From mboxrd@z Thu Jan 1 00:00:00 1970
Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org)
by nuthatch.gentoo.org with esmtp (Exim 4.60)
(envelope-from <gentoo-embedded+bounces-877-garchives=archives.gentoo.org@gentoo.org>)
id 1FnGOw-0005ux-Gc
for garchives@archives.gentoo.org; Mon, 05 Jun 2006 14:49:54 +0000
Received: from robin.gentoo.org (localhost [127.0.0.1])
by robin.gentoo.org (8.13.6/8.13.6) with SMTP id k55En1iG007703;
Mon, 5 Jun 2006 14:49:01 GMT
Received: from mail45.e.nsc.no (mail45.e.nsc.no [193.213.115.45])
by robin.gentoo.org (8.13.6/8.13.6) with ESMTP id k55En1nI024139
for <gentoo-embedded@lists.gentoo.org>; Mon, 5 Jun 2006 14:49:01 GMT
Received: from mail.nor.wtbts.org ([213.234.126.131])
by mail45.nsc.no (8.13.6/8.13.5) with ESMTP id k55En0Ol012366
for <gentoo-embedded@lists.gentoo.org>; Mon, 5 Jun 2006 16:49:01 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by mail.nor.wtbts.org (Postfix) with ESMTP id 313A83FA03
for <gentoo-embedded@lists.gentoo.org>; Mon, 5 Jun 2006 16:49:00 +0200 (CEST)
Received: from mail.nor.wtbts.org ([127.0.0.1])
by localhost (mail [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
id 20248-09 for <gentoo-embedded@lists.gentoo.org>;
Mon, 5 Jun 2006 16:48:58 +0200 (CEST)
Received: from nc.nor.wtbts.org (unknown [192.168.65.211])
by mail.nor.wtbts.org (Postfix) with ESMTP id D49363FADA
for <gentoo-embedded@lists.gentoo.org>; Mon, 5 Jun 2006 16:48:58 +0200 (CEST)
Subject: Re: [gentoo-embedded] script that changes password for busybox
From: Natanael Copa <natanael.copa@gmail.com>
To: gentoo-embedded@lists.gentoo.org
In-Reply-To: <1149517732.32083.3.camel@onyx>
References: <1149445959.15475.12.camel@localhost>
<1149517732.32083.3.camel@onyx>
Content-Type: text/plain
Date: Mon, 05 Jun 2006 16:45:44 +0200
Message-Id: <1149518744.20770.7.camel@localhost>
Precedence: bulk
List-Post: <mailto:gentoo-embedded@lists.gentoo.org>
List-Help: <mailto:gentoo-embedded+help@gentoo.org>
List-Unsubscribe: <mailto:gentoo-embedded+unsubscribe@gentoo.org>
List-Subscribe: <mailto:gentoo-embedded+subscribe@gentoo.org>
List-Id: Gentoo Linux mail <gentoo-embedded.gentoo.org>
X-BeenThere: gentoo-embedded@gentoo.org
Reply-to: gentoo-embedded@lists.gentoo.org
Mime-Version: 1.0
X-Mailer: Evolution 2.6.1
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at wtbts.no
X-Archives-Salt: 07204fc5-5927-4c61-9016-a95b9eea9974
X-Archives-Hash: 1822ff47bf61d7699fe73575c06b6e71
On Mon, 2006-06-05 at 10:28 -0400, Ned Ludd wrote:
> On Sun, 2006-06-04 at 20:32 +0200, Natanael Copa wrote:
> > Hi!
> >
> > I'm trying to port a LEAF bering based project to gentoo-embedded. There
> > is a web based UI (using haserl.sourceforge.net) to change password. The
> > code to change the root password looks something like this:
> >
> > newrootpw=$(crypt sN "$root1")
> > awk '
> > BEGIN{
> > FS=":";
> > OFS=":";
> > }
> > /^root:/{
> > $2="'"$newrootpw"'";
> > }
> > {print;}
> > ' /etc/shadow > /tmp/shadow
> >
> > mv /tmp/shadow /etc/shadow
>
>
> Despite all of the security problems with the above I think
> a ~20 line custom c program for this would be ideal.
I was hoping for a solution without any coding, but yes, I'll probably
end up with a custom c program. (I think somebody already did actually -
just to get going)
about the security problems, any suggestion how to change passwords
securely from web interface? (https)
--
Natanael Copa
--
gentoo-embedded@gentoo.org mailing list