[OE-core] [PATCH 1/3] openssh: Allow empty passwords login.

Anders Darander anders at chargestorm.se
Mon Jun 11 10:36:31 UTC 2012


* Paul Eggleton <paul.eggleton at linux.intel.com> [120611 12:24]:

> On Monday 11 June 2012 11:45:49 Anders Darander wrote:
> > * Lianhao Lu <lianhao.lu at intel.com> [120611 11:03]:
> > > Allow empty passwords login so that the default root user can login in
> > > through openssh.
> > 
> > NAK, this isn't a sane default for a OpenSSH-recipe...

> I agree, however more below...

Good.

> > What's your use-case? Is it for automatic testing/development? If so,
> > can't you either set the password, or change the config using some other
> > means, e.g. a post rootfs installation script? (And make sure that this
> > is only run for the image in question, _not_ for all images).

> I don't think we want this to be image-specific. FWIW, we do already have a 
> mechanism to handle this for the dropbear recipe - debug-tweaks in 
> IMAGE_FEATURES. I don't particularly like it however since IMAGE_FEATURES 
> should not be influencing non-image recipes. This has bothered me for a while 
> and I think we ought to change to some other mechanism (perhaps make it a 
> separate variable) and then make the OpenSSH recipe use that.

That's right, the image shouldn't affect compile-time options. However,
in this particular case, as it is a configuration file, it should be
fine.

The variable idea is also fine with me, as long as we keep sensible
defaults, i.e. no empty password logins etc.

Cheers,
Anders

-- 
Anders Darander
ChargeStorm AB / eStorm AB




More information about the Openembedded-core mailing list