0001-pambase.py-add-support-for-yescrypt-password-hashing.patch

0001-pambase.py-add-support-for-yescrypt-password-hashing.patch (text/plain), 1.57 KB, created by Alexander Tsoy on 2021-06-29 10:11:58 UTC

From f055266585db5d08dba64c960f6ca59e38d2b9bf Mon Sep 17 00:00:00 2001
From: Alexander Tsoy <[e-mail]>
Date: Tue, 29 Jun 2021 12:40:52 +0300
Subject: [PATCH] pambase.py: add support for yescrypt password hashing

Signed-off-by: Alexander Tsoy <[e-mail]>
---
 pambase.py | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pambase.py b/pambase.py
index c078156..108280b 100755
--- a/pambase.py
+++ b/pambase.py
@@ -20,6 +20,7 @@ def main():
     parser.add_argument('--pam-ssh', action="store_true", help='enable pam_ssh.so module')
     parser.add_argument('--securetty', action="store_true", help='enable pam_securetty.so module')
     parser.add_argument('--sha512', action="store_true", help='enable sha512 option for pam_unix.so module')
+    parser.add_argument('--yescrypt', action="store_true", help='enable yescrypt option for pam_unix.so module')
     parser.add_argument('--krb5', action="store_true", help='enable pam_krb5.so module')
     parser.add_argument('--minimal', action="store_true", help='install minimalistic PAM stack')
     parser.add_argument('--debug', action="store_true", help='enable debug for selected modules')
@@ -61,7 +62,9 @@ def process_args(args):
     if args.krb5:
         output["krb5_params"] = "{0} ignore_root try_first_pass".format("debug").strip()
 
-    if args.sha512:
+    if args.yescrypt:
+        output["unix_extended_encryption"] = "yescrypt shadow"
+    elif args.sha512:
         output["unix_extended_encryption"] = "sha512 shadow"
     else:
         output["unix_extended_encryption"] = "md5 shadow"
-- 
2.31.1