menuconfig BR2_PACKAGE_SHADOW
	bool "shadow"
	depends on !BR2_STATIC_LIBS
	depends on BR2_TOOLCHAIN_HEADERS_AT_LEAST_4_14
	depends on !BR2_TOOLCHAIN_USES_UCLIBC # reallocarray, explicit_bzero
	help
	  Utilities to deal with user accounts.

	  https://github.com/shadow-maint/shadow

if BR2_PACKAGE_SHADOW

config BR2_PACKAGE_SHADOW_SHADOWGRP
	bool "shadowgrp"
	help
	  Enable shadow group support.

config BR2_PACKAGE_SHADOW_ACCOUNT_TOOLS_SETUID
	bool "account-tools-setuid"
	depends on BR2_USE_MMU  # linux-pam
	depends on BR2_ENABLE_LOCALE  # linux-pam
	depends on BR2_USE_WCHAR  # linux-pam
	depends on !BR2_STATIC_LIBS  # linux-pam
	depends on BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 # linux-pam
	select BR2_PACKAGE_LINUX_PAM
	help
	  Install the user and group management tools (e.g. groupadd)
	  with setuid and authenticate the callers via PAM.

comment "account-tools-setuid needs a toolchain w/ dynamic library, wchar, locale, gcc >= 4.9"
	depends on BR2_USE_MMU
	depends on BR2_STATIC_LIBS || !BR2_USE_WCHAR || \
		!BR2_ENABLE_LOCALE || !BR2_TOOLCHAIN_GCC_AT_LEAST_4_9

config BR2_PACKAGE_SHADOW_SUBORDINATE_IDS
	bool "subordinate-ids"
	help
	  Support subordinate ids. Helpful to use container solution
	  like podman without root.

config BR2_PACKAGE_SHADOW_SHA_CRYPT
	bool "sha-crypt"
	default y
	help
	  Allow the SHA256 and SHA512 password encryption algorithms.

config BR2_PACKAGE_SHADOW_BCRYPT
	bool "bcrypt"
	help
	  Allow the bcrypt password encryption algorithm.

config BR2_PACKAGE_SHADOW_YESCRYPT
	bool "yescrypt"
	help
	  Allow the yescrypt password encryption algorithm.

endif # BR2_PACKAGE_SHADOW

comment "shadow needs a glibc or musl toolchain w/ headers >= 4.14, dynamic library"
	depends on !BR2_TOOLCHAIN_HEADERS_AT_LEAST_4_14 || \
		BR2_STATIC_LIBS || BR2_TOOLCHAIN_USES_UCLIBC