diff options
| author |   Chen Qi <Qi.Chen@windriver.com> | 2014-07-02 02:04:49 -0400 |
|---|---|---|
| committer | Chen Qi <Qi.Chen@windriver.com> | 2014-07-02 14:19:29 +0800 |
| commit | f10b0de652bff0cfeb473eae9d31ebe7ed2e933d (patch) | |
| tree | fa80b46279ed5a46d0e9643cc1236ba0bc96f528 /meta/recipes-connectivity/openssh/openssh_6.6p1.bb | |
| parent | c36d459f0d40bdbd3ba809835e0475e8992bc778 (diff) | |
| download | openembedded-core-contrib-f10b0de652bff0cfeb473eae9d31ebe7ed2e933d.tar.gz | |
openssh: avoid checking empty passwords to mess up with PAM modulesChenQi/openssh-pam
Previously, even if PAM is enabled for ssh, the daemon still tries to
authenticate an empty password. This leads to authentication failure
which would mess up with PAM modules.
As a result, if 'UsePAM', 'PermitEmptyPasswords' and 'PasswordAuthentication'
are enabled, no user can login correctly. We would meet the following error
message at the client side.
Write failed: Broken Pipe
This patch fixes the above problem by checking whether PAM is enabled before
authenticating an empty password. After all, if PAM is enabled, the task of
authenticating passwords should be handled to PAM modules.
[YOCTO #6466]
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Diffstat (limited to 'meta/recipes-connectivity/openssh/openssh_6.6p1.bb')
| -rw-r--r-- | meta/recipes-connectivity/openssh/openssh_6.6p1.bb | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/meta/recipes-connectivity/openssh/openssh_6.6p1.bb b/meta/recipes-connectivity/openssh/openssh_6.6p1.bb index 8f32c2e63e..047a895aae 100644 --- a/meta/recipes-connectivity/openssh/openssh_6.6p1.bb +++ b/meta/recipes-connectivity/openssh/openssh_6.6p1.bb @@ -24,7 +24,8 @@ SRC_URI = "ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-${PV}.tar. file://add-test-support-for-busybox.patch \ file://run-ptest \ file://openssh-CVE-2014-2532.patch \ - file://openssh-CVE-2014-2653.patch" + file://openssh-CVE-2014-2653.patch \ + file://auth2-none.c-avoid-authenticate-empty-passwords-to-m.patch" PAM_SRC_URI = "file://sshd" |