Project

General

Profile

Actions
Copy link

Feature #36650

closed

Change Linux password hashing default from sha256 to sha512

Added by Ewoud Kohl van Wijngaarden about 1 year ago. Updated 3 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Marek Hulán
Category:
Unattended installations
Target version:
3.11.1
Difficulty:
Triaged:
No
Bugzilla link:
Pull request:
https://github.com/theforeman/foreman/pull/10206, https://github.com/theforeman/foreman/pull/10214
Fixed in Releases:
3.11.1
Found in Releases:
Red Hat JIRA:
SAT-26071

Related issues 1 (0 open — 1 closed)

Related to Foreman - Feature #37614: Use SHA512 for root password hashing when no OS is setClosedEwoud Kohl van WijngaardenActions
Actions
Copy link
 #1

Updated by The Foreman Bot 4 months ago

  • Status changed from New to Ready For Testing
  • Assignee set to Marek Hulán
  • Pull request https://github.com/theforeman/foreman/pull/10206 added
Actions
Copy link
 #2

Updated by The Foreman Bot 4 months ago

  • Fixed in Releases 3.12.0 added
Actions
Copy link
 #3

Updated by Marek Hulán 4 months ago

  • Status changed from Ready For Testing to Closed
Actions
Copy link
 #4

Updated by The Foreman Bot 4 months ago

  • Pull request https://github.com/theforeman/foreman/pull/10214 added
Actions
Copy link
 #5

Updated by Marek Hulán 3 months ago

  • Tracker changed from Feature to Bug
  • Description updated (diff)
  • Status changed from Closed to New
  • Red Hat JIRA set to SAT-26071
Actions
Copy link
 #6

Updated by Marek Hulán 3 months ago

  • Tracker changed from Bug to Feature
  • Status changed from New to Closed
Actions
Copy link
 #7

Updated by Marek Hulán 3 months ago

https://wiki.archlinux.org/title/SHA_password_hashes states that NSA has recommended SHA512 since RHEL 5. This means it's safe to do with wide compatibility. It should be noted that Fedora 35 has started to default to YESCRYPT. See ENCRYPT_METHOD in /etc/login.defs and https://www.fedoraproject.org/wiki/Changes/yescrypt_as_default_hashing_method_for_shadow for more info.

Actions
Copy link
 #8

Updated by The Foreman Bot 3 months ago

  • Fixed in Releases 3.11.1 added
Actions
Copy link
 #9

Updated by Ewoud Kohl van Wijngaarden 3 months ago

  • Related to Feature #37614: Use SHA512 for root password hashing when no OS is set added
Actions
Copy link
 #10

Updated by Griffin Sullivan 3 months ago

  • Target version set to 3.11.1
Actions
Copy link
 #11

Updated by Griffin Sullivan 3 months ago

  • Target version deleted (3.11.1)
Actions
Copy link
 #12

Updated by Evgeni Golov 3 months ago

  • Target version set to 3.11.1
Actions
Copy link
 #13

Updated by Ewoud Kohl van Wijngaarden 3 months ago

  • Fixed in Releases deleted (3.12.0)
Actions
Copy link

Also available in: Atom PDF