From patchwork Sat Dec 29 00:07:32 2012 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Yann E. MORIN" X-Patchwork-Id: 208606 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from hemlock.osuosl.org (hemlock.osuosl.org [140.211.166.133]) by ozlabs.org (Postfix) with ESMTP id 9042F2C00F4 for ; Sat, 29 Dec 2012 11:07:50 +1100 (EST) Received: from localhost (localhost [127.0.0.1]) by hemlock.osuosl.org (Postfix) with ESMTP id 005E1A0141; Sat, 29 Dec 2012 00:07:49 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from hemlock.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IQ4pv3fizm26; Sat, 29 Dec 2012 00:07:45 +0000 (UTC) Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by hemlock.osuosl.org (Postfix) with ESMTP id 56A8DA0054; Sat, 29 Dec 2012 00:07:45 +0000 (UTC) X-Original-To: buildroot@lists.busybox.net Delivered-To: buildroot@osuosl.org Received: from whitealder.osuosl.org (whitealder.osuosl.org [140.211.166.138]) by ash.osuosl.org (Postfix) with ESMTP id 7D71A8F74B for ; Sat, 29 Dec 2012 00:07:49 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by whitealder.osuosl.org (Postfix) with ESMTP id A817280040 for ; Sat, 29 Dec 2012 00:07:43 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from whitealder.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0CpHZQAerY0z for ; Sat, 29 Dec 2012 00:07:42 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from mail-wg0-f44.google.com (mail-wg0-f44.google.com [74.125.82.44]) by whitealder.osuosl.org (Postfix) with ESMTPS id 5BA1C80011 for ; Sat, 29 Dec 2012 00:07:42 +0000 (UTC) Received: by mail-wg0-f44.google.com with SMTP id dr12so4861208wgb.11 for ; Fri, 28 Dec 2012 16:07:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:sender:from:to:cc:subject:date:message-id:x-mailer; bh=3/7NiUXiI7+1BY51KDkb2u7Zj4lFUdwK0mekXWCQNT4=; b=KrDTMlimdQaJfTvJQyi81TNF6gaNxmpENRYl2tT3gRhpHfeNrtE5ceAaUPeLWnk/dz AGC/vDANhDrgBZ8dSEEQWawsR/HisTmxRrQvUUdPJGswvM6fKisqNrJAn+KCU3q/r6Z6 THCa7QTEMI83GNZIojfbY2UglKivFiwko25PbXH3+wiweJ7dOhANj8i+Cv4RZR+vvQE5 nwxzWGecjHEMu1yUS97Q201wp1qWH3GiEK6uANjvJwRM/SAIv4ShACngaoxjGbnXIJnO 7Ky0ZkuR0fWchzXiI7UTtAKSqqNCCOTFplofJL4DxZu6JuqtBJHgbEPV6GoxsDFETMeO ClUw== X-Received: by 10.180.93.3 with SMTP id cq3mr54491879wib.1.1356739660574; Fri, 28 Dec 2012 16:07:40 -0800 (PST) Received: from localhost.localdomain (ARennes-256-1-131-98.w90-32.abo.wanadoo.fr. [90.32.242.98]) by mx.google.com with ESMTPS id bd7sm57218462wib.8.2012.12.28.16.07.38 (version=TLSv1/SSLv3 cipher=OTHER); Fri, 28 Dec 2012 16:07:39 -0800 (PST) From: "Yann E. MORIN" To: buildroot@busybox.net Date: Sat, 29 Dec 2012 01:07:32 +0100 Message-Id: X-Mailer: git-send-email 1.7.2.5 Cc: "Yann E. MORIN" Subject: [Buildroot] [pull request v4] Pull request for branch yem-root-passwd X-BeenThere: buildroot@busybox.net X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussion and development of buildroot List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Errors-To: buildroot-bounces@busybox.net Sender: buildroot-bounces@busybox.net Hello All! This is iteration #4 for setting the root password from the configuration menu: - first patch adds the basic functionality: - plain text password in menuconfig - MD5-encrypted in /etc/shadow - second patch adds additional encryption methods There has been previous review of this series by Arnout, who suggested dropping patch #2, and only use an MD5-encrypted password. Since MD5 is now considered to be a weak hash, stronger alternatives may be usefull for the security-conscious lurking among us. That's why I kept (resurrected) that second patch. Arnout also objected to having the root password in clear in the .config, and recommended that the user enters the already-encrypted password. That has, IMHO, a few drawbacks, in that it requires the user actually reads the help text, switch to an alternate terminal, generates a password, and copy-pastes it back in the initial terminal with the menuconfig. OTOH, if the user forgets his/her password, he/she can recover it by looking at the .config file. That's why I still advocates for entering a clear-text password in the menuconfig. Any more comments are welcome! Changes v3 -> v4: - fix the test for dependencies (Thomas) The following changes since commit 14989d0be59762a354e7c5c15a2eeb4826d8040b: package/tvheadend: new package (2012-12-28 23:40:26 +0100) are available in the git repository at: git://gitorious.org/buildroot/buildroot.git yem-root-passwd Yann E. MORIN (2): target: add option to set the root password target: add different methods to encode the root password support/dependencies/dependencies.sh | 9 +++++ system/Config.in | 67 ++++++++++++++++++++++++++++++++++ system/system.mk | 15 ++++++++ 3 files changed, 91 insertions(+), 0 deletions(-) Regards, Yann E. MORIN