From 3b89ab7e52aba0bbb23af40e420d2daf4e07cb84 Mon Sep 17 00:00:00 2001 From: Mikle Kolyada Date: Sun, 14 Nov 2021 14:54:54 +0300 Subject: Add yescrypt support Signed-off-by: Mikle Kolyada --- pambase.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/pambase.py b/pambase.py index c078156..3875e89 100755 --- a/pambase.py +++ b/pambase.py @@ -19,6 +19,7 @@ def main(): parser.add_argument('--mktemp', action="store_true", help='enable pam_mktemp.so module') parser.add_argument('--pam-ssh', action="store_true", help='enable pam_ssh.so module') parser.add_argument('--securetty', action="store_true", help='enable pam_securetty.so module') + parser.add_argument('--yescrypt', action="store_true", help='enable yescrypt option for pam_unix.so module') parser.add_argument('--sha512', action="store_true", help='enable sha512 option for pam_unix.so module') parser.add_argument('--krb5', action="store_true", help='enable pam_krb5.so module') parser.add_argument('--minimal', action="store_true", help='install minimalistic PAM stack') @@ -61,7 +62,9 @@ def process_args(args): if args.krb5: output["krb5_params"] = "{0} ignore_root try_first_pass".format("debug").strip() - if args.sha512: + if args.yescrypt: + output["unix_extended_encryption"] = "yescrypt shadow" + elif args.sha512: output["unix_extended_encryption"] = "sha512 shadow" else: output["unix_extended_encryption"] = "md5 shadow" -- cgit v1.2.3-65-gdbad