From f055266585db5d08dba64c960f6ca59e38d2b9bf Mon Sep 17 00:00:00 2001 From: Alexander Tsoy Date: Tue, 29 Jun 2021 12:40:52 +0300 Subject: [PATCH] pambase.py: add support for yescrypt password hashing Signed-off-by: Alexander Tsoy --- pambase.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/pambase.py b/pambase.py index c078156..108280b 100755 --- a/pambase.py +++ b/pambase.py @@ -20,6 +20,7 @@ def main(): parser.add_argument('--pam-ssh', action="store_true", help='enable pam_ssh.so module') parser.add_argument('--securetty', action="store_true", help='enable pam_securetty.so module') parser.add_argument('--sha512', action="store_true", help='enable sha512 option for pam_unix.so module') + parser.add_argument('--yescrypt', action="store_true", help='enable yescrypt option for pam_unix.so module') parser.add_argument('--krb5', action="store_true", help='enable pam_krb5.so module') parser.add_argument('--minimal', action="store_true", help='install minimalistic PAM stack') parser.add_argument('--debug', action="store_true", help='enable debug for selected modules') @@ -61,7 +62,9 @@ def process_args(args): if args.krb5: output["krb5_params"] = "{0} ignore_root try_first_pass".format("debug").strip() - if args.sha512: + if args.yescrypt: + output["unix_extended_encryption"] = "yescrypt shadow" + elif args.sha512: output["unix_extended_encryption"] = "sha512 shadow" else: output["unix_extended_encryption"] = "md5 shadow" -- 2.31.1