Aksal/nuttx
3
1
Fork 1
mirror of https://github.com/apache/nuttx.git synced 2026-08-01 20:28:58 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

boards/Kconfig: require FSUTILS_PASSWD and cryptodev for ROMFS passwd

Browse source 
BOARD_ETC_ROMFS_PASSWD_ENABLE now depends on FSUTILS_PASSWD and a
cryptodev backend so PBKDF2 passwd autogen cannot be enabled without
the runtime login stack. Fixes #19573.

Signed-off-by: Abhishek Mishra <mishra.abhishek2808@gmail.com>
This commit is contained in:
Abhishek Mishra 2026-07-29 14:48:04 +00:00 • committed by Alan C. Assis
parent f5f11ac142
commit 7e2cca2fe9
1 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

9
boards/Kconfig
View file

@ -5658,11 +5658,17 @@ config BOARD_ETC_ROMFS_PASSWD_ENABLE
bool "Auto-generate /etc/passwd at build time"
default n
depends on ETC_ROMFS
depends on FSUTILS_PASSWD
depends on CRYPTO_CRYPTODEV_SOFTWARE_CRYPTO || CRYPTO_CRYPTODEV_HARDWARE
---help---
Generate /etc/passwd at build time. The password is hashed with
PBKDF2-HMAC-SHA256 by tools/mkpasswd; the plaintext is not stored
in the firmware.
Requires CONFIG_FSUTILS_PASSWD (nuttx-apps) and a cryptodev
backend (CONFIG_CRYPTO_CRYPTODEV_SOFTWARE_CRYPTO on sim, or
CONFIG_CRYPTO_CRYPTODEV_HARDWARE on targets with hardware crypto).
The password is hashed at build time by the host tool
tools/mkpasswd (compiled from tools/mkpasswd.c) using
PBKDF2-HMAC-SHA256 — the same algorithm used at runtime in
@ -5678,7 +5684,8 @@ config BOARD_ETC_ROMFS_PASSWD_ENABLE
NUTTX_ROMFS_PASSWD_PASSWORD for CI and scripted builds (see
tools/update_romfs_password.sh).
Also enable NSH login with "Encrypted password file" verification.
When using CONFIG_NSH_CONSOLE_LOGIN with ETC_ROMFS, enable this
option so /etc/passwd is present at runtime.
Password is not saved in defconfig. Do not commit it.