1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
|
From: Steve Langasek <vorlon@debian.org>
Date: Mon, 11 Sep 2023 14:00:42 -0600
Subject: Support nullok_secure as a deprecated alias for nullok
Last-Update: 2020-08-11
---
modules/pam_unix/support.h | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/modules/pam_unix/support.h b/modules/pam_unix/support.h
index 425ff66..4d52825 100644
--- a/modules/pam_unix/support.h
+++ b/modules/pam_unix/support.h
@@ -103,8 +103,9 @@ typedef struct {
#define UNIX_YESCRYPT_PASS 32 /* new password hashes will use yescrypt */
#define UNIX_NULLRESETOK 33 /* allow empty password if password reset is enforced */
#define UNIX_OBSCURE_CHECKS 34 /* enable obscure checks on passwords */
+#define UNIX_NULLOK_SECURE 35 /* deprecated alias for nullok */
/* -------------- */
-#define UNIX_CTRLS_ 35 /* number of ctrl arguments defined */
+#define UNIX_CTRLS_ 36 /* number of ctrl arguments defined */
#define UNIX_DES_CRYPT(ctrl) (off(UNIX_MD5_PASS,ctrl)&&off(UNIX_BIGCRYPT,ctrl)&&off(UNIX_SHA256_PASS,ctrl)&&off(UNIX_SHA512_PASS,ctrl)&&off(UNIX_BLOWFISH_PASS,ctrl)&&off(UNIX_GOST_YESCRYPT_PASS,ctrl)&&off(UNIX_YESCRYPT_PASS,ctrl))
@@ -148,6 +149,7 @@ static const UNIX_Ctrls unix_args[UNIX_CTRLS_] =
/* UNIX_YESCRYPT_PASS */ {"yescrypt", _ALL_ON_^(0x6EC22000ULL), 0x40000000, 1},
/* UNIX_NULLRESETOK */ {"nullresetok", _ALL_ON_, 0x80000000, 0},
/* UNIX_OBSCURE_CHECKS */ {"obscure", _ALL_ON_, 0x100000000, 0},
+/* UNIX_NULLOK_SECURE */ {"nullok_secure", _ALL_ON_^(0x200ULL), 0, 0},
};
#define UNIX_DEFAULTS (unix_args[UNIX__NONULL].flag)
|
