宋文武 <iyzs...@gmail.com> writes:
> Fixes <https://bugs.gnu.org/21318>.
>
> * gnu/system/linux.scm (unix-pam-service)[password]: Add 'sha512'
> to arguments.
> ---
> gnu/system/linux.scm | 5 ++++-
> 1 file changed, 4 insertions(+), 1 deletion(-)
>
> diff --git a/gnu/system/linux.scm b/gnu/system/linux.scm
> index aaaa8c6..cc2eabe 100644
> --- a/gnu/system/linux.scm
> +++ b/gnu/system/linux.scm
> @@ -148,7 +148,10 @@ should be the name of a file used as the
> message-of-the-day."
> (module "pam_unix.so")
> (arguments '("nullok")))
> unix)))
> - (password (list unix))
> + (password (list (pam-entry
> + (control "required")
> + (module "pam_unix.so")
> + (arguments '("sha512")))))
To store the hashed passwords in '/etc/shadow' (0600) instead of
'/etc/passwd' (0644), we should add 'shadow' to arguments too.
> (session (if motd
> (list unix
> (pam-entry
> --
> 2.4.3
