A potential problem with symlinking /bin/bash to /bin/sh (busybox) is that it's not future-proof Someday we might have a csh, or zsh. I think just making passwd use /bin/sh is the safest. Some awking or seding should fix it.