Re: [PATCH] umount: always use umount2 syscall with specified flags

2015-10-01 Thread Denys Vlasenko
Applied, thanks! ___ busybox mailing list busybox@busybox.net http://lists.busybox.net/mailman/listinfo/busybox

Re: [PATCH] su: support denying accounts with blank password

2015-10-01 Thread Denys Vlasenko
I tested $ su --version su (GNU coreutils) 8.17 and it allows su to root w/o asking for password if it is null. busybox does the same. If there is the need to disallow people to be able to log in as root, you should set root password. If you set password hash to an invalid hash, you can even

Re: Re: bug-report: ash: fix a memory leak

2015-10-01 Thread Denys Vlasenko
On Mon, Sep 28, 2015 at 4:17 AM, Rongqing Li wrote: > > > On 2014年12月24日 13:53, Rich Felker wrote: >> >> On Wed, Dec 24, 2014 at 10:32:19AM +0800, yhu2 wrote: >>> >>> The script which triggers the leak: >>> >>> while true >>>do >>> while true >>>do >>>

Re: [PATCH] su: support denying accounts with blank password

2015-10-01 Thread Alain Mouette
Why would you want to completely disable root login? If it is a security feature, how can it be used? It can be interesting to avoid escalating priviledges, but then how to to administrative tasks? (assuming ssh root login is disabled too) Thanks, Alain On 01-10-2015 14:39, Denys Vlasenko

Re: [PATCH] su: support denying accounts with blank password

2015-10-01 Thread Jody Bruchon
On 10/1/2015 2:42 PM, Alain Mouette wrote: Why would you want to completely disable root login? If it is a security feature, how can it be used? It can be interesting to avoid escalating priviledges, but then how to to administrative tasks? (assuming ssh root login is disabled too) Ubuntu

Re: [PATCH] su: support denying accounts with blank password

2015-10-01 Thread Rich Felker
On Thu, Oct 01, 2015 at 03:42:40PM -0300, Alain Mouette wrote: > Why would you want to completely disable root login? > > If it is a security feature, how can it be used? It can be > interesting to avoid escalating priviledges, but then how to to > administrative tasks? (assuming ssh root login