From 9e7841ccd25ccc706b5164dfc7a6dc6329ec2f4a Mon Sep 17 00:00:00 2001 From: Wolfgang Woehl Date: Mon, 20 Oct 2025 16:55:27 +0200 Subject: [PATCH] Harden ingest of user-provided passphrase --- configs/airootfs/root/configurator | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configs/airootfs/root/configurator b/configs/airootfs/root/configurator index db25537..80269cf 100644 --- a/configs/airootfs/root/configurator +++ b/configs/airootfs/root/configurator @@ -121,7 +121,7 @@ user_form() { done # Hash the password using yescrypt - password_hash=$(openssl passwd -6 "$password") + password_hash=$(openssl passwd -6 pass:"$password") full_name=$(gum input --placeholder "Used for git authentication (hit return to skip)" --prompt.foreground="#845DF9" --prompt "Full name> ") email_address=$(gum input --placeholder "Used for git authentication (hit return to skip)" --prompt.foreground="#845DF9" --prompt "Email address> ")