Skip to content

Conversation

@rockdrilla
Copy link
Contributor

Depends on: openwrt/openwrt#19293

@rockdrilla
Copy link
Contributor Author

It seems that "shadow" package now depends on libbsd even with musl libc.

@rockdrilla
Copy link
Contributor Author

@neheb friendly ping :)

@rockdrilla
Copy link
Contributor Author

Rebased after openwrt/openwrt#19353 and #26944.

@rockdrilla
Copy link
Contributor Author

One more catch: when shadow is built using musl and libxcrypt when it support solaris hashset, and when it is built with glibc and libcrypt-compat it supports glibc hashset.

glibc hashset:

sha512crypt    $6$       15       STRONG,DEFAULT,GLIBC,FREEBSD,SOLARIS
sha256crypt    $5$       15       GLIBC,FREEBSD,SOLARIS
md5crypt       $1$       9        GLIBC,FREEBSD,NETBSD,OPENBSD,SOLARIS
descrypt       :         2        GLIBC,FREEBSD,NETBSD,OPENBSD,SOLARIS,OSX

solaris hashset:

bcrypt         $2b$      16       STRONG,DEFAULT,ALT,FREEBSD,NETBSD,OPENBSD,OWL,SOLARIS,SUSE
bcrypt_a       $2a$      16       STRONG,ALT,FREEBSD,NETBSD,OPENBSD,OWL,SOLARIS,SUSE
sha512crypt    $6$       15       STRONG,DEFAULT,GLIBC,FREEBSD,SOLARIS
sha256crypt    $5$       15       GLIBC,FREEBSD,SOLARIS
sunmd5         $md5      8        SOLARIS
md5crypt       $1$       9        GLIBC,FREEBSD,NETBSD,OPENBSD,SOLARIS
descrypt       :         2        GLIBC,FREEBSD,NETBSD,OPENBSD,SOLARIS,OSX

As one may see, solaris has extra hashes: bcrypt, bcrypt_a and sunmd5. The question is: should we link against libcrypt-compat of just against libxcrypt ?

@rockdrilla
Copy link
Contributor Author

Compile-/run-tested: mediatek/filogic (GL.iNet GL-MT6000), ath79/generic (TP-Link Archer C7 v2).

@Neustradamus
Copy link

@rockdrilla: Nice PR :)

@rockdrilla
Copy link
Contributor Author

At least it works on my router. 😅

- remove absent utils ("groups" and "lastlog"):
  - "groups" is already provided by "coreutils"
  - "lastlog" is should be (re)introduced by "util-linux"
- adjust "004-fix-su-controoling-term.patch" to be more readable

Signed-off-by: Konstantin Demin <[email protected]>
glibc 2.39 has removed libcrypt completely.
solution: link against libxcrypt built with glibc compatibility.

Signed-off-by: Konstantin Demin <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants