[PATCH] local.conf.sample: comment out the root-with-empty-password setting
Alexander Kanavin <[email protected]> Thu, 20 Nov 2025 12:09:54 +0100
| Newsgroups | org.yoctoproject.lists.poky |
|---|---|
| Message-ID | <[email protected]> |
This was not a good default; the autobuilder relied on it, but this has been fixed, there's now a separate fragment as well, and testimage has a check for the needed image features. Let's take this out and be more secure by default everywhere. Signed-off-by: Alexander Kanavin <[email protected]> --- meta-poky/conf/templates/default/local.conf.sample | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/meta-poky/conf/templates/default/local.conf.sample b/meta-poky/conf/templates/default/local.conf.sample index 3d830d5..5a62de3 100644 --- a/meta-poky/conf/templates/default/local.conf.sample +++ b/meta-poky/conf/templates/default/local.conf.sample @@ -144,8 +144,10 @@ DISTRO ?= "poky" # There are other features that can be used here too, see # meta/classes-recipe/image.bbclass and # meta/classes-recipe/core-image.bbclass for more details. -# We default to allowing root login without a password for convenience. -EXTRA_IMAGE_FEATURES ?= "allow-empty-password empty-root-password allow-root-login" +# +# The following will allow root login without a password for convenience. +# Use with care, and never in product builds. +#EXTRA_IMAGE_FEATURES ?= "allow-empty-password empty-root-password allow-root-login" # # Additional image features -- 2.39.5