system: remove DES password encoding
authorYann E. MORIN <yann.morin.1998@free.fr>
Tue, 24 Mar 2015 18:54:15 +0000 (19:54 +0100)
committerThomas Petazzoni <thomas.petazzoni@free-electrons.com>
Fri, 10 Apr 2015 20:28:32 +0000 (22:28 +0200)
commit029179615e8252c112882857a7844d08cea44741
tree24a9cdddf1812881740228cb4279f339239c9a37
parent9c7710015112464d74cb6be16c05dd6fc23ae122
system: remove DES password encoding

DES is long dead, it is insecure as hell, and virtually all known
crypt(3) implementations now all support at least md5.

Besides, the character-space of DES-encoded passwords are a sub-set
of the character-space for a clear-text password, so we can't easily
differentiate between the two. Since we're going to change the root
password prompt to support setting encoded passwords (as well as
clear-text passwords), we can't keep DES or we'd be unable to decide
whether we'd need to encode the password or not.

Remove DES encoding altogether (and add a legacy entry). The default is
still md5, and thus there's no backward-compatibility 'select' to add.

Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Cc: Lorenzo Catucci <lorenzo@sancho.ccd.uniroma2.it>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Config.in.legacy
system/Config.in