From 628ce14af45efee04e2cc2be702cd03d284418f2 Mon Sep 17 00:00:00 2001 From: chewitt Date: Fri, 8 Dec 2017 06:53:41 +0000 Subject: [PATCH] busybox: prevent weak root passwords --- .../patches/busybox-06-prevent-root-weak-passwd.patch | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 packages/sysutils/busybox/patches/busybox-06-prevent-root-weak-passwd.patch diff --git a/packages/sysutils/busybox/patches/busybox-06-prevent-root-weak-passwd.patch b/packages/sysutils/busybox/patches/busybox-06-prevent-root-weak-passwd.patch new file mode 100644 index 0000000000..932848bfbb --- /dev/null +++ b/packages/sysutils/busybox/patches/busybox-06-prevent-root-weak-passwd.patch @@ -0,0 +1,10 @@ +--- a/loginutils/passwd.c ++++ b/loginutils/passwd.c +@@ -72,7 +72,6 @@ static char* new_password(const struct p + newp = xstrdup(newp); /* we are going to bb_ask_stdin() again, so save it */ + if (ENABLE_FEATURE_PASSWD_WEAK_CHECK + && obscure(orig, newp, pw) +- && myuid != 0 + ) { + goto err_ret; /* non-root is not allowed to have weak passwd */ + }