Re: [Toybox] su patch

2015-02-03 Thread Isaac Dunham
On Sun, Feb 01, 2015 at 11:19:52PM -0500, Rich Felker wrote: > md5 is not better and probably worse than des. You should be using Looking over phk's comments on retiring md5crypt (http://phk.freebsd.dk/sagas/md5crypt_eol.html), I note that he says: New research has shown that it can be run at a

Re: [Toybox] su patch

2015-02-02 Thread Rich Felker
On Tue, Feb 03, 2015 at 12:14:54AM -0600, Rob Landley wrote: > >> A) I was just going to use the encryption the first entry (presumably > >> root) had, given a choice. (Although again, if the android mechanism > >> doesn't let you get a user list... presumably they still have uid 0 > >> though.) >

Re: [Toybox] su patch

2015-02-02 Thread Rob Landley
On 02/02/2015 02:03 PM, Rich Felker wrote: > On Sun, Feb 01, 2015 at 11:59:45PM -0600, Rob Landley wrote: >> >> >> On 02/01/2015 10:19 PM, Rich Felker wrote: >>> On Mon, Feb 02, 2015 at 10:33:24AM +0900, 김혜진 wrote: Hello. I share a patch of su command. >> ... >>> md5 is not better and probably

Re: [Toybox] su patch

2015-02-02 Thread 김혜진
2015-02-02 13:19 GMT+09:00 Rich Felker : > On Mon, Feb 02, 2015 at 10:33:24AM +0900, 김혜진 wrote: > > Hello. I share a patch of su command. > > > > > > -- Forwarded message -- > > From: 김혜진 > > Date: 2015-01-29 21:35 GMT+09:00 > > Subject: Re: su patch > > To: Rob Landley > > > > >

Re: [Toybox] su patch

2015-02-02 Thread Rich Felker
On Sun, Feb 01, 2015 at 11:59:45PM -0600, Rob Landley wrote: > > > On 02/01/2015 10:19 PM, Rich Felker wrote: > > On Mon, Feb 02, 2015 at 10:33:24AM +0900, 김혜진 wrote: > >> Hello. I share a patch of su command. > ... > > md5 is not better and probably worse than des. You should be using > > bcrypt

Re: [Toybox] su patch

2015-02-01 Thread enh
On Sun, Feb 1, 2015 at 9:59 PM, Rob Landley wrote: > > > On 02/01/2015 10:19 PM, Rich Felker wrote: >> On Mon, Feb 02, 2015 at 10:33:24AM +0900, 김혜진 wrote: >>> Hello. I share a patch of su command. > ... >> md5 is not better and probably worse than des. You should be using >> bcrypt if the system

Re: [Toybox] su patch

2015-02-01 Thread Rob Landley
On 02/01/2015 10:19 PM, Rich Felker wrote: > On Mon, Feb 02, 2015 at 10:33:24AM +0900, 김혜진 wrote: >> Hello. I share a patch of su command. ... > md5 is not better and probably worse than des. You should be using > bcrypt if the system supports it and otherwise sha256, sha512, or the > enhanced de

Re: [Toybox] su patch

2015-02-01 Thread Rich Felker
On Mon, Feb 02, 2015 at 10:33:24AM +0900, 김혜진 wrote: > Hello. I share a patch of su command. > > > -- Forwarded message -- > From: 김혜진 > Date: 2015-01-29 21:35 GMT+09:00 > Subject: Re: su patch > To: Rob Landley > > > Hi. Rob > > I Send you fixed patch. > > As I look at pass

[Toybox] su patch

2015-02-01 Thread 김혜진
Hello. I share a patch of su command. -- Forwarded message -- From: 김혜진 Date: 2015-01-29 21:35 GMT+09:00 Subject: Re: su patch To: Rob Landley Hi. Rob I Send you fixed patch. As I look at passwd and mkpasswd, default encryption method is "des". Because useradd calls passwd w