V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

includes/target/etc/login.defs

@@ -82,6 +82,7 @@ TTYPERM		0600
 #
 ERASECHAR	0177
 KILLCHAR	025
+UMASK 0077
 
 # HOME_MODE is used by useradd(8) and newusers(8) to set the mode for new
 # home directories.
@@ -95,7 +96,7 @@ HOME_MODE	0700
 #	PASS_WARN_AGE	Number of days warning given before a password expires.
 #
 PASS_MAX_DAYS	16384
-PASS_MIN_DAYS	0
+PASS_MIN_DAYS	1
 PASS_WARN_AGE	128
 
 #
@@ -159,6 +160,8 @@ CHFN_RESTRICT		rwh
 # the PAM modules configuration.
 #
 ENCRYPT_METHOD YESCRYPT
+SHA_CRYPT_MIN_ROUNDS 8388608
+SHA_CRYPT_MAX_ROUNDS 8388608
 
 #
 # Should login be allowed if we can't cd to the home directory?

includes/target/root/.zshenv

@@ -13,6 +13,7 @@
 : "${XDG_CACHE_HOME:=${HOME}/.cache}"
 : "${XDG_DATA_HOME:=${HOME}/.local/share}"
 : "${XDG_STATE_HOME:=${HOME}/.local/state}"
+
 # Do NOT set XDG_RUNTIME_DIR here.
 
 export XDG_CONFIG_HOME XDG_CACHE_HOME XDG_DATA_HOME XDG_STATE_HOME