commit: ea7b3eaad8c9da6119e093e41ab90fef0d06cd0d
Author: Mikle Kolyada <zlogene <AT> gentoo <DOT> org>
AuthorDate: Sun Nov 14 12:33:50 2021 +0000
Commit: Mikle Kolyada <zlogene <AT> gentoo <DOT> org>
CommitDate: Sun Nov 14 12:36:05 2021 +0000
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ea7b3eaa
sys-auth/pambase: Add yescrypt to live ebuild
Package-Manager: Portage-3.0.28, Repoman-3.0.3
Signed-off-by: Mikle Kolyada <zlogene <AT> gentoo.org>
sys-auth/pambase/metadata.xml | 3 +++
sys-auth/pambase/pambase-999999999.ebuild | 4 +++-
2 files changed, 6 insertions(+), 1 deletion(-)
diff --git a/sys-auth/pambase/metadata.xml b/sys-auth/pambase/metadata.xml
index 2373f12897e3..f2c911a6f82d 100644
--- a/sys-auth/pambase/metadata.xml
+++ b/sys-auth/pambase/metadata.xml
@@ -68,6 +68,9 @@
will not be compatible with systems using an earlier
glibc
version.
</flag>
+ <flag name="yescrypt">
+ Switch Linux-PAM's pam_unix module to use yescrypt for
passwords hashes rather than MD5
+ </flag>
<flag name="pam_krb5">
Enable pam_krb5 module on system auth stack, as an
alternative
to pam_unix. If Kerberos authentication succeed, only
pam_unix
diff --git a/sys-auth/pambase/pambase-999999999.ebuild
b/sys-auth/pambase/pambase-999999999.ebuild
index b4166689528b..e0387fbc8c5a 100644
--- a/sys-auth/pambase/pambase-999999999.ebuild
+++ b/sys-auth/pambase/pambase-999999999.ebuild
@@ -21,13 +21,14 @@ fi
LICENSE="MIT"
SLOT="0"
-IUSE="caps debug elogind gnome-keyring homed minimal mktemp +nullok pam_krb5
pam_ssh +passwdqc pwhistory pwquality securetty selinux +sha512 systemd"
+IUSE="caps debug elogind gnome-keyring homed minimal mktemp +nullok pam_krb5
pam_ssh +passwdqc pwhistory pwquality securetty selinux +sha512 systemd
yescrypt"
RESTRICT="binchecks"
REQUIRED_USE="
?? ( elogind systemd )
?? ( passwdqc pwquality )
+ ?? ( sha512 yescrypt )
pwhistory? ( || ( passwdqc pwquality ) )
homed? ( !pam_krb5 )
pam_krb5? ( !homed )
@@ -52,6 +53,7 @@ RDEPEND="
sha512? ( >=sys-libs/pam-${MIN_PAM_REQ} )
homed? ( sys-apps/systemd[homed] )
systemd? ( sys-apps/systemd[pam] )
+ yescrypt? ( sys-libs/libxcrypt[system] )
"
BDEPEND="$(python_gen_any_dep '