[gentoo-commits] proj/pambase:master commit in: /

["Mikle Kolyada" <zlogene@gentoo.org>]

commit:     3b89ab7e52aba0bbb23af40e420d2daf4e07cb84
Author:     Mikle Kolyada <zlogene <AT> gentoo <DOT> org>
AuthorDate: Sun Nov 14 11:54:54 2021 +0000
Commit:     Mikle Kolyada <zlogene <AT> gentoo <DOT> org>
CommitDate: Sun Nov 14 11:54:54 2021 +0000
URL:        https://gitweb.gentoo.org/proj/pambase.git/commit/?id=3b89ab7e

Add yescrypt support

Signed-off-by: Mikle Kolyada <zlogene <AT> gentoo.org>

 pambase.py | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pambase.py b/pambase.py
index c078156..3875e89 100755
--- a/pambase.py
+++ b/pambase.py
@@ -19,6 +19,7 @@ def main():
     parser.add_argument('--mktemp', action="store_true", help='enable pam_mktemp.so module')
     parser.add_argument('--pam-ssh', action="store_true", help='enable pam_ssh.so module')
     parser.add_argument('--securetty', action="store_true", help='enable pam_securetty.so module')
+    parser.add_argument('--yescrypt', action="store_true", help='enable yescrypt option for pam_unix.so module')
     parser.add_argument('--sha512', action="store_true", help='enable sha512 option for pam_unix.so module')
     parser.add_argument('--krb5', action="store_true", help='enable pam_krb5.so module')
     parser.add_argument('--minimal', action="store_true", help='install minimalistic PAM stack')
@@ -61,7 +62,9 @@ def process_args(args):
     if args.krb5:
         output["krb5_params"] = "{0} ignore_root try_first_pass".format("debug").strip()
 
-    if args.sha512:
+    if args.yescrypt:
+        output["unix_extended_encryption"] = "yescrypt shadow"
+    elif args.sha512:
         output["unix_extended_encryption"] = "sha512 shadow"
     else:
         output["unix_extended_encryption"] = "md5 shadow"