bin/138855: if the hostname is empty, opiepasswd(1) creates a seed too short

Remko Lodder remko at elvandar.org
Tue Sep 15 19:50:05 UTC 2009


The following reply was made to PR bin/138855; it has been noted by GNATS.

From: Remko Lodder <remko at elvandar.org>
To: deeptech71 at gmail.com
Cc: freebsd-gnats-submit at FreeBSD.org
Subject: Re: bin/138855: if the hostname is empty, opiepasswd(1) creates a seed too short
Date: Tue, 15 Sep 2009 21:47:05 +0200

 >>
 >>
 > An opie seed should be at least 6 chars long. It defaults to 2 chars  
 > from the hostname and 4 random digits.
 >
 > I have don't have a hostname (not set in rc.conf) (equivalent to  
 > hostname being "" instead of not existing?). The result is that  
 > opiepasswd creates a seed with 4 chars only. Later, opiekey(1)  
 > rejects this seed.
 >> How-To-Repeat:
 > # hostname ""
 > switch to a user who has never used opie (no entry in /etc/opiekeys)
 > # opiepasswd -cf
 >> Fix:
 > Could use one or two random chars if the hostname is too short  
 > (trivially patch contrib/bin/newseed.c?).
 >
 
 
 I wonder whether this falls into the category "dont do that"  
 situation, where people do things that we do not support. Like using a  
 custom kernel, this smells like something that people choose for  
 themselves.
 
 
 -- 
 /"\   Best regards,                        | remko at FreeBSD.org
 \ /   Remko Lodder                      | remko at EFnet
 X    http://www.evilcoder.org/    |
 / \   ASCII Ribbon Campaign    | Against HTML Mail and News
 


More information about the freebsd-bugs mailing list