summaryrefslogtreecommitdiff
path: root/usr/src/lib/libsecdb
diff options
context:
space:
mode:
authorRyan C. England <rcengland@gmail.com>2019-08-18 21:49:35 -0400
committerDan McDonald <danmcd@joyent.com>2019-08-20 10:37:14 -0400
commita9370e9f996b7ce61bb1a9612a0625161a922320 (patch)
tree1ad71ec4224fe0ea91704e8c1295f110606d083e /usr/src/lib/libsecdb
parentf67950b21e185934ccabe311516f4dcbdb00ef79 (diff)
downloadillumos-joyent-a9370e9f996b7ce61bb1a9612a0625161a922320.tar.gz
9096 passwords (policy.conf) should default to sha512
Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Andy Fiddaman <omnios@citrus-it.co.uk> Reviewed by: Toomas Soome <tsoome@me.com> Approved by: Dan McDonald <danmcd@joyent.com>
Diffstat (limited to 'usr/src/lib/libsecdb')
-rw-r--r--usr/src/lib/libsecdb/policy.conf6
1 files changed, 3 insertions, 3 deletions
diff --git a/usr/src/lib/libsecdb/policy.conf b/usr/src/lib/libsecdb/policy.conf
index db9b8cb1f5..60fea9f5f3 100644
--- a/usr/src/lib/libsecdb/policy.conf
+++ b/usr/src/lib/libsecdb/policy.conf
@@ -44,11 +44,11 @@ CRYPT_ALGORITHMS_ALLOW=1,2a,md5,5,6
#
#CRYPT_ALGORITHMS_DEPRECATE=__unix__
-# The OpenSolaris default is a SHA256 based algorithm. To revert to
-# the policy present in Solaris releases set CRYPT_DEFAULT=__unix__,
+# The illumos default is a SHA512 based algorithm. To revert to
+# the policy present in former Solaris releases set CRYPT_DEFAULT=__unix__,
# which is not listed in crypt.conf(4) since it is internal to libc.
#
-CRYPT_DEFAULT=5
+CRYPT_DEFAULT=6
#
# These settings determine the default privileges users have. If not set,
# the default privileges are taken from the inherited set.