Hello all, Below you'll find a list of all the changes I have made so far in the process of producing an updated version of Eigerstein2BETA. Feedback is of course appreciated. I also wonder if it's possible to compile tinylogin with md5 passwords (good idea anyway) and without linking with libcrypt. That would make it possible to go without libcrypt. A diff is attached, but as I'm not a c programmer it would be nice if someone could verify it it should work. Updated etc.lrp and root.lrp packages can be found here: http://leaf.sourceforge.net/devel/ewaldw/Eigerstein2BETA/20010422/ These are alpha quality. My test system boots with these with a few complaints from mount. These are my changes: 21-4 updated ash to version 0.3.7 21-4 updated busybox to version 0.51 removed /bin/star and /bin/untar from /var/lib/lrpkg/root.bb.links because these don't work anymore TODO: move more commands to busybox TODO: throw out ctar, we'll probably need to adjust some scripts. everyone agrees? 21-4 some minor tweaks of linuxrc to make it work with the new busybox replace untar with "busybox tar -x" replace gunzip with zcat 21-4 minor tweak to /etc/init.d/network line 86: added \ as new ash expects "&&" on the same line as the preceding command 22-4 Updated tinylogin to version 0.80 TODO: move more commands to tinylogin, e.g. /sbin/getty TODO: use md5 passwords and see if it's possible to compile tinylogin without libcrypt, so that we can throw out libcrypt (this seems to work, but I'm not a c programmer; can someone verify this?) 22-4 Updated glibc libraries in /lib to the latest debian slink version, with the exception of libcrypt which is sooo much bigger 22-4 removed /lib/libnss_db* ; these are not used 22-4 updated syslogd and klogd to the latest debian slink version 22-4 updated icmpinfo,rdate,traceroute to latest debian slink version 22-4 recompiled latest cron from debian-potato with glibc-2.0.7 and without pam 22-4 recompiled latest iproute from debian woody with glibc-2.0.7 22-4 TODO: move ae and libncurses to seperate packages 22-4 add e3 (the pre 1.5 from oxygen) as the default editor 22-4 TODO: update all binaries to the _latest_ versions available? Is this a good idea? That will probably use some additional diskspace Greetings, Ewald Wasscher
diff -rc tinylogin-0.80/Config.h tinylogin-md5-0.80/Config.h *** tinylogin-0.80/Config.h Tue Dec 26 22:46:28 2000 --- tinylogin-md5-0.80/Config.h Sun Apr 22 11:02:00 2001 *************** *** 3,17 **** * IE //#define TLG_BLAH */ ! #define TLG_ADDUSER ! #define TLG_ADDGROUP ! #define TLG_DELUSER ! #define TLG_DELGROUP #define TLG_LOGIN #define TLG_SU ! //#define TLG_SULOGIN #define TLG_PASSWD ! #define TLG_GETTY //#define TLG_VLOCK // // --- 3,17 ---- * IE //#define TLG_BLAH */ ! //#define TLG_ADDUSER ! //#define TLG_ADDGROUP ! //#define TLG_DELUSER ! //#define TLG_DELGROUP #define TLG_LOGIN #define TLG_SU ! #define TLG_SULOGIN #define TLG_PASSWD ! //#define TLG_GETTY //#define TLG_VLOCK // // *************** *** 28,34 **** #define TLG_FEATURE_SECURETTY // // Enable using md5 passwords ! //#define TLG_FEATURE_MD5_PASSWORDS // // Enable using sha passwords //#define TLG_FEATURE_SHA1_PASSWORDS --- 28,34 ---- #define TLG_FEATURE_SECURETTY // // Enable using md5 passwords ! #define TLG_FEATURE_MD5_PASSWORDS // // Enable using sha passwords //#define TLG_FEATURE_SHA1_PASSWORDS diff -rc tinylogin-0.80/Makefile tinylogin-md5-0.80/Makefile *** tinylogin-0.80/Makefile Tue Dec 26 22:24:55 2000 --- tinylogin-md5-0.80/Makefile Sun Apr 22 11:04:52 2001 *************** *** 37,46 **** # I will get fewer emails asking about how glibc NSS works. Enabling this adds # just 1.5k to the binary size (which is a _lot_ less then glibc NSS costs), # Most people will want to leave this set to false. ! USE_SYSTEM_PWD_GRP = false # GNU libc needs libcrypt, but libc5 wants it compiled out... ! LIBRARIES = -lcrypt # If you are running a cross compiler, you may want to set this # to something more interesting... --- 37,46 ---- # I will get fewer emails asking about how glibc NSS works. Enabling this adds # just 1.5k to the binary size (which is a _lot_ less then glibc NSS costs), # Most people will want to leave this set to false. ! USE_SYSTEM_PWD_GRP = true # GNU libc needs libcrypt, but libc5 wants it compiled out... ! #LIBRARIES = -lcrypt # If you are running a cross compiler, you may want to set this # to something more interesting... diff -rc tinylogin-0.80/utility.c tinylogin-md5-0.80/utility.c *** tinylogin-0.80/utility.c Wed Dec 20 22:27:59 2000 --- tinylogin-md5-0.80/utility.c Sun Apr 22 11:12:44 2001 *************** *** 118,132 **** return sha1_crypt(clear); } #endif ! cp = (char *) crypt(clear, salt); /* if crypt (a nonstandard crypt) returns a string too large, truncate it so we don't overrun buffers and hope there is enough security in what's left */ ! if (strlen(cp) > CRYPT_EP_SIZE) { cp[CRYPT_EP_SIZE + 1] = 0; } strcpy(cipher, cp); ! return cipher; } #endif --- 118,132 ---- return sha1_crypt(clear); } #endif ! /* cp = (char *) crypt(clear, salt); */ /* if crypt (a nonstandard crypt) returns a string too large, truncate it so we don't overrun buffers and hope there is enough security in what's left */ ! /* if (strlen(cp) > CRYPT_EP_SIZE) { cp[CRYPT_EP_SIZE + 1] = 0; } strcpy(cipher, cp); ! return cipher; */ } #endif