Ban weston-init from our images
Maybe I missed something: * Although disabled by default it is started automatically * A passwordless root account reached by two keys - NOT ACCECTABLE!!! * Weston ships sessions that are the preferred way to start weston as unpriviledged user Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
This commit is contained in:
2
appends/oe-core/weston%.bbappend
Normal file
2
appends/oe-core/weston%.bbappend
Normal file
@@ -0,0 +1,2 @@
|
||||
# A root session without password activated by just two keys - honestly..
|
||||
RRECOMMENDS_${PN}_remove = "weston-init"
|
||||
@@ -142,6 +142,7 @@ WARN_TO_ERROR_QA = " \
|
||||
WARN_QA_remove = "${WARN_TO_ERROR_QA}"
|
||||
ERROR_QA_append = " ${WARN_TO_ERROR_QA}"
|
||||
|
||||
PNBLACKLIST[weston-init] = "A passwordless root session reachable by two keys - security???"
|
||||
|
||||
###############################################################################
|
||||
# Image defaults
|
||||
|
||||
Reference in New Issue
Block a user