Skip to content

nshlib,fsutils: add Kconfig deps for NSH console login with PBKDF2 #3679

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Abhishekmishra2808 wants to merge 1 commit into
base: master
Choose a base branch
from
+21 −6
Open

nshlib,fsutils: add Kconfig deps for NSH console login with PBKDF2 #3679

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 5 additions & 2 deletions fsutils/passwd/Kconfig
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,14 +7,17 @@ config FSUTILS_PASSWD
bool "Password file support"
default n
depends on CRYPTO_CRYPTODEV
depends on CRYPTO_CRYPTODEV_SOFTWARE_CRYPTO || CRYPTO_CRYPTODEV_HARDWARE
depends on NETUTILS_CODECS
depends on CODECS_BASE64
---help---
Enables support for /etc/passwd file access routines.

Requires CONFIG_CRYPTO=y, CRYPTO_CRYPTODEV (and
ALLOW_BSD_COMPONENTS), plus NETUTILS_CODECS/CODECS_BASE64 for
base64url hash encoding.
ALLOW_BSD_COMPONENTS), a cryptodev backend
(CONFIG_CRYPTO_CRYPTODEV_SOFTWARE_CRYPTO or
CONFIG_CRYPTO_CRYPTODEV_HARDWARE), plus NETUTILS_CODECS/CODECS_BASE64
for base64url hash encoding.

NOTE: Password hashes use PBKDF2-HMAC-SHA256 (modular crypt format).
Existing TEA-encrypted /etc/passwd entries are NOT compatible and
Expand Down
20 changes: 16 additions & 4 deletions nshlib/Kconfig
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1235,23 +1235,35 @@ config NSH_CONSOLE_LOGIN
bool "Console Login"
default n
depends on FSUTILS_PASSWD
depends on !ETC_ROMFS || BOARD_ETC_ROMFS_PASSWD_ENABLE
select NSH_LOGIN
---help---
If defined, then the console user will be required to provide a
username and password to start the NSH shell. Requires
CONFIG_FSUTILS_PASSWD so credentials are verified against the
encrypted password file (for example ROMFS /etc/passwd).
CONFIG_FSUTILS_PASSWD (PBKDF2-HMAC-SHA256) so credentials are
verified against the encrypted password file.

When CONFIG_ETC_ROMFS is enabled, also enable
CONFIG_BOARD_ETC_ROMFS_PASSWD_ENABLE so /etc/passwd is generated
at build time (or provide the passwd file by other means and leave
ETC_ROMFS disabled).

config NSH_TELNET_LOGIN
bool "Telnet Login"
default n
depends on NSH_TELNET && FSUTILS_PASSWD
depends on !ETC_ROMFS || BOARD_ETC_ROMFS_PASSWD_ENABLE
select NSH_LOGIN
---help---
If defined, then the Telnet user will be required to provide a
username and password to start the NSH shell. Requires
CONFIG_FSUTILS_PASSWD so credentials are verified against the
encrypted password file (for example ROMFS /etc/passwd).
CONFIG_FSUTILS_PASSWD (PBKDF2-HMAC-SHA256) so credentials are
verified against the encrypted password file.

When CONFIG_ETC_ROMFS is enabled, also enable
CONFIG_BOARD_ETC_ROMFS_PASSWD_ENABLE so /etc/passwd is generated
at build time (or provide the passwd file by other means and leave
ETC_ROMFS disabled).

if NSH_LOGIN

Expand Down