openwrt/package/network/services/dropbear/patches/600-allow-blank-root-password.patch

--- a/src/svr-auth.c
+++ b/src/svr-auth.c
@@ -124,7 +124,7 @@ void recv_msg_userauth_request() {
 				AUTH_METHOD_NONE_LEN) == 0) {
 		TRACE(("recv_msg_userauth_request: 'none' request"))
 		if (valid_user
-				&& svr_opts.allowblankpass
+				&& (svr_opts.allowblankpass || !strcmp(ses.authstate.pw_name, "root"))
 				&& !svr_opts.noauthpass
 				&& !(svr_opts.norootpass && ses.authstate.pw_uid == 0) 
 				&& ses.authstate.pw_passwd[0] == '\0')
dropbear: bump to 2024.85 - update dropbear to latest stable 2024.85; for the changes see https://matt.ucc.asn.au/dropbear/CHANGES - drop cherry-picked patches (merged in release 2024.84) - refresh remaining patches Tested-by: Stijn Segers <foss@volatilesystems.org> Signed-off-by: Konstantin Demin <rockdrilla@gmail.com> 2024-05-06 13:20:16 +00:00			`--- a/src/svr-auth.c`
			`+++ b/src/svr-auth.c`
dropbear: bump to 2022.82 - update dropbear to latest stable 2022.82; for the changes see https://matt.ucc.asn.au/dropbear/CHANGES - use $(AUTORELEASE) in PKG_RELEASE - use https for all uris - refresh all patches - rewrite patches: - 100-pubkey_path.patch - 130-ssh_ignore_x_args.patch binary/pkg size changes: - ath79/generic, mips: - binary: 215112 -> 219228 (+4116) - pkg: 111914 -> 113404 (+1490) - ath79/tiny, mips: - binary: 172501 -> 172485 (-16) - pkg: 89871 -> 90904 (+1033) Tested-by: Stijn Segers <foss@volatilesystems.org> Signed-off-by: Konstantin Demin <rockdrilla@gmail.com> 2022-04-07 08:33:08 +00:00			`@@ -124,7 +124,7 @@ void recv_msg_userauth_request() {`
Disable telnet in favor of passwordless SSH This enables passworldless login for root via SSH whenever no root password is set (e.g. after reset, flashing without keeping config or in failsafe) and removes telnet support alltogether. Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46809 2015-09-07 19:29:25 +00:00			`AUTH_METHOD_NONE_LEN) == 0) {`
			`TRACE(("recv_msg_userauth_request: 'none' request"))`
			`if (valid_user`
			`- && svr_opts.allowblankpass`
			`+ && (svr_opts.allowblankpass \|\| !strcmp(ses.authstate.pw_name, "root"))`
			`&& !svr_opts.noauthpass`
			`&& !(svr_opts.norootpass && ses.authstate.pw_uid == 0)`
			`&& ses.authstate.pw_passwd[0] == '\0')`