Bug 4176 – root password hash remains weak after selecting MD5 hash

Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.

Bug 4176 - root password hash remains weak after selecting MD5 hash

Summary:	root password hash remains weak after selecting MD5 hash

Status:	CLOSED CURRENTRELEASE

Aliases:	None

Product:	Red Hat Linux
Classification:	Retired
Component:	installer (Show other bugs)
Sub Component:
Version:	6.0
Hardware:	i386 Linux

Priority	medium Severity medium
Target Milestone:	---
Target Release:	---
Assigned To:	David Lawrence
QA Contact:
Docs Contact:

URL:
Whiteboard:
Keywords:	Security

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	1999-07-23 08:49 EDT by mommi
Modified:	2008-05-01 11:37 EDT (History)
CC List:	0 users

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	1999-07-29 03:01:08 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description mommi 1999-07-23 08:49:22 EDT

root password hash remains weak after selecting MD5
hash. /etc/shadow has a very short hash of root password
and long hashes of (ordinary) users added afterwards. This
must be documented so root remembers to change his password
after install to get the stronger hash.

Comment 1 Cristian Gafton 1999-07-29 03:01:59 EDT

This is because the change in the authentication policies comes after
we set the root password. We will address this problem in the next
release.

Note You need to log in before you can comment on or make changes to this bug.