From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1FnGOw-0005ux-Gc for garchives@archives.gentoo.org; Mon, 05 Jun 2006 14:49:54 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.6/8.13.6) with SMTP id k55En1iG007703; Mon, 5 Jun 2006 14:49:01 GMT Received: from mail45.e.nsc.no (mail45.e.nsc.no [193.213.115.45]) by robin.gentoo.org (8.13.6/8.13.6) with ESMTP id k55En1nI024139 for ; Mon, 5 Jun 2006 14:49:01 GMT Received: from mail.nor.wtbts.org ([213.234.126.131]) by mail45.nsc.no (8.13.6/8.13.5) with ESMTP id k55En0Ol012366 for ; Mon, 5 Jun 2006 16:49:01 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by mail.nor.wtbts.org (Postfix) with ESMTP id 313A83FA03 for ; Mon, 5 Jun 2006 16:49:00 +0200 (CEST) Received: from mail.nor.wtbts.org ([127.0.0.1]) by localhost (mail [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 20248-09 for ; Mon, 5 Jun 2006 16:48:58 +0200 (CEST) Received: from nc.nor.wtbts.org (unknown [192.168.65.211]) by mail.nor.wtbts.org (Postfix) with ESMTP id D49363FADA for ; Mon, 5 Jun 2006 16:48:58 +0200 (CEST) Subject: Re: [gentoo-embedded] script that changes password for busybox From: Natanael Copa To: gentoo-embedded@lists.gentoo.org In-Reply-To: <1149517732.32083.3.camel@onyx> References: <1149445959.15475.12.camel@localhost> <1149517732.32083.3.camel@onyx> Content-Type: text/plain Date: Mon, 05 Jun 2006 16:45:44 +0200 Message-Id: <1149518744.20770.7.camel@localhost> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-embedded@gentoo.org Reply-to: gentoo-embedded@lists.gentoo.org Mime-Version: 1.0 X-Mailer: Evolution 2.6.1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at wtbts.no X-Archives-Salt: 07204fc5-5927-4c61-9016-a95b9eea9974 X-Archives-Hash: 1822ff47bf61d7699fe73575c06b6e71 On Mon, 2006-06-05 at 10:28 -0400, Ned Ludd wrote: > On Sun, 2006-06-04 at 20:32 +0200, Natanael Copa wrote: > > Hi! > > > > I'm trying to port a LEAF bering based project to gentoo-embedded. There > > is a web based UI (using haserl.sourceforge.net) to change password. The > > code to change the root password looks something like this: > > > > newrootpw=$(crypt sN "$root1") > > awk ' > > BEGIN{ > > FS=":"; > > OFS=":"; > > } > > /^root:/{ > > $2="'"$newrootpw"'"; > > } > > {print;} > > ' /etc/shadow > /tmp/shadow > > > > mv /tmp/shadow /etc/shadow > > > Despite all of the security problems with the above I think > a ~20 line custom c program for this would be ideal. I was hoping for a solution without any coding, but yes, I'll probably end up with a custom c program. (I think somebody already did actually - just to get going) about the security problems, any suggestion how to change passwords securely from web interface? (https) -- Natanael Copa -- gentoo-embedded@gentoo.org mailing list