diff --git a/shadow-utils.login.defs b/shadow-utils.login.defs
index 1a04a8d48cf775b96503a229e1a95db6af7aed38..d2ad0299b57e5ae170d1aca3a97cd40ea39cc508 100644
--- a/shadow-utils.login.defs
+++ b/shadow-utils.login.defs
@@ -128,7 +128,7 @@ UMASK		077
 #	PASS_MIN_LEN	Minimum acceptable password length.
 #	PASS_WARN_AGE	Number of days warning given before a password expires.
 #
-PASS_MAX_DAYS	99999
+PASS_MAX_DAYS	90
 PASS_MIN_DAYS	0
 PASS_MIN_LEN	5
 PASS_WARN_AGE	7
diff --git a/shadow.spec b/shadow.spec
index 18f59ef1e57dec8329c52ed04c1023a09464040b..f61ee4f8362ed8f07beb9052289abe3003082da4 100644
--- a/shadow.spec
+++ b/shadow.spec
@@ -1,6 +1,6 @@
 Name: shadow
 Version: 4.9
-Release: 7
+Release: 8
 Epoch: 2
 License: BSD and GPLv2+
 Summary: Tools for managing accounts and shadow password files
@@ -215,6 +215,9 @@ rm -f $RPM_BUILD_ROOT/%{_libdir}/libsubid.la
 %{_mandir}/*/*
 
 %changelog
+* Thu Dec 22 2022 yaoguangzhong <yaoguangzhong@xfusion.com> - 2:4.9-8
+- set PASS_MAX_DAYS from 99999 to 90
+
 * Sat Dec 17 2022 ExtinctFire <shenyining_00@126.com> - 2:4.9-7
 - chpasswd fix function problem with R parameter