about summary refs log tree commit diff
path: root/nixos/modules/programs/shadow.nix
diff options
context:
space:
mode:
authorMartin Weinelt <hexa@darmstadt.ccc.de>2023-05-09 17:05:34 +0200
committerMartin Weinelt <hexa@darmstadt.ccc.de>2023-05-09 17:05:34 +0200
commita3c7dcd88dc4a185ee25cb758e89ef97d36a693d (patch)
treeb5c32d35c5b4cc67bf942f9eef0edb62c536a91c /nixos/modules/programs/shadow.nix
parentd7bbeedaac9f07965cb47d0e5ec3301fd2a91aaa (diff)
nixos/shadow: Set default encrypt method
Fixes the default for tools like chpasswd, chgpasswd and gpasswd.

Closes: #230880
Diffstat (limited to 'nixos/modules/programs/shadow.nix')
-rw-r--r--nixos/modules/programs/shadow.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/nixos/modules/programs/shadow.nix b/nixos/modules/programs/shadow.nix
index fab809f279a36..35267acd6bb74 100644
--- a/nixos/modules/programs/shadow.nix
+++ b/nixos/modules/programs/shadow.nix
@@ -41,6 +41,8 @@ let
       # This should be made configurable.
       #CHFN_RESTRICT frwh
 
+      # The default crypt() method, keep in sync with the PAM default
+      ENCRYPT_METHOD YESCRYPT
     '';
 
   mkSetuidRoot = source: