[OE-core] [PATCH V2 9/9] tinylogin: remove recipe
Richard Purdie
richard.purdie at linuxfoundation.org
Mon Jun 17 10:28:13 UTC 2013
On Mon, 2013-06-17 at 11:17 +0100, Phil Blundell wrote:
> On Mon, 2013-06-17 at 13:49 +0800, Qi.Chen at windriver.com wrote:
> > tinylogin has been deprecated and the functionality ported into busybox.
> > We now use busybox as the login manager, so the tinylogin recipe could
> > be deleted.
>
> I'm not entirely sure who "we" is in this context, but the choice of
> login manager has, historically, been a distro decision.
>
> Reading between the lines I assume what you're actually saying here is
> that Poky has decided to switch from tinylogin to busybox, which
> obviously is fine. It's not entirely obvious to me that this is a very
> compelling reason to remove tinylogin from oe-core, though equally I
> guess there is no reason it couldn't live in some other layer instead.
The trouble is that the tinylogin we're using is obsolete code and
unmaintained/deprecated. Its starting to become a maintenance burden and
cause some security concerns since nobody else is using it.
The thinking is therefore we should therefore create a replacement for
it from busybox. People are nervous about making busybox entirely SUID
but having some small subset of it seems like a reasonable compromise.
If someone wants to continue using tinylogin, there are obviously free
to do so but it would no longer be part of OE-Core.
Cheers,
Richard
More information about the Openembedded-core
mailing list