summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rwxr-xr-xpambase.py5
1 files changed, 4 insertions, 1 deletions
diff --git a/pambase.py b/pambase.py
index c078156..3875e89 100755
--- a/pambase.py
+++ b/pambase.py
@@ -19,6 +19,7 @@ def main():
parser.add_argument('--mktemp', action="store_true", help='enable pam_mktemp.so module')
parser.add_argument('--pam-ssh', action="store_true", help='enable pam_ssh.so module')
parser.add_argument('--securetty', action="store_true", help='enable pam_securetty.so module')
+ parser.add_argument('--yescrypt', action="store_true", help='enable yescrypt option for pam_unix.so module')
parser.add_argument('--sha512', action="store_true", help='enable sha512 option for pam_unix.so module')
parser.add_argument('--krb5', action="store_true", help='enable pam_krb5.so module')
parser.add_argument('--minimal', action="store_true", help='install minimalistic PAM stack')
@@ -61,7 +62,9 @@ def process_args(args):
if args.krb5:
output["krb5_params"] = "{0} ignore_root try_first_pass".format("debug").strip()
- if args.sha512:
+ if args.yescrypt:
+ output["unix_extended_encryption"] = "yescrypt shadow"
+ elif args.sha512:
output["unix_extended_encryption"] = "sha512 shadow"
else:
output["unix_extended_encryption"] = "md5 shadow"