summary refs log tree commit diff
path: root/gnu/system/linux.scm
diff options
context:
space:
mode:
author宋文武 <iyzsong@gmail.com>2015-08-23 06:33:59 +0800
committer宋文武 <iyzsong@gmail.com>2015-08-24 08:13:32 +0800
commit9297065a2b2151636194b2c91e957a3ec0b33532 (patch)
tree994e82a460307d649612f437cef24e00bbc837f2 /gnu/system/linux.scm
parentc6e59259fd95d6fbfb567827aefbe5a53988a6dc (diff)
downloadguix-9297065a2b2151636194b2c91e957a3ec0b33532.tar.gz
system: Make PAM store SHA-512 encrypted passwords in /etc/shadow.
Fixes <http://bugs.gnu.org/21318>.

* gnu/system/linux.scm (unix-pam-service)[password]: Add 'sha512' and
  'shadow' to arguments.
Diffstat (limited to 'gnu/system/linux.scm')
-rw-r--r--gnu/system/linux.scm6
1 files changed, 5 insertions, 1 deletions
diff --git a/gnu/system/linux.scm b/gnu/system/linux.scm
index aaaa8c6dee..7461a4a61f 100644
--- a/gnu/system/linux.scm
+++ b/gnu/system/linux.scm
@@ -148,7 +148,11 @@ should be the name of a file used as the message-of-the-day."
                           (module "pam_unix.so")
                           (arguments '("nullok")))
                          unix)))
-         (password (list unix))
+         (password (list (pam-entry
+                          (control "required")
+                          (module "pam_unix.so")
+                          ;; Store SHA-512 encrypted passwords in /etc/shadow.
+                          (arguments '("sha512" "shadow")))))
          (session (if motd
                       (list unix
                             (pam-entry