I'm inclined to make the opt-out an image generation time decision rather than configurable on the overlayfs for what I think are obvious reasons.

Regards,

Daniel

On 23/12/15 07:24 AM, John Crispin wrote:


On 23/12/2015 13:05, Imre Kaloz wrote:
Hi Daniel,

On Wed, 23 Dec 2015 07:58:59 +0100, Daniel Dickinson
<open...@daniel.thecshore.com> wrote:

I am reworking this (requiring console login) as couple of packages
for the packages feed, although it may require an image.mk or packages
Makefile hook in order to embed an appropriate inittab into the image
(since the inittab will need to be modified and we need to guarantee
the correct order of actions; and inittab comes from base-files which
is last thing done in the packages Makefile).

I hope the other devs will chime in, but FWIW I would make this enabled
unconditionally across all targets. As we already have a way to do a
"factory reset" using the reset button, IMHO failsafe should also
enforce login passwords everywhere, including the serial console.


default on, once root passwd is set sounds good. an optional opt-out
feature would be nice to avoid people having to add dirty hacks to get
rid of the login prompt on tty shells. this could be hidden inside a
wrapper script called by inittab.
_______________________________________________
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel

_______________________________________________
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel

Reply via email to