slackware-current/source/installer/sources/dropbear/dropbear_emptypass.patch
Patrick J Volkerding c56a16f1ec Tue Dec 15 20:39:53 UTC 2020
d/python-pip-20.3.3-x86_64-1.txz:  Upgraded.
kde/sddm-0.19.0-x86_64-3.txz:  Rebuilt.
  In SDDM's Xsession script, don't source $HOME/.xsession as this may launch
  the wrong session type or cause dbus-run-session to start twice breaking
  logout.
l/orc-0.4.32-x86_64-1.txz:  Upgraded.
l/pipewire-0.3.18-x86_64-1.txz:  Upgraded.
l/python-chardet-4.0.0-x86_64-1.txz:  Upgraded.
l/python-packaging-20.8-x86_64-1.txz:  Upgraded.
n/samba-4.13.3-x86_64-1.txz:  Upgraded.
xap/mozilla-thunderbird-78.6.0-x86_64-1.txz:  Upgraded.
  This is a bugfix release.
  For more information, see:
    https://www.mozilla.org/en-US/thunderbird/78.6.0/releasenotes/
xfce/mousepad-0.5.0-x86_64-1.txz:  Upgraded.
2020-12-16 08:59:50 +01:00

20 lines
743 B
Diff

diff -Nur dropbear-2020.81.orig/svr-authpasswd.c dropbear-2020.81/svr-authpasswd.c
--- dropbear-2020.81.orig/svr-authpasswd.c 2020-10-29 08:35:50.000000000 -0500
+++ dropbear-2020.81/svr-authpasswd.c 2020-12-06 02:20:50.744491126 -0600
@@ -98,12 +98,16 @@
}
/* check for empty password */
+ /* Yep, good idea, but for our usage, it's okay - dropbear has to be
+ started manually in the installer, so setting a password or not is
+ up to the admin
if (passwdcrypt[0] == '\0') {
dropbear_log(LOG_WARNING, "User '%s' has blank password, rejected",
ses.authstate.pw_name);
send_msg_userauth_failure(0, 1);
return;
}
+ */
if (constant_time_strcmp(testcrypt, passwdcrypt) == 0) {
/* successful authentication */