Re: [PATCH] system: Make PAM use SHA-512 to encrypt passwords.

[Mark H Weaver]

宋文武 <address@hidden> writes:

> 宋文武 <address@hidden> writes:
>
>> Fixes <https://bugs.gnu.org/21318>.
>>
>> * gnu/system/linux.scm (unix-pam-service)[password]: Add 'sha512'
>>   to arguments.
>> ---
>>  gnu/system/linux.scm | 5 ++++-
>>  1 file changed, 4 insertions(+), 1 deletion(-)
>>
>> diff --git a/gnu/system/linux.scm b/gnu/system/linux.scm
>> index aaaa8c6..cc2eabe 100644
>> --- a/gnu/system/linux.scm
>> +++ b/gnu/system/linux.scm
>> @@ -148,7 +148,10 @@ should be the name of a file used as the 
>> message-of-the-day."
>>                            (module "pam_unix.so")
>>                            (arguments '("nullok")))
>>                           unix)))
>> -         (password (list unix))
>> +         (password (list (pam-entry
>> +                          (control "required")
>> +                          (module "pam_unix.so")
>> +                          (arguments '("sha512")))))
> To store the hashed passwords in '/etc/shadow' (0600) instead of
> '/etc/passwd' (0644), we should add 'shadow' to arguments too.

Can you send an updated patch?

   Thank you!
      Mark