* [Buildroot] [pull request v5] Pull request for branch yem-root-passwd
@ 2012-12-30 18:08 Yann E. MORIN
2012-12-30 18:08 ` [Buildroot] [PATCH 1/1] target: add different methods to encode passwords Yann E. MORIN
0 siblings, 1 reply; 6+ messages in thread
From: Yann E. MORIN @ 2012-12-30 18:08 UTC (permalink / raw)
To: buildroot
Hello Peter, All,
As requested, here's the re-spin of the second-part of the 'root-paswd'
series.
Note however these few changes since the previous iteration:
Changes v4 -> v5:
- drop patch #1, applied upstream (Peter)
- make the password-encoding scheme generic (ie. not root-speific)
- rebase on-top current master
The following changes since commit a45871bfc6a3f800548954dd364b5f53e81804ab:
target: add option to set the root password (2012-12-30 18:00:16 +0100)
are available in the git repository at:
git://gitorious.org/buildroot/buildroot.git yem-root-passwd
Yann E. MORIN (1):
target: add different methods to encode passwords
system/Config.in | 62 +++++++++++++++++++++++++++++++++++++++++++++++++----
system/system.mk | 3 +-
2 files changed, 59 insertions(+), 6 deletions(-)
Regards,
Yann E. MORIN
--
.-----------------.--------------------.------------------.--------------------.
| Yann E. MORIN | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software Designer | \ / CAMPAIGN | ___ |
| +33 223 225 172 `------------.-------: X AGAINST | \e/ There is no |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL | v conspiracy. |
'------------------------------^-------^------------------^--------------------'
^ permalink raw reply [flat|nested] 6+ messages in thread* [Buildroot] [PATCH 1/1] target: add different methods to encode passwords 2012-12-30 18:08 [Buildroot] [pull request v5] Pull request for branch yem-root-passwd Yann E. MORIN @ 2012-12-30 18:08 ` Yann E. MORIN 2013-01-02 23:21 ` Yann E. MORIN 2013-01-04 20:20 ` Gustavo Zacarias 0 siblings, 2 replies; 6+ messages in thread From: Yann E. MORIN @ 2012-12-30 18:08 UTC (permalink / raw) To: buildroot Passwords can be encoded in different ways (from the weakest to the strongest): des, md5, sha-256, sha-512 Add a choice entry to select the method, defaulting to 'md5'. Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> --- Previously, this was specific to encode the root password. I have made it generic (ie. not root-specific), in case buildroot needs to encode other passwords in the future (eg. when packages can create users, for which I've just sent an RFC) --- system/Config.in | 62 +++++++++++++++++++++++++++++++++++++++++++++++++---- system/system.mk | 3 +- 2 files changed, 59 insertions(+), 6 deletions(-) diff --git a/system/Config.in b/system/Config.in index f1c260a..0978be7 100644 --- a/system/Config.in +++ b/system/Config.in @@ -12,6 +12,60 @@ config BR2_TARGET_GENERIC_ISSUE help Select system banner (/etc/issue) to be displayed at login. +choice + bool "Passwords encoding" + default BR2_TARGET_GENERIC_PASSWD_MD5 + help + Choose the password encoding scheme to use when Buildroot + needs to encode a password (eg. the root password, below). + + Note: this is used at build-time, and *not* at runtime. + +config BR2_TARGET_GENERIC_PASSWD_DES + bool "des" + help + Use standard 56-bit DES-based crypt(3) to encode passwords. + + Old, wildly available, but also the weakest, very susceptible to + brute-force attacks. + +config BR2_TARGET_GENERIC_PASSWD_MD5 + bool "md5" + help + Use MD5 to encode passwords. + + The default. Wildly available, and pretty good. + Although pretty strong, MD5 is now an old hash function, and + suffers from some weaknesses, which makes it susceptible to + brute-force attacks. + +config BR2_TARGET_GENERIC_PASSWD_SHA256 + bool "sha-256" + help + Use SHA256 to encode passwords. + + Very strong, but not ubiquitous, although available in glibc + for some time now. Choose only if you are sure your C library + understands SHA256 passwords. + +config BR2_TARGET_GENERIC_PASSWD_SHA512 + bool "sha-512" + help + Use SHA512 to encode passwords. + + Extremely strong, but not ubiquitous, although available in glibc + for some time now. Choose only if you are sure your C library + understands SHA512 passwords. + +endchoice # Passwd encoding + +config BR2_TARGET_GENERIC_PASSWD_METHOD + string + default "des" if BR2_TARGET_GENERIC_PASSWD_DES + default "md5" if BR2_TARGET_GENERIC_PASSWD_MD5 + default "sha-256" if BR2_TARGET_GENERIC_PASSWD_SHA256 + default "sha-512" if BR2_TARGET_GENERIC_PASSWD_SHA512 + config BR2_TARGET_GENERIC_ROOT_PASSWD string "Root password" default "" @@ -22,11 +76,9 @@ config BR2_TARGET_GENERIC_ROOT_PASSWD and root will need no password to log in. WARNING! WARNING! - Although pretty strong, MD5 is now an old hash function, and - suffers from some weaknesses, which makes it susceptible to attacks. - It is showing its age, so this root password should not be trusted - to properly secure any product that can be shipped to the wide, - hostile world. + You should not trust this password to properly secure any product that + can be shipped to the wide, hostile world, depending on the type of + password encoding you choose above (especially if you choose md5 or des). WARNING! WARNING! The password appears in clear in the .config file, and may appear diff --git a/system/system.mk b/system/system.mk index 7536ce6..e964e46 100644 --- a/system/system.mk +++ b/system/system.mk @@ -1,8 +1,9 @@ TARGET_GENERIC_HOSTNAME:=$(call qstrip,$(BR2_TARGET_GENERIC_HOSTNAME)) TARGET_GENERIC_ISSUE:=$(call qstrip,$(BR2_TARGET_GENERIC_ISSUE)) TARGET_GENERIC_ROOT_PASSWD:=$(call qstrip,$(BR2_TARGET_GENERIC_ROOT_PASSWD)) +TARGET_GENERIC_PASSWD_METHOD:=$(call qstrip,$(BR2_TARGET_GENERIC_PASSWD_METHOD)) ifneq ($(TARGET_GENERIC_ROOT_PASSWD),) -TARGET_GENERIC_ROOT_PASSWD_HASH=$(shell mkpasswd -m md5 "$(TARGET_GENERIC_ROOT_PASSWD)") +TARGET_GENERIC_ROOT_PASSWD_HASH=$(shell mkpasswd -m "$(TARGET_GENERIC_PASSWD_METHOD)" "$(TARGET_GENERIC_ROOT_PASSWD)") endif TARGET_GENERIC_GETTY:=$(call qstrip,$(BR2_TARGET_GENERIC_GETTY_PORT)) TARGET_GENERIC_GETTY_BAUDRATE:=$(call qstrip,$(BR2_TARGET_GENERIC_GETTY_BAUDRATE)) -- 1.7.2.5 ^ permalink raw reply related [flat|nested] 6+ messages in thread
* [Buildroot] [PATCH 1/1] target: add different methods to encode passwords 2012-12-30 18:08 ` [Buildroot] [PATCH 1/1] target: add different methods to encode passwords Yann E. MORIN @ 2013-01-02 23:21 ` Yann E. MORIN 2013-01-04 20:20 ` Gustavo Zacarias 1 sibling, 0 replies; 6+ messages in thread From: Yann E. MORIN @ 2013-01-02 23:21 UTC (permalink / raw) To: buildroot Peter, All, On Sunday 30 December 2012 Yann E. MORIN wrote: > Passwords can be encoded in different ways (from the weakest > to the strongest): des, md5, sha-256, sha-512 > > Add a choice entry to select the method, defaulting to 'md5'. Ping? Regards, Yann E. MORIN. -- .-----------------.--------------------.------------------.--------------------. | Yann E. MORIN | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: | | +33 662 376 056 | Software Designer | \ / CAMPAIGN | ___ | | +33 223 225 172 `------------.-------: X AGAINST | \e/ There is no | | http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL | v conspiracy. | '------------------------------^-------^------------------^--------------------' ^ permalink raw reply [flat|nested] 6+ messages in thread
* [Buildroot] [PATCH 1/1] target: add different methods to encode passwords 2012-12-30 18:08 ` [Buildroot] [PATCH 1/1] target: add different methods to encode passwords Yann E. MORIN 2013-01-02 23:21 ` Yann E. MORIN @ 2013-01-04 20:20 ` Gustavo Zacarias 2013-01-04 20:31 ` Peter Korsgaard 1 sibling, 1 reply; 6+ messages in thread From: Gustavo Zacarias @ 2013-01-04 20:20 UTC (permalink / raw) To: buildroot On 12/30/2012 03:08 PM, Yann E. MORIN wrote: > Passwords can be encoded in different ways (from the weakest > to the strongest): des, md5, sha-256, sha-512 > > Add a choice entry to select the method, defaulting to 'md5'. > > Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Tested-by: Gustavo Zacarias <gustavo@zacarias.com.ar> However i'd like to see an option where the root password is untouched, probably as default. A slippy finger might get a bad surprise when upgrading to a new buildroot version and sees it's skeleton root password zapped away to nothing by surprise - an error that might take some time to get noticed and might even get shipped. Regards. ^ permalink raw reply [flat|nested] 6+ messages in thread
* [Buildroot] [PATCH 1/1] target: add different methods to encode passwords 2013-01-04 20:20 ` Gustavo Zacarias @ 2013-01-04 20:31 ` Peter Korsgaard 2013-01-05 10:48 ` Yann E. MORIN 0 siblings, 1 reply; 6+ messages in thread From: Peter Korsgaard @ 2013-01-04 20:31 UTC (permalink / raw) To: buildroot >>>>> "Gustavo" == Gustavo Zacarias <gustavo@zacarias.com.ar> writes: Gustavo> On 12/30/2012 03:08 PM, Yann E. MORIN wrote: >> Passwords can be encoded in different ways (from the weakest >> to the strongest): des, md5, sha-256, sha-512 >> >> Add a choice entry to select the method, defaulting to 'md5'. >> >> Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Gustavo> Tested-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Gustavo> However i'd like to see an option where the root password is untouched, Gustavo> probably as default. Gustavo> A slippy finger might get a bad surprise when upgrading to a Gustavo> new buildroot version and sees it's skeleton root password Gustavo> zapped away to nothing by surprise - an error that might take Gustavo> some time to get noticed and might even get shipped. Regards. Hmm, the root passwd stuff should only only be active if the default rootfs skeleton is used (so no passwd). I see that's not the case today, will fix. -- Bye, Peter Korsgaard ^ permalink raw reply [flat|nested] 6+ messages in thread
* [Buildroot] [PATCH 1/1] target: add different methods to encode passwords 2013-01-04 20:31 ` Peter Korsgaard @ 2013-01-05 10:48 ` Yann E. MORIN 0 siblings, 0 replies; 6+ messages in thread From: Yann E. MORIN @ 2013-01-05 10:48 UTC (permalink / raw) To: buildroot Peter, Gustavo, All, On Friday 04 January 2013 Peter Korsgaard wrote: > >>>>> "Gustavo" == Gustavo Zacarias <gustavo@zacarias.com.ar> writes: > Gustavo> On 12/30/2012 03:08 PM, Yann E. MORIN wrote: > >> Passwords can be encoded in different ways (from the weakest > >> to the strongest): des, md5, sha-256, sha-512 > >> > >> Add a choice entry to select the method, defaulting to 'md5'. > Gustavo> However i'd like to see an option where the root password is untouched, > Gustavo> probably as default. > > Gustavo> A slippy finger might get a bad surprise when upgrading to a > Gustavo> new buildroot version and sees it's skeleton root password > Gustavo> zapped away to nothing by surprise - an error that might take > Gustavo> some time to get noticed and might even get shipped. Regards. > > Hmm, the root passwd stuff should only only be active if the default > rootfs skeleton is used (so no passwd). I see that's not the case today, > will fix. OK, I'm on it. Regards, Yann E. MORIN. -- .-----------------.--------------------.------------------.--------------------. | Yann E. MORIN | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: | | +33 662 376 056 | Software Designer | \ / CAMPAIGN | ___ | | +33 223 225 172 `------------.-------: X AGAINST | \e/ There is no | | http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL | v conspiracy. | '------------------------------^-------^------------------^--------------------' ^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2013-01-05 10:48 UTC | newest] Thread overview: 6+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2012-12-30 18:08 [Buildroot] [pull request v5] Pull request for branch yem-root-passwd Yann E. MORIN 2012-12-30 18:08 ` [Buildroot] [PATCH 1/1] target: add different methods to encode passwords Yann E. MORIN 2013-01-02 23:21 ` Yann E. MORIN 2013-01-04 20:20 ` Gustavo Zacarias 2013-01-04 20:31 ` Peter Korsgaard 2013-01-05 10:48 ` Yann E. MORIN
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox