From ab8d24794eed85a2caf99a84d93db5e758b0b952 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Andreas=20M=C3=BCller?= Date: Wed, 3 Jun 2020 10:48:02 +0200 Subject: [PATCH] Ban weston-init from our images MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Maybe I missed something: * Although disabled by default it is started automatically * A passwordless root account reached by two keys - NOT ACCECTABLE!!! * Weston ships sessions that are the preferred way to start weston as unpriviledged user Signed-off-by: Andreas Müller --- appends/oe-core/weston%.bbappend | 2 ++ conf/distro/mortsgna.conf | 1 + 2 files changed, 3 insertions(+) create mode 100644 appends/oe-core/weston%.bbappend diff --git a/appends/oe-core/weston%.bbappend b/appends/oe-core/weston%.bbappend new file mode 100644 index 0000000..0a1f466 --- /dev/null +++ b/appends/oe-core/weston%.bbappend @@ -0,0 +1,2 @@ +# A root session without password activated by just two keys - honestly.. +RRECOMMENDS_${PN}_remove = "weston-init" diff --git a/conf/distro/mortsgna.conf b/conf/distro/mortsgna.conf index 18b69c5..83d387e 100644 --- a/conf/distro/mortsgna.conf +++ b/conf/distro/mortsgna.conf @@ -144,6 +144,7 @@ WARN_TO_ERROR_QA = " \ WARN_QA_remove = "${WARN_TO_ERROR_QA}" ERROR_QA_append = " ${WARN_TO_ERROR_QA}" +PNBLACKLIST[weston-init] = "A passwordless root session reachable by two keys - security???" ############################################################################### # Image defaults