(
Jump to the original submission)
Sat 06 Oct 2012 07:24:20 PM UTC, comment #6:
Oops.
Forgot I already posted a ticket about this =)
See https://savannah.nongnu.org/patch/?7675
|
Sat 06 Oct 2012 07:20:36 PM UTC, comment #5:
Here's my suggestion for the password hashing detection.
The other patch is for the git HEAD, and the other one for Tiger 3.2.3.
(file #26713, file #26714)
|
Mon 21 Nov 2011 06:28:33 PM UTC, comment #4:
Yes, I noticed that this patch dates back a while. It was included to Tiger on may 2011. Should this still be reconsidered and improved?
|
Mon 21 Nov 2011 06:21:42 PM UTC, comment #3:
Also the patch doesn't seem to support the rounds syntax. When you've defined SHA_CRYPT_*_ROUNDS in login.defs, the hash string starts with "$6$rounds=<integer>$"...
|
Mon 21 Nov 2011 06:16:11 PM UTC, comment #2:
I can't remember the details anymore sorry, it's been more than a year since I proposed the patch.
|
Mon 21 Nov 2011 03:57:35 PM UTC, comment #1:
Is the passwd="md5" intended, instead of passwd="sha512"? Other hashing algorithms could be added from man 3 crypt, such as 2a for Blowfish and 5 for SHA-256.
|
Wed 12 May 2010 06:34:50 AM UTC, original submission:
http://people.redhat.com/drepper/SHA-crypt.txt
describes a scheme for using SHA512 in /etc/shadow. This is the default used in Debian GNU/Linux squeeze so we are getting a lot of false positives from tiger.
[ Kees Cook ]
* debian/local/common-password, debian/pam-configs/unix: switch from "md5"
to "sha512" as password crypt default.
-- Steve Langasek <vorlon@debian.org> Mon, 31 Aug 2009 14:21:27 -0700
-- http://packages.debian.org/changelogs/pool/main/p/pam/pam_1.1.1-3/changelog
|
Depends on the following items: None found
Items that depend on this one: None found
Follow 4 latest changes.