This is an automated email from the ASF dual-hosted git repository. acassis pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/nuttx.git
commit 7e2cca2fe97776db359395220327c42037b0ea0c Author: Abhishek Mishra <[email protected]> AuthorDate: Wed Jul 29 14:48:04 2026 +0000 boards/Kconfig: require FSUTILS_PASSWD and cryptodev for ROMFS passwd BOARD_ETC_ROMFS_PASSWD_ENABLE now depends on FSUTILS_PASSWD and a cryptodev backend so PBKDF2 passwd autogen cannot be enabled without the runtime login stack. Fixes #19573. Signed-off-by: Abhishek Mishra <[email protected]> --- boards/Kconfig | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/boards/Kconfig b/boards/Kconfig index 5caafb33079..c22969113f8 100644 --- a/boards/Kconfig +++ b/boards/Kconfig @@ -5658,11 +5658,17 @@ config BOARD_ETC_ROMFS_PASSWD_ENABLE bool "Auto-generate /etc/passwd at build time" default n depends on ETC_ROMFS + depends on FSUTILS_PASSWD + depends on CRYPTO_CRYPTODEV_SOFTWARE_CRYPTO || CRYPTO_CRYPTODEV_HARDWARE ---help--- Generate /etc/passwd at build time. The password is hashed with PBKDF2-HMAC-SHA256 by tools/mkpasswd; the plaintext is not stored in the firmware. + Requires CONFIG_FSUTILS_PASSWD (nuttx-apps) and a cryptodev + backend (CONFIG_CRYPTO_CRYPTODEV_SOFTWARE_CRYPTO on sim, or + CONFIG_CRYPTO_CRYPTODEV_HARDWARE on targets with hardware crypto). + The password is hashed at build time by the host tool tools/mkpasswd (compiled from tools/mkpasswd.c) using PBKDF2-HMAC-SHA256 — the same algorithm used at runtime in @@ -5678,7 +5684,8 @@ config BOARD_ETC_ROMFS_PASSWD_ENABLE NUTTX_ROMFS_PASSWD_PASSWORD for CI and scripted builds (see tools/update_romfs_password.sh). - Also enable NSH login with "Encrypted password file" verification. + When using CONFIG_NSH_CONSOLE_LOGIN with ETC_ROMFS, enable this + option so /etc/passwd is present at runtime. Password is not saved in defconfig. Do not commit it.
