Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 29 Apr 2015 11:51:58 +0300
From: Shinnok <admin@...nnok.com>
To: john-dev@...ts.openwall.com
Subject: Re: [Johnny] Task 1.4.2 fork and OpenMP


> On Apr 28, 2015, at 10:58 PM, Frank Dittrich <frank.dittrich@...lbox.org> wrote:
> 
> On 04/28/2015 08:53 PM, magnum wrote:
>> On 2015-04-28 15:23, Frank Dittrich wrote:
>>> While jumbo had fork for a while, older core versions didn't have --fork.
>>> So you might need to check whether john supports --fork.
>>> You need to parse john's usage output, and (for jumbo), the
>>> --list=hidden-options output.
>> 
>> But seriously, it's a massive waste of time caring about supporting pre-
>> 1.8.0 (and 1.8.0-jumbo-1) versions.
> 
> May be we need to check which john versions are packaged for various
> popular (LTS) Linux distros.
> But meanwhile even Fedora 20 (soon to reach end-of-life, shortly after
> Fedora 22 is released) includes a core john 1.8.0 version (with --fork
> support).
> Fedora 22 also includes a core john version 1.8.0 (no OMP).
> What about Ubuntu?
> But since even Debian stable contains john-1.8.0-2 according to
> https://packages.debian.org/stable/allpackages, we are probably OK if we
> just assume --fork is supported.
> 
> OTOH, for other features (--regex etc), we need to parse john's usage
> output and --list= output anyway, so we might as well use the same logic
> to detect whether or not --fork is supported.
> 
> Or Johnny might suggest to upgrade john if the version is too old.
> IMHO all this is of very low priority, getting --fork supported if it
> exists is much more important.
> Shinnok or Aleksey should have the final say here.
> 
> Frank


I agree with Magnum here, we shouldn't go to great extent to support obsolete JtR versions. After all, Johnny itself(implicitly JtR) is supposed to be running on a relatively modern desktop anyway.

As to the facts:

Debian 7: 1.7.8-1
Debian 8(just released): 1.8.0-2
Ubuntu trusty (14.04LTS): 1.8.0-1
Ubuntu Vivid Vervet (15.04): 1.8.0-2
Fedora >20: 1.8.0
Linux Mint: uses Debian and Ubuntu repos
Kali: debian/1.7.9-jumbo-7-1kali1 (http://git.kali.org/gitweb/?p=packages/john.git;a=summary <http://git.kali.org/gitweb/?p=packages/john.git;a=summary> ; last updated in 2013? that's sad)
FreeBSD ports: john-1.7.9.j.7_1

As to the actual version checks, most of that work would be part of the jumbo/2john support tasks.
Maybe we could get away for now with just grepping for --fork in john help output for the time being. If not available(also no OpenMP), completely hide the the option from the interface.

Shinnok
[ CONTENT OF TYPE text/html SKIPPED ]

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ