From patchwork Fri Dec 28 21:20:52 2012 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Yann E. MORIN" X-Patchwork-Id: 208594 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from silver.osuosl.org (silver.osuosl.org [140.211.166.136]) by ozlabs.org (Postfix) with ESMTP id 68FA82C00D8 for ; Sat, 29 Dec 2012 08:21:07 +1100 (EST) Received: from localhost (localhost [127.0.0.1]) by silver.osuosl.org (Postfix) with ESMTP id 15EC630149; Fri, 28 Dec 2012 21:21:06 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from silver.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JDcp3-vBQVVN; Fri, 28 Dec 2012 21:21:04 +0000 (UTC) Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by silver.osuosl.org (Postfix) with ESMTP id 9916830076; Fri, 28 Dec 2012 21:21:04 +0000 (UTC) X-Original-To: buildroot@lists.busybox.net Delivered-To: buildroot@osuosl.org Received: from whitealder.osuosl.org (whitealder.osuosl.org [140.211.166.138]) by ash.osuosl.org (Postfix) with ESMTP id DECFF8F74B for ; Fri, 28 Dec 2012 21:21:08 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by whitealder.osuosl.org (Postfix) with ESMTP id 0ECF6843AC for ; Fri, 28 Dec 2012 21:21:03 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from whitealder.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bR4RKCai-qys for ; Fri, 28 Dec 2012 21:21:02 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from mail-wi0-f196.google.com (mail-wi0-f196.google.com [209.85.212.196]) by whitealder.osuosl.org (Postfix) with ESMTPS id DDB3280BF5 for ; Fri, 28 Dec 2012 21:21:01 +0000 (UTC) Received: by mail-wi0-f196.google.com with SMTP id c10so4056395wiw.3 for ; Fri, 28 Dec 2012 13:21:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:sender:from:to:cc:subject:date:message-id:x-mailer; bh=S5ik2kTF0rhFXJX4152bFYI4mYRMSTmm9w1AJkAwORU=; b=L0g2UTf5ahLmWssCI4C7XqfSnHuGouE30HSjO8Uc9xrDah/fCV6OLwD0lKZDNUBJq7 gB6AA+fF5Sc4V0MnjBgnUmGMUG53xbdK2nisTFM+fDs5e2q4Msv58GDYgVtnlBX2fPt7 aWB/iz2XGfVZLA8Pi39A/0AsU8x3ddp1wY9Z8papKuL1nFQs1rOOfkyrT5QHZn2nR5zq JeJZGHuMgl4M5uDQd0r1cLDHstoKV2TVVDK2PIpM9ksMb81Douzj4imOF5If4yFxvgRt JghZ5FzNdtctzjM7fCp/ENaVbke7wx4C9b/oUn18e+0xgxqv06U8j/S//BBXWDlhaiWd vOrQ== X-Received: by 10.180.109.195 with SMTP id hu3mr46055759wib.31.1356729660153; Fri, 28 Dec 2012 13:21:00 -0800 (PST) Received: from localhost.localdomain (ARennes-256-1-131-98.w90-32.abo.wanadoo.fr. [90.32.242.98]) by mx.google.com with ESMTPS id s10sm56583663wiw.4.2012.12.28.13.20.58 (version=TLSv1/SSLv3 cipher=OTHER); Fri, 28 Dec 2012 13:20:59 -0800 (PST) From: "Yann E. MORIN" To: buildroot@busybox.net Date: Fri, 28 Dec 2012 22:20:52 +0100 Message-Id: X-Mailer: git-send-email 1.7.2.5 Cc: "Yann E. MORIN" Subject: [Buildroot] [pull request v3] Pull request for branch yem-root-passwd X-BeenThere: buildroot@busybox.net X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussion and development of buildroot List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Errors-To: buildroot-bounces@busybox.net Sender: buildroot-bounces@busybox.net Hello All! This is iteration #3 for setting the root password from the configuration menu: - first patch adds the basic functionality: - plain text password in menuconfig - MD5-encrypted in /etc/shadow - second patch adds additional encryption methods There has been previous review of this series by Arnout, who suggested dropping patch #2, and only use an MD5-encrypted password. Since MD5 is now considered to be a weak hash, stronger alternatives may be usefull for the security-conscious lurking among us. That's why I kept (resurrected) that second patch. Arnout also objected to having the root password in clear in the .config, and recommended that the user enters the already-encrypted password. That has, IMHO, a few drawbacks, in that it requires the user actually _reads_ the help text, switch to an alternate terminal, generates a password, and copy-pastes it back in the initial terminal with the menuconfig. OTOH, if the user forgets his/her password, he/she can recover it by looking at the .config file. That's why I still advocates for entering a clear-text password in the menuconfig. Any more comments are welcome! The following changes since commit 4848386446b937d4d0d9d3e9489932ca3fcb1003: libffi: fix mips build failures (2012-12-28 16:55:09 +0100) are available in the git repository at: git://gitorious.org/buildroot/buildroot.git yem-root-passwd Yann E. MORIN (2): target: add option to set the root password target: add different methods to encode the root password support/dependencies/dependencies.sh | 9 +++++ system/Config.in | 67 ++++++++++++++++++++++++++++++++++ system/system.mk | 15 ++++++++ 3 files changed, 91 insertions(+), 0 deletions(-) Regards, Yann E. MORIN