commit: 2873d3770f98b89f0bd74ab2e761c9e86ca07464 Author: Sam James <sam <AT> gentoo <DOT> org> AuthorDate: Thu Mar 5 21:23:20 2026 +0000 Commit: Sam James <sam <AT> gentoo <DOT> org> CommitDate: Thu Mar 5 21:28:38 2026 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2873d377
sys-auth/passwdqc: add 2.1.0 We may still want to re-evaluate what our defaults are here, perhaps to make it warn by default instead of rejecting. Signed-off-by: Sam James <sam <AT> gentoo.org> sys-auth/passwdqc/Manifest | 2 + sys-auth/passwdqc/passwdqc-2.1.0.ebuild | 76 +++++++++++++++++++++++++++++++++ 2 files changed, 78 insertions(+) diff --git a/sys-auth/passwdqc/Manifest b/sys-auth/passwdqc/Manifest index fa6b3593eec3..dc815da996f5 100644 --- a/sys-auth/passwdqc/Manifest +++ b/sys-auth/passwdqc/Manifest @@ -1,2 +1,4 @@ DIST passwdqc-2.0.3.tar.gz 89608 BLAKE2B d4d999f1da011041e947fcf40b28977c825e7be2a9edfe641205f433862607e958d74b6e11ef5222e9791985a55dc3117c71d47b9516c521bb64ff4cddee77d5 SHA512 08a1ee0e7efe0be8af8b253147836c479247a849baf598a1ad573a050ef4b8700fdb725fd887877f82f9207f3654f489f71267cc4051ce8ebf2405125b77b6b9 DIST passwdqc-2.0.3.tar.gz.asc 801 BLAKE2B 47c6bf9b98ed77de8299100ce503a9d82e9d3d41b15c35addea533c677b9b5e06a17bd990cf8a21793e2c5db6b298c112dab4f47f03b581c3662ed5193bd99bb SHA512 fead28ba44fa4b80399593041cd4db498d9c55bf148043535854b4dfec5e495756a2c05380b1260ebbe9a613ba1e72b9c97bed1198eb2c0b31af80541222abc2 +DIST passwdqc-2.1.0.tar.gz 210003 BLAKE2B ca77fa2d7d754f0bbf6e974322f30dd33cfa505857769ba9ad03df6135f11019e1467b66ee860023b110fb5041b1b12641757329c470641c1dfde8173a064020 SHA512 4bcc7d1db761a681fd72123984926d6f877a4338cfec0763583f08b4e2165e869fe61a54395fe3a14ba4574869d36a07ecc531eb13665a15508a9ac588458500 +DIST passwdqc-2.1.0.tar.gz.asc 801 BLAKE2B 93d800cbb2ea27c0847c3ed1fd29b7c25c8b28dcb3059bab1b1755bc0dc55852c86bc6da7c5056944ec9047dc8c636545d77e71c12de565387597398c6c44be0 SHA512 aa808eb6b59c44cfbd75d0743b6ea89b84b33dee35dc9b8b0ce43d98b30e6224374552926fe0769fe62b844f32881b4edae4a7bdb16f52691e5d8c6e8b0f085c diff --git a/sys-auth/passwdqc/passwdqc-2.1.0.ebuild b/sys-auth/passwdqc/passwdqc-2.1.0.ebuild new file mode 100644 index 000000000000..2a1b9d09239c --- /dev/null +++ b/sys-auth/passwdqc/passwdqc-2.1.0.ebuild @@ -0,0 +1,76 @@ +# Copyright 1999-2026 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/openwall.asc +inherit pam toolchain-funcs verify-sig + +DESCRIPTION="Password strength checking library (and PAM module)" +HOMEPAGE="https://www.openwall.com/passwdqc/"; +SRC_URI=" + https://www.openwall.com/${PN}/${P}.tar.gz + verify-sig? ( https://www.openwall.com/${PN}/${P}.tar.gz.sign -> ${P}.tar.gz.asc ) +" + +LICENSE="Openwall BSD public-domain" +SLOT="0" +KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86" + +RDEPEND=" + sys-libs/pam + virtual/libcrypt:= +" +DEPEND="${RDEPEND}" +BDEPEND="verify-sig? ( sec-keys/openpgp-keys-openwall )" + +QA_FLAGS_IGNORED=" + lib*/security/pam_passwdqc.so + usr/lib*/libpasswdqc.so.1 +" + +src_prepare() { + default + + # Don't re-define _F_S / otherwise clash with our default toolchain + # hardening. + sed -i \ + -e 's:`uname -s`:Linux:' \ + -e 's:-fPIE.*::' \ + -e 's:-Wl,-z,relro.*::' \ + Makefile || die + + # Ship our own default settings + cat <<- EOF > "${S}/passwdqc.conf" + min=disabled,24,11,8,7 + max=72 + passphrase=3 + match=4 + similar=deny + random=47 + enforce=none + retry=3 + EOF +} + +_emake() { + emake \ + SHARED_LIBDIR="/usr/$(get_libdir)" \ + DEVEL_LIBDIR="/usr/$(get_libdir)" \ + SECUREDIR="$(getpam_mod_dir)" \ + CONFDIR="/etc/security" \ + CFLAGS="${CFLAGS} ${CPPFLAGS}" \ + LDFLAGS="${LDFLAGS}" \ + CC="$(tc-getCC)" \ + LD="$(tc-getCC)" \ + "$@" +} + +src_compile() { + _emake all +} + +src_install() { + _emake DESTDIR="${ED}" install_lib install_pam install_utils + dodoc README PLATFORMS INTERNALS +}
