From 7545dc3af8f7d3aa40a965509cd990ef64f17e51 Mon Sep 17 00:00:00 2001 From: Ross Burton Date: Tue, 5 Nov 2024 19:48:57 +0000 Subject: [PATCH] local.conf.sample: use explicit IMAGE_FEATURES instead of debug-tweaks debug-tweaks is vague and doesn't give any indication that the root user can login over SSH without a password. This behaviour is incredibly dangerous if used unwittingly, so discourage it by using the underlying features explicitly to spell out exactly what is being done. This is not the complete set of features that debug-tweaks enables, but I don't think we need to enable serial-autologin-root or post-install-logging by default. (From meta-yocto rev: 96d453fd54e10d02a603d40536f0ac22f5da6961) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie --- meta-poky/conf/templates/default/local.conf.sample | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta-poky/conf/templates/default/local.conf.sample b/meta-poky/conf/templates/default/local.conf.sample index 72d3566294..cfa77106ab 100644 --- a/meta-poky/conf/templates/default/local.conf.sample +++ b/meta-poky/conf/templates/default/local.conf.sample @@ -145,8 +145,8 @@ DISTRO ?= "poky" # There are other application targets that can be used here too, see # meta/classes-recipe/image.bbclass and # meta/classes-recipe/core-image.bbclass for more details. -# We default to enabling the debugging tweaks. -EXTRA_IMAGE_FEATURES ?= "debug-tweaks" +# We default to allowing root login without a password for convenience. +EXTRA_IMAGE_FEATURES ?= "allow-empty-password empty-root-password allow-root-login" # # Additional image features