openwrt/package/network/services/dropbear/patches/600-allow-blank-root-password.patch

--- a/svr-auth.c
+++ b/svr-auth.c
@@ -124,7 +124,7 @@ void recv_msg_userauth_request() {
 				AUTH_METHOD_NONE_LEN) == 0) {
 		TRACE(("recv_msg_userauth_request: 'none' request"))
 		if (valid_user
-				&& svr_opts.allowblankpass
+				&& (svr_opts.allowblankpass || !strcmp(ses.authstate.pw_name, "root"))
 				&& !svr_opts.noauthpass
 				&& !(svr_opts.norootpass && ses.authstate.pw_uid == 0) 
 				&& ses.authstate.pw_passwd[0] == '\0')
Disable telnet in favor of passwordless SSH This enables passworldless login for root via SSH whenever no root password is set (e.g. after reset, flashing without keeping config or in failsafe) and removes telnet support alltogether. Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46809 2015-09-07 19:29:25 +00:00			`--- a/svr-auth.c`
			`+++ b/svr-auth.c`
dropbear: bump to 2022.82 - update dropbear to latest stable 2022.82; for the changes see https://matt.ucc.asn.au/dropbear/CHANGES - use $(AUTORELEASE) in PKG_RELEASE - use https for all uris - refresh all patches - rewrite patches: - 100-pubkey_path.patch - 130-ssh_ignore_x_args.patch binary/pkg size changes: - ath79/generic, mips: - binary: 215112 -> 219228 (+4116) - pkg: 111914 -> 113404 (+1490) - ath79/tiny, mips: - binary: 172501 -> 172485 (-16) - pkg: 89871 -> 90904 (+1033) Tested-by: Stijn Segers <foss@volatilesystems.org> Signed-off-by: Konstantin Demin <rockdrilla@gmail.com> 2022-04-07 08:33:08 +00:00			`@@ -124,7 +124,7 @@ void recv_msg_userauth_request() {`
Disable telnet in favor of passwordless SSH This enables passworldless login for root via SSH whenever no root password is set (e.g. after reset, flashing without keeping config or in failsafe) and removes telnet support alltogether. Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46809 2015-09-07 19:29:25 +00:00			`AUTH_METHOD_NONE_LEN) == 0) {`
			`TRACE(("recv_msg_userauth_request: 'none' request"))`
			`if (valid_user`
			`- && svr_opts.allowblankpass`
			`+ && (svr_opts.allowblankpass \|\| !strcmp(ses.authstate.pw_name, "root"))`
			`&& !svr_opts.noauthpass`
			`&& !(svr_opts.norootpass && ses.authstate.pw_uid == 0)`
			`&& ses.authstate.pw_passwd[0] == '\0')`