Consider Make.defs changes by NixOS

openwall / tcb

Alternative password shadowing scheme

https://www.openwall.com/tcb/

Other

8 stars 3 forks source link

Consider Make.defs changes by NixOS #13

Open solardiz opened 1 year ago

solardiz commented 1 year ago

See if any of the changes from NixOS packaging of tcb by @Izorkin should be made upstream or should inspire other related changes upstream. https://github.com/NixOS/nixpkgs/pull/203916

Izorkin commented 1 year ago

@solardiz you can add an option to change location of tcb_chkpwd file? Assumed location /run/wrappers/bin/tcb_chkpwd

Izorkin commented 1 year ago

Needed change \"$(LIBEXECDIR)/chkpwd/tcb_chkpwd\" to /run/wrappers/bin/tcb_chkpwd:

    $(CC) $(CFLAGS) -DCHKPWD_HELPER=\"$(LIBEXECDIR)/chkpwd/tcb_chkpwd\" \

I specify location of tcb_chkpwd via helper parameter:

  session required /nix/store/mc3j8gfm9jafs2ywy9xq96whg10fmn3k-tcb-1.2/lib/security/pam_tcb.so helper=/run/wrappers/bin/tcb_chkpwd