5344 2013-10-14 09:46:12 +0000 Split up IMAGE_FEATURES - debug-tweaks into logical components 2015-02-12 17:34:00 +0000 1 1 7 Build System, Metadata & Runtime OE-Core configuration unspecified x86 Multiple RESOLVED FIXED 12 February 2015: Docs updated Medium enhancement 1.8 1 koen sgw chong.lu koen mark.hatle sgw srifenbark --- --- Done (doc changes complete) oldest_to_newest 37870 0 koen 2013-10-14 09:46:12 +0000 Currently PAM and dropbear allow logins but openssh doesn't (patch sent for that). It would be nice to have a global knob to change this behaviour for all affected recipes. 41651 1 chong.lu 2014-03-25 01:44:22 +0000 There is following configuration in /etc/pam.d/common-auth file on target: auth [success=1 default=ignore] pam_unix.so nullok About nullok argument: nullok The default action of this module is to not permit the user access to a service if their official password is blank. The nullok argument overrides this default and allows any user with a blank password to access the service. So, we can use this argument to decide whether allow empty password login. 42083 2 chong.lu 2014-04-02 01:31:47 +0000 Hi Koen, Can you describe this defect in detail? 44064 3 sjolley.yp.pm 2014-06-18 17:26:03 +0000 Assigned to Koen Kooi since that is who should supply the NEEDINFO per RP. 44546 4 mark.hatle 2014-07-17 15:19:16 +0000 The ability to do an empty password login is provided by debug-tweaks, but it also happens to do other things that may be less then desired. I'm updating this to be an enhancement request that breaks up the debug-tweaks functionality into logical units so they can be individually used. Change summary from: Add knob to (dis)allow empty password login for PAM/dropbear/openssh/etc to: Split up IMAGE_FEATURES - debug-tweaks into logical components Suggested enhancement: Split debug-tweaks into it's logical components: empty-root-password - run zap_empty_root_password allow-empty-password - run ssh_allow_empty_password post-install-logging - run postinst_enable_logging Map "debug-tweaks" to enabled those three items. 48646 5 sgw 2015-02-09 15:51:32 +0000 http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?id=d42963a3feda6c4cf074cbdacc7cf904734d70cf ScottR, docs will need to add definitions for the split values of debug-tweaks as enumerated by Mark in the above comment. 48773 6 srifenbark 2015-02-12 17:34:00 +0000 Hi, The documentation changes for this fix are here: http://www.yoctoproject.org/docs/1.8/ref-manual/ref-manual.html#var-EXTRA_IMAGE_FEATURES. http://www.yoctoproject.org/docs/1.8/ref-manual/ref-manual.html#ref-features-image (see the 'allow-empty-password', 'debug-tweaks', 'empty-root-password', and 'post-install-logging' items in the feature list. Since the bug is already set to RESOLVED, I am simply posting notice that these changes are in. If there are issues, let me know here. I also set the documentation flag to "done". Thanks, Scott