Bug 4176

Summary:	root password hash remains weak after selecting MD5 hash
Product:	[Retired] Red Hat Linux	Reporter:	mommi
Component:	installer	Assignee:	David Lawrence <dkl>
Status:	CLOSED CURRENTRELEASE	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	6.0	Keywords:	Security
Target Milestone:	---
Target Release:	---
Hardware:	i386
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	1999-07-29 07:01:08 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description mommi 1999-07-23 12:49:22 UTC

root password hash remains weak after selecting MD5
hash. /etc/shadow has a very short hash of root password
and long hashes of (ordinary) users added afterwards. This
must be documented so root remembers to change his password
after install to get the stronger hash.

Comment 1 Cristian Gafton 1999-07-29 07:01:59 UTC

This is because the change in the authentication policies comes after
we set the root password. We will address this problem in the next
release.