summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMikle Kolyada <zlogene@gentoo.org>2021-11-14 14:54:54 +0300
committerMikle Kolyada <zlogene@gentoo.org>2021-11-14 14:54:54 +0300
commit3b89ab7e52aba0bbb23af40e420d2daf4e07cb84 (patch)
treec1da1f4ca0c791659789c5c31e9f1495f270501e
parenttemplates/system-auth.tpl: fix try_first_pass typo (diff)
downloadpambase-3b89ab7e52aba0bbb23af40e420d2daf4e07cb84.tar.gz
pambase-3b89ab7e52aba0bbb23af40e420d2daf4e07cb84.tar.bz2
pambase-3b89ab7e52aba0bbb23af40e420d2daf4e07cb84.zip
Add yescrypt supportpambase-20211218
Signed-off-by: Mikle Kolyada <zlogene@gentoo.org>
-rwxr-xr-xpambase.py5
1 files changed, 4 insertions, 1 deletions
diff --git a/pambase.py b/pambase.py
index c078156..3875e89 100755
--- a/pambase.py
+++ b/pambase.py
@@ -19,6 +19,7 @@ def main():
parser.add_argument('--mktemp', action="store_true", help='enable pam_mktemp.so module')
parser.add_argument('--pam-ssh', action="store_true", help='enable pam_ssh.so module')
parser.add_argument('--securetty', action="store_true", help='enable pam_securetty.so module')
+ parser.add_argument('--yescrypt', action="store_true", help='enable yescrypt option for pam_unix.so module')
parser.add_argument('--sha512', action="store_true", help='enable sha512 option for pam_unix.so module')
parser.add_argument('--krb5', action="store_true", help='enable pam_krb5.so module')
parser.add_argument('--minimal', action="store_true", help='install minimalistic PAM stack')
@@ -61,7 +62,9 @@ def process_args(args):
if args.krb5:
output["krb5_params"] = "{0} ignore_root try_first_pass".format("debug").strip()
- if args.sha512:
+ if args.yescrypt:
+ output["unix_extended_encryption"] = "yescrypt shadow"
+ elif args.sha512:
output["unix_extended_encryption"] = "sha512 shadow"
else:
output["unix_extended_encryption"] = "md5 shadow"