diff options
| author | Paul Eggleton <paul.eggleton@linux.intel.com> | 2011-09-07 17:05:39 +0100 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2011-09-07 22:30:05 +0100 |
| commit | 5ddda44efc97b4d6cf863033348e57e5cfdcd392 (patch) | |
| tree | d0a5da8a0c3f5e6bd9f5b1046d61eb667e32ae9a /meta | |
| parent | b5db50e280e2547f5428440be5446c4ad267aeef (diff) | |
| download | openembedded-core-5ddda44efc97b4d6cf863033348e57e5cfdcd392.tar.gz openembedded-core-5ddda44efc97b4d6cf863033348e57e5cfdcd392.tar.bz2 openembedded-core-5ddda44efc97b4d6cf863033348e57e5cfdcd392.tar.xz openembedded-core-5ddda44efc97b4d6cf863033348e57e5cfdcd392.zip | |
core-image.bbclass: zap root password if debug-tweaks not enabled
If you do not have debug-tweaks in IMAGE_FEATURES, then zap the root
password so that you can't log in as root without a password in an image
potentially intended for a production system.
Also mention debug-tweaks in the comments listing IMAGE_FEATURES in this
file.
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta')
| -rw-r--r-- | meta/classes/core-image.bbclass | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/meta/classes/core-image.bbclass b/meta/classes/core-image.bbclass index 507d6a60e..8e83d4abe 100644 --- a/meta/classes/core-image.bbclass +++ b/meta/classes/core-image.bbclass @@ -26,6 +26,7 @@ LIC_FILES_CHKSUM = "file://${COREBASE}/LICENSE;md5=3f40d7994397109285ec7b81fdeb3 # - nfs-server - NFS server (exports / over NFS to everybody) # - ssh-server-dropbear - SSH server (dropbear) # - ssh-server-openssh - SSH server (openssh) +# - debug-tweaks - makes an image suitable for development # PACKAGE_GROUP_apps-console-core = "task-core-apps-console" PACKAGE_GROUP_x11-base = "task-core-x11-base" @@ -65,3 +66,7 @@ inherit image # Create /etc/timestamp during image construction to give a reasonably sane default time setting ROOTFS_POSTPROCESS_COMMAND += "rootfs_update_timestamp ; " + +# Zap the root password if debug-tweaks feature is not enabled +ROOTFS_POSTPROCESS_COMMAND += '${@base_contains("IMAGE_FEATURES", "debug-tweaks", "", "zap_root_password ; ",d)}' + |