From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 4AE09158086 for ; Sun, 14 Nov 2021 12:36:54 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id AFC5A2BC049; Sun, 14 Nov 2021 12:36:52 +0000 (UTC) Received: from smtp.gentoo.org (woodpecker.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 4CA582BC049 for ; Sun, 14 Nov 2021 12:36:52 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id F0A5C342DDC for ; Sun, 14 Nov 2021 12:36:50 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 4B66F175 for ; Sun, 14 Nov 2021 12:36:49 +0000 (UTC) From: "Mikle Kolyada" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Mikle Kolyada" Message-ID: <1636893365.ea7b3eaad8c9da6119e093e41ab90fef0d06cd0d.zlogene@gentoo> Subject: [gentoo-commits] repo/gentoo:master commit in: sys-auth/pambase/ X-VCS-Repository: repo/gentoo X-VCS-Files: sys-auth/pambase/metadata.xml sys-auth/pambase/pambase-999999999.ebuild X-VCS-Directories: sys-auth/pambase/ X-VCS-Committer: zlogene X-VCS-Committer-Name: Mikle Kolyada X-VCS-Revision: ea7b3eaad8c9da6119e093e41ab90fef0d06cd0d X-VCS-Branch: master Date: Sun, 14 Nov 2021 12:36:49 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply X-Archives-Salt: 081ed2c4-ed96-4138-89df-dd205f9698dc X-Archives-Hash: d66ccd5c7ec5f5ad4ed8d9db66512f4d commit: ea7b3eaad8c9da6119e093e41ab90fef0d06cd0d Author: Mikle Kolyada gentoo org> AuthorDate: Sun Nov 14 12:33:50 2021 +0000 Commit: Mikle Kolyada gentoo org> CommitDate: Sun Nov 14 12:36:05 2021 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ea7b3eaa sys-auth/pambase: Add yescrypt to live ebuild Package-Manager: Portage-3.0.28, Repoman-3.0.3 Signed-off-by: Mikle Kolyada gentoo.org> sys-auth/pambase/metadata.xml | 3 +++ sys-auth/pambase/pambase-999999999.ebuild | 4 +++- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/sys-auth/pambase/metadata.xml b/sys-auth/pambase/metadata.xml index 2373f12897e3..f2c911a6f82d 100644 --- a/sys-auth/pambase/metadata.xml +++ b/sys-auth/pambase/metadata.xml @@ -68,6 +68,9 @@ will not be compatible with systems using an earlier glibc version. + + Switch Linux-PAM's pam_unix module to use yescrypt for passwords hashes rather than MD5 + Enable pam_krb5 module on system auth stack, as an alternative to pam_unix. If Kerberos authentication succeed, only pam_unix diff --git a/sys-auth/pambase/pambase-999999999.ebuild b/sys-auth/pambase/pambase-999999999.ebuild index b4166689528b..e0387fbc8c5a 100644 --- a/sys-auth/pambase/pambase-999999999.ebuild +++ b/sys-auth/pambase/pambase-999999999.ebuild @@ -21,13 +21,14 @@ fi LICENSE="MIT" SLOT="0" -IUSE="caps debug elogind gnome-keyring homed minimal mktemp +nullok pam_krb5 pam_ssh +passwdqc pwhistory pwquality securetty selinux +sha512 systemd" +IUSE="caps debug elogind gnome-keyring homed minimal mktemp +nullok pam_krb5 pam_ssh +passwdqc pwhistory pwquality securetty selinux +sha512 systemd yescrypt" RESTRICT="binchecks" REQUIRED_USE=" ?? ( elogind systemd ) ?? ( passwdqc pwquality ) + ?? ( sha512 yescrypt ) pwhistory? ( || ( passwdqc pwquality ) ) homed? ( !pam_krb5 ) pam_krb5? ( !homed ) @@ -52,6 +53,7 @@ RDEPEND=" sha512? ( >=sys-libs/pam-${MIN_PAM_REQ} ) homed? ( sys-apps/systemd[homed] ) systemd? ( sys-apps/systemd[pam] ) + yescrypt? ( sys-libs/libxcrypt[system] ) " BDEPEND="$(python_gen_any_dep '