Re: [PATCH 0/2] fix can't login when debug-tweaks is not in IMAGE_FEATURES

[ChenQi <Qi.Chen@windriver.com>]

On 11/30/2016 05:28 PM, ChenQi wrote:
> We could make use of EXTRA_USERS_PARAMS here.
> More details are in meta/classes/extrausers.bbclass.
>
> I haven't tested it myself, but maybe lines below could work:
> INHERIT += "extrausers"
> EXTRA_USERS_PARAMS = "\
> usermod -p 'root' root; \
> "
>

It should be '-P' instead of '-p'.
We implement setting clear text password ourselves via 
allow-for-setting-password-in-clear-text.patch in shadow package.

Regards,
Chen Qi

> This info could also be found in local.conf.sample.extended.
>
> Best Regards,
> Chen Qi
>
> On 11/30/2016 11:15 AM, Robert Yang wrote:
>> Hello,
>>
>> According to the discussions, here are things that we may do,
>> please feel free to give your comments.
>> 1) Add an image feature like "production", which will conflict with
>>    debug-tweaks, and check for some common security issues ?
>>
>> 2) Add a way like ROOT_PASSWD to let user can set root passwd easily ?
>>
>> 3) Do nothing, leave it as the current status.
>>
>> // Robert
>>
>> On 11/23/2016 03:49 PM, Robert Yang wrote:
>>> Fixed 2 bugs:
>>> - Can't login as root when debug-tweaks/empty-root-password is not in
>>>   IMAGE_FEATURES since no passwd.
>>> - When set root passwd and debug-tweaks/empty-root-password is in
>>>   IMAGE_FEATURES, passwd is *required* to login.
>>>
>>> Filed https://bugzilla.yoctoproject.org/show_bug.cgi?id=10710, and
>>> marked doc changes required as yes.
>>>
>>> // Robert
>>>
>>> The following changes since commit 
>>> a675b2c89e477af088faee9b3be96eae19a85f0b:
>>>
>>>   sanity.bbclass: fix logging of an error (2016-11-15 15:18:50 +0000)
>>>
>>> are available in the git repository at:
>>>
>>>   git://git.openembedded.org/openembedded-core-contrib rbt/root
>>> http://cgit.openembedded.org/cgit.cgi/openembedded-core-contrib/log/?h=rbt/root 
>>>
>>>
>>> Robert Yang (2):
>>>   rootfs-postcommands.bbclass: fix zap_empty_root_password
>>>   base-passwd: set root's default password to 'root'
>>>
>>>  meta/classes/rootfs-postcommands.bbclass                 |  8 ++++----
>>>  .../base-passwd/base-passwd/passwd_master.patch          | 16 
>>> ++++++++++++++++
>>>  meta/recipes-core/base-passwd/base-passwd_3.5.29.bb      |  1 +
>>>  3 files changed, 21 insertions(+), 4 deletions(-)
>>>  create mode 100644 
>>> meta/recipes-core/base-passwd/base-passwd/passwd_master.patch
>>>
>