From 39e618441981da3da173c9f717c7dc5977760c95 Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Wed, 4 Feb 2026 14:56:36 +0100 Subject: [PATCH] package/shadow: default to BR2_TARGET_GENERIC_PASSWD_ algo Make shadow follow the the BR2_TARGET_GENERIC_PASSWD_* system configuration option when changing password rather than DES. Fixes: https://gitlab.com/buildroot.org/buildroot/-/issues/134 Signed-off-by: Peter Korsgaard Signed-off-by: Julien Olivain --- package/shadow/shadow.mk | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/package/shadow/shadow.mk b/package/shadow/shadow.mk index 2ba7a0e03e..cf05fc1bdc 100644 --- a/package/shadow/shadow.mk +++ b/package/shadow/shadow.mk @@ -140,4 +140,19 @@ define SHADOW_PERMISSIONS $(SHADOW_SUBORDINATE_IDS_PERMISSIONS) endef +ifeq ($(BR2_TARGET_GENERIC_PASSWD_SHA256),y) +SHADOW_ENCRYPT_METHOD = SHA256 +else ifeq ($(BR2_TARGET_GENERIC_PASSWD_SHA512),y) +SHADOW_ENCRYPT_METHOD = SHA512 +endif + +ifneq ($(SHADOW_ENCRYPT_METHOD),) +define SHADOW_SET_ENCRYPT_METHOD + $(SED) 's/^[#]\?ENCRYPT_METHOD .*/ENCRYPT_METHOD $(SHADOW_ENCRYPT_METHOD)/' \ + $(TARGET_DIR)/etc/login.defs +endef + +SHADOW_POST_INSTALL_TARGET_HOOKS += SHADOW_SET_ENCRYPT_METHOD +endif + $(eval $(autotools-package))