Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 30 May 2023 08:36:21 -0700
From:      bob prohaska <fbsd@www.zefox.net>
To:        Alexander Leidinger <Alexander@leidinger.net>
Cc:        Yuri <yuri@aetern.org>, freebsd-current@freebsd.org
Subject:   Re: Surprise null root password
Message-ID:  <ZHYX9Qa5ZaRMMj1p@www.zefox.net>
In-Reply-To: <20230530084133.Horde.4VevT2KY4XCtqoJgvP08jyB@webmail.leidinger.net>
References:  <ZHDt21wFlpJfQKEs@www.zefox.net> <945C9B6D-F2A8-4F0D-BDB0-49A3DE870168@karels.net> <ZHD%2BND6ilBGaOgcv@www.zefox.net> <CAG5KPzwLheqT_EuiexFRJuD4PyFNzyhCQfmToe4myr3K3YfKpQ@mail.gmail.com> <ZHEGpyKSWj4X/6Lk@www.zefox.net> <61e30711-f0da-2f42-3a6f-9bd91fc6b1ce@aetern.org> <ZHFADmqAmjJOCuIH@www.zefox.net> <20230530084133.Horde.4VevT2KY4XCtqoJgvP08jyB@webmail.leidinger.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, May 30, 2023 at 08:41:33AM +0200, Alexander Leidinger wrote:
> 
> Quoting bob prohaska <fbsd@www.zefox.net> (from Fri, 26 May 2023 16:26:06
> -0700):
> 
> > On Fri, May 26, 2023 at 10:55:49PM +0200, Yuri wrote:
> > > 
> > > The question is how you update the configuration files,
> > > mergemaster/etcupdate/something else?
> > > 
> > 
> > Via etcupdate after installworld. In the event the system
> > requests manual intervention I accept "theirs all". It seems
> > odd if that can null a root password.
> > 
> > Still, it does seem an outside possibility. I could see it adding
> > system users, but messing with root's existing password seems a
> > bit unexpected.
> 
> As you are posting to -current@, I expect you to report this issue about
> 14-current systems. As such: there was a "recent" change (2021-10-20) to the
> root entry to change the shell.
> https://cgit.freebsd.org/src/commit/etc/master.passwd?id=d410b585b6f00a26c2de7724d6576a3ea7d548b7
> 
> By blindly accepting all changes, this has reset the PW to the default
> setting (empty).

So it's a line-by-line merge. That's the most sensible explanation available.

> 
> I suggest to review changes ("df" instead of "tf" in etcupdate) to at least
> those files which you know you have modified, including the password/group
> stuff. After that you can decide if the diff which is shown with "df" can be
> applied ("tf"), or if you want to keep the old version ("mf"), or if you
> want to modify the current file ("e", with both versions present in the file
> so that you can copy/paste between the different versions and keep what you
> need).
> 

The key sequences required to copy and paste between files in the edit screen
were elusive. Probably it was thought self-evident, but not for me. I last tried 
it long ago, via mergemaster. Is there is a guide to commands for merging files 
using /etcupdate? Is it in the vi man page? I couldn't find it.

Thanks for writing!

bob prohaska




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?ZHYX9Qa5ZaRMMj1p>