#875662 password encryption should match login.defs (SHA512)

Package:
xen-tools
Source:
xen-tools
Submitter:
Kilian Krause
Date:
2024-08-20 06:09:02 UTC
Severity:
normal
#875662#5
Date:
2017-09-13 08:39:59 UTC
From:
To:
Hi,

to match the current default of login.defs the default password
encryption should be raised to SHA512. Using MD5 or SHA256 should only
be allowed as a manual override.

Thanks!
Kilian
#875662#10
Date:
2024-08-20 05:44:15 UTC
From:
To:
This is still an issue in 4.9.2-1.  The crypt-ed password for the
automatically-created root user starts with "$1$", i.e., md5, when no
--hash-method is given to xen-create-image.  Even though the default is
supposed to be sha256.

Fortunately I have to lock that account anyway.