RFC behavior when shadow passwd file is missing

Denis Vlasenko vda.linux at googlemail.com
Fri Mar 23 17:37:48 PDT 2007


Hi Tito,

On Friday 23 March 2007 22:31, Tito wrote:
> I noticed that in busybox we adopt different behavior when the shadow passwd file is missing:
> 
> ...
> 
> so 7 applets just emit a warning and use /etc/passwd instead, while 2 applets
> (adduser and sulogin)  error out and die.

I think that shadow-capable bbox should use /etc/passwd if /etc/shadow
record is not found.

Rationale: having shadow-enabled bbox should not *force* admin to use
shadow passwords, it should *give him an option* to use them.

> but probably adduser could adopt the same strategy as addgroup:
> 
> file = fopen_or_warn(bb_path_gshadow_file, "a");

I think this is the right approach.
--
vda


More information about the busybox mailing list