From a959c7070a3bf849bfebcb7aae06ce632e9defee18a082ab37a0f2c361dd5f6c Mon Sep 17 00:00:00 2001
From: "Marc S. Weidner" <msw@coresecret.dev>
Date: Tue, 21 Oct 2025 22:26:09 +0100
Subject: [PATCH] V8.13.256.2025.10.21

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
---
 config/includes.chroot/etc/login.defs | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/config/includes.chroot/etc/login.defs b/config/includes.chroot/etc/login.defs
index 6638346..e20f543 100644
--- a/config/includes.chroot/etc/login.defs
+++ b/config/includes.chroot/etc/login.defs
@@ -93,6 +93,7 @@ TTYPERM		0600
 #
 ERASECHAR	0177
 KILLCHAR	025
+UMASK 077
 
 # HOME_MODE is used by useradd(8) and newusers(8) to set the mode for new
 # home directories.
@@ -170,6 +171,8 @@ CHFN_RESTRICT		rwh
 # the PAM modules configuration.
 #
 ENCRYPT_METHOD YESCRYPT
+SHA_CRYPT_MIN_ROUNDS 8388608
+SHA_CRYPT_MAX_ROUNDS 8388608
 
 #
 # Should login be allowed if we can't cd to the home directory?