From 903d753fc05eca4af4cea348aa0097e06ca173b9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Andreas=20M=C3=BCller?= Date: Wed, 3 Jun 2020 10:48:02 +0200 Subject: [PATCH] Ban weston-init from our images MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Maybe I missed something: * Although disabled by default it is started automatically * A passwordless root account reached by two keys - NOT ACCECTABLE!!! * Weston ships sessions that are the preferred way to start weston as unpriviledged user Signed-off-by: Andreas Müller --- appends/oe-core/weston%.bbappend | 2 ++ conf/distro/mortsgna.conf | 1 + 2 files changed, 3 insertions(+) create mode 100644 appends/oe-core/weston%.bbappend diff --git a/appends/oe-core/weston%.bbappend b/appends/oe-core/weston%.bbappend new file mode 100644 index 0000000..0a1f466 --- /dev/null +++ b/appends/oe-core/weston%.bbappend @@ -0,0 +1,2 @@ +# A root session without password activated by just two keys - honestly.. +RRECOMMENDS_${PN}_remove = "weston-init" diff --git a/conf/distro/mortsgna.conf b/conf/distro/mortsgna.conf index 925022d..0042d3c 100644 --- a/conf/distro/mortsgna.conf +++ b/conf/distro/mortsgna.conf @@ -142,6 +142,7 @@ WARN_TO_ERROR_QA = " \ WARN_QA_remove = "${WARN_TO_ERROR_QA}" ERROR_QA_append = " ${WARN_TO_ERROR_QA}" +PNBLACKLIST[weston-init] = "A passwordless root session reachable by two keys - security???" ############################################################################### # Image defaults