Hoi,
to all of you who are running a grml system or plan to do so:
Affected software =================
grml2hd - install grml on harddisk
Problem =======
Setting the password in grml2hd is done via chpasswd. If you provide a password it will be set correct and login is possible with the provided password. But login is also possible with providing just the first 8 characters of the password.
Fix for existing installations ==============================
Please run 'passwd' manually after hd-installation (for normal user and user root). So if you are using passwords with more than 8 characters please run:
# passwd
and
# passwd <username>
where <username> is the user with UID 1000 on your grml system. This makes sure that login is possible only with the full length password.
Fix for upcoming grml2hd installations =======================================
Please run:
# apt-get update ; apt-get install grml2hd
before running grml2hd itself so you get the fixed and up2date grml2hd version.
Additional notes ================
The issue has been documented also at: http://wiki.grml.org/doku.php?id=grml_0.8
Credits =======
The issue has been discovered and reported by Matthias Kopfermann.
thx for notice && regards, -mika-