[Buildroot] [PATCHv2 proposal/next 2/3] build: replace host-mkpasswd with host-busybox
Thomas Petazzoni
thomas.petazzoni at bootlin.com
Mon Jun 18 06:53:30 UTC 2018
Hello,
On Mon, 18 Jun 2018 07:13:25 +0200, Peter Korsgaard wrote:
> >> Just to be clear: does everybody agree that it is a good idea to use
> >> weakly-random numbers as salt, rather than real random numbers like whois does?
>
> > Not really, no. That is definitely no good. I was not aware of how bad
> > the busybox salt generator was.. Sigh....
>
> If that is the only problem then we could still use it and pass our own
> salt, but that leaves the problem of coming up with a sufficiently
> random salt. I guess we could do something with reading /dev/urandom and
> base64 encoding it.
>
> But yeah, just going for the python implementation may be the easiest.
Once again, what is the problem with the current solution we have ?
We have been happy with it for several years, and the only thing that
prompted this discussion is that it failed to build on Fedora 28, which
was fixed by a 3 lines change. Is it really worth it changing this
stuff ?
Best regards,
Thomas
--
Thomas Petazzoni, CTO, Bootlin (formerly Free Electrons)
Embedded Linux and Kernel engineering
https://bootlin.com
More information about the buildroot
mailing list