphasis>YESCRYPT</emphasis> method of password encryption, which also allows passwords longer than 8 characters.It is also necessary to change the obsolete <filename class="directory">/var/spool/mail</filename> location for user mailboxes that Shadow uses by default to the <filename class="directory">/var/mail</filename> location used currently. And, remove <filename class="directory">/bin</filename> and <filename class="directory">/sbin</filename> from the <envar>PATH</envar>, since they are simply symlinks to their counterparts in <filename class="directory">/usr</filename>.