[oe-commits] Paul Eggleton : shadow: change to use SHA512 password encryption
git at git.openembedded.org
git at git.openembedded.org
Fri Dec 13 14:49:19 UTC 2013
Module: openembedded-core.git
Branch: master
Commit: a9e072f9f0da774411e07abf47dd4bd8c6d685d7
URL: http://git.openembedded.org/?p=openembedded-core.git&a=commit;h=a9e072f9f0da774411e07abf47dd4bd8c6d685d7
Author: Paul Eggleton <paul.eggleton at linux.intel.com>
Date: Fri Dec 13 14:42:46 2013 +0000
shadow: change to use SHA512 password encryption
The default encryption method for shadow is DES, which limits passwords
to 8 characters. Not only is this undesirable, it's also not how busybox
works so we had different passwd/login length behaviour depending on
whether shadow was installed in the image or not. Change it to SHA512
which is what most Linux distributions seem to be using currently.
(SHA512 also matches up with how we are configuring PAM.)
Fixes [YOCTO #5656].
Signed-off-by: Paul Eggleton <paul.eggleton at linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
---
meta/recipes-extended/shadow/shadow.inc | 3 +++
1 file changed, 3 insertions(+)
diff --git a/meta/recipes-extended/shadow/shadow.inc b/meta/recipes-extended/shadow/shadow.inc
index 33ecc7d..048709e 100644
--- a/meta/recipes-extended/shadow/shadow.inc
+++ b/meta/recipes-extended/shadow/shadow.inc
@@ -109,6 +109,9 @@ do_install() {
# Disable checking emails.
sed -i 's/MAIL_CHECK_ENAB/#MAIL_CHECK_ENAB/g' ${D}${sysconfdir}/login.defs
+ # Use proper encryption for passwords
+ sed -i 's/^#ENCRYPT_METHOD.*$/ENCRYPT_METHOD SHA512/' ${D}${sysconfdir}/login.defs
+
# Now we don't have a mail system. Disable mail creation for now.
sed -i 's:/bin/bash:/bin/sh:g' ${D}${sysconfdir}/default/useradd
sed -i '/^CREATE_MAIL_SPOOL/ s:^:#:' ${D}${sysconfdir}/default/useradd
More information about the Openembedded-commits
mailing list