The Star That Opened OpenSSH on musl
A * in /etc/shadow is supposed to mean no password can log in. On musl-based OpenSSH without PAM, it became the password. Here is what happened, who is affected, and how to close it.
November 5, 2026
7 min read