[arch-commits] Commit in libxcrypt/trunk (PKGBUILD libxcrypt.install)

[Christian Hesse]

    Date: Monday, June 7, 2021 @ 15:18:58
  Author: eworm
Revision: 417293

upgpkg: libxcrypt 4.4.22-3: add upgrade message on weak hashes

Added:
  libxcrypt/trunk/libxcrypt.install
Modified:
  libxcrypt/trunk/PKGBUILD

-------------------+
 PKGBUILD          |    3 ++-
 libxcrypt.install |   15 +++++++++++++++
 2 files changed, 17 insertions(+), 1 deletion(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2021-06-07 14:49:42 UTC (rev 417292)
+++ PKGBUILD	2021-06-07 15:18:58 UTC (rev 417293)
@@ -4,7 +4,7 @@
 # Neither tarballs nor tags are signed, but commits are.
 _commit='3df9620d08db207367c0c5152148665b5ce422e1' # git rev-parse v${pkgver}
 pkgver=4.4.22
-pkgrel=2
+pkgrel=3
 pkgdesc='Modern library for one-way hashing of passwords'
 arch=('x86_64')
 url='https://github.com/besser82/libxcrypt/'
@@ -12,6 +12,7 @@
 depends=('glibc')
 makedepends=('git')
 provides=('libcrypt.so')
+install=libxcrypt.install
 validpgpkeys=('678CE3FEE430311596DB8C16F52E98007594C21D') # Björn 'besser82' Esser
 source=("git+https://github.com/besser82/libxcrypt.git#commit=${_commit}?signed")
 sha256sums=('SKIP')

Added: libxcrypt.install
===================================================================
--- libxcrypt.install	                        (rev 0)
+++ libxcrypt.install	2021-06-07 15:18:58 UTC (rev 417293)
@@ -0,0 +1,15 @@
+#!/bin/sh
+
+post_upgrade() {
+  # return if old package version greater 4.4.21...
+  (( $(vercmp $2 '4.4.21') > 0 )) && return
+
+  cat <<EOM
+ > Starting with 'libxcrypt' 4.4.21, weak password hashes (such as MD5 and SHA1)
+ > are no longer accepted for new passwords. Users that still have their
+ > passwords stored with a weak hash will be asked to update their password on
+ > their next login.
+ > If the login just fails (for example from display manager) switch to a
+ > virtual terminal ('Ctrl-Alt-F2') and log in there once.
+EOM
+}