From b59b0687cc52655c4d294886cce6afb24f60727a Mon Sep 17 00:00:00 2001
From: Dustin Falgout <dustin@falgout.us>
Date: Tue, 20 Jun 2017 09:03:34 -0500
Subject: [PATCH] Fix weak salt provided to crypt.crypt() method which creates
 user account password hashes. Addresses #765

(cherry picked from commit 73fbe5ae08ec7975324ef03bf357bb75c563141a)
---
 cnchi/info.py                 | 2 +-
 cnchi/installation/install.py | 2 +-
 update.info                   | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/cnchi/info.py b/cnchi/info.py
index 5f2fe3261..bf4dbea6b 100755
--- a/cnchi/info.py
+++ b/cnchi/info.py
@@ -29,7 +29,7 @@
 
 """ Set some Cnchi global constants """
 
-CNCHI_VERSION = "0.14.286"
+CNCHI_VERSION = "0.14.287"
 CNCHI_WEBSITE = "http://www.antergos.com"
 CNCHI_RELEASE_STAGE = "production"
 
diff --git a/cnchi/installation/install.py b/cnchi/installation/install.py
index cb3afd961..af5288b0d 100644
--- a/cnchi/installation/install.py
+++ b/cnchi/installation/install.py
@@ -783,7 +783,7 @@ def enable_services(services):
     @staticmethod
     def change_user_password(user, new_password):
         """ Changes the user's password """
-        shadow_password = crypt.crypt(new_password, "$6${0}$".format(user))
+        shadow_password = crypt.crypt(new_password, crypt.mksalt())
         chroot_call(['usermod', '-p', shadow_password, user])
 
     @staticmethod
diff --git a/update.info b/update.info
index 91e51f0f0..520a0c51d 100644
--- a/update.info
+++ b/update.info
@@ -1,2 +1,2 @@
-{"version":"0.14.286","files":[
+{"version":"0.14.287","files":[
 ]}