act-user: Use stronger hashing methods in make_crypted() if available.
Most Linux distributions, including Fedora and RHEL 8, are shipping with libxcrypt >= 4.0.
Since that version of libxcrypt the provided family of crypt_gensalt()
functions are able to use automatic entropy drawn from secure system ressources, like arc4random()
, getentropy()
or getrandom()
. Those functions can also be used to select the strongenst hash method available in libxcrypt as a default.
Anyways, the settings generated by crypt_gensalt()
are always guaranteed to work with the crypt()
function.
Signed-off-by: Björn Esser besser82@fedoraproject.org
Edited by Björn Esser