diff options
Diffstat (limited to 'meta/classes/rootfs-postcommands.bbclass')
-rw-r--r-- | meta/classes/rootfs-postcommands.bbclass | 25 |
1 files changed, 22 insertions, 3 deletions
diff --git a/meta/classes/rootfs-postcommands.bbclass b/meta/classes/rootfs-postcommands.bbclass index 9d4d95e994..ca690a6e59 100644 --- a/meta/classes/rootfs-postcommands.bbclass +++ b/meta/classes/rootfs-postcommands.bbclass | |||
@@ -2,9 +2,12 @@ | |||
2 | # Zap the root password if debug-tweaks feature is not enabled | 2 | # Zap the root password if debug-tweaks feature is not enabled |
3 | ROOTFS_POSTPROCESS_COMMAND += '${@bb.utils.contains_any("IMAGE_FEATURES", [ 'debug-tweaks', 'empty-root-password' ], "", "zap_empty_root_password ; ",d)}' | 3 | ROOTFS_POSTPROCESS_COMMAND += '${@bb.utils.contains_any("IMAGE_FEATURES", [ 'debug-tweaks', 'empty-root-password' ], "", "zap_empty_root_password ; ",d)}' |
4 | 4 | ||
5 | # Allow dropbear/openssh to accept logins from accounts with an empty password string if debug-tweaks is enabled | 5 | # Allow dropbear/openssh to accept logins from accounts with an empty password string if debug-tweaks or allow-empty-password is enabled |
6 | ROOTFS_POSTPROCESS_COMMAND += '${@bb.utils.contains_any("IMAGE_FEATURES", [ 'debug-tweaks', 'allow-empty-password' ], "ssh_allow_empty_password; ", "",d)}' | 6 | ROOTFS_POSTPROCESS_COMMAND += '${@bb.utils.contains_any("IMAGE_FEATURES", [ 'debug-tweaks', 'allow-empty-password' ], "ssh_allow_empty_password; ", "",d)}' |
7 | 7 | ||
8 | # Allow dropbear/openssh to accept root logins if debug-tweaks or allow-root-login is enabled | ||
9 | ROOTFS_POSTPROCESS_COMMAND += '${@bb.utils.contains_any("IMAGE_FEATURES", [ 'debug-tweaks', 'allow-root-login' ], "ssh_allow_root_login; ", "",d)}' | ||
10 | |||
8 | # Enable postinst logging if debug-tweaks is enabled | 11 | # Enable postinst logging if debug-tweaks is enabled |
9 | ROOTFS_POSTPROCESS_COMMAND += '${@bb.utils.contains_any("IMAGE_FEATURES", [ 'debug-tweaks', 'post-install-logging' ], "postinst_enable_logging; ", "",d)}' | 12 | ROOTFS_POSTPROCESS_COMMAND += '${@bb.utils.contains_any("IMAGE_FEATURES", [ 'debug-tweaks', 'post-install-logging' ], "postinst_enable_logging; ", "",d)}' |
10 | 13 | ||
@@ -138,12 +141,11 @@ zap_empty_root_password () { | |||
138 | } | 141 | } |
139 | 142 | ||
140 | # | 143 | # |
141 | # allow dropbear/openssh to accept root logins and logins from accounts with an empty password string | 144 | # allow dropbear/openssh to accept logins from accounts with an empty password string |
142 | # | 145 | # |
143 | ssh_allow_empty_password () { | 146 | ssh_allow_empty_password () { |
144 | for config in sshd_config sshd_config_readonly; do | 147 | for config in sshd_config sshd_config_readonly; do |
145 | if [ -e ${IMAGE_ROOTFS}${sysconfdir}/ssh/$config ]; then | 148 | if [ -e ${IMAGE_ROOTFS}${sysconfdir}/ssh/$config ]; then |
146 | sed -i 's/^[#[:space:]]*PermitRootLogin.*/PermitRootLogin yes/' ${IMAGE_ROOTFS}${sysconfdir}/ssh/$config | ||
147 | sed -i 's/^[#[:space:]]*PermitEmptyPasswords.*/PermitEmptyPasswords yes/' ${IMAGE_ROOTFS}${sysconfdir}/ssh/$config | 149 | sed -i 's/^[#[:space:]]*PermitEmptyPasswords.*/PermitEmptyPasswords yes/' ${IMAGE_ROOTFS}${sysconfdir}/ssh/$config |
148 | fi | 150 | fi |
149 | done | 151 | done |
@@ -166,6 +168,23 @@ ssh_allow_empty_password () { | |||
166 | fi | 168 | fi |
167 | } | 169 | } |
168 | 170 | ||
171 | # | ||
172 | # allow dropbear/openssh to accept root logins | ||
173 | # | ||
174 | ssh_allow_root_login () { | ||
175 | for config in sshd_config sshd_config_readonly; do | ||
176 | if [ -e ${IMAGE_ROOTFS}${sysconfdir}/ssh/$config ]; then | ||
177 | sed -i 's/^[#[:space:]]*PermitRootLogin.*/PermitRootLogin yes/' ${IMAGE_ROOTFS}${sysconfdir}/ssh/$config | ||
178 | fi | ||
179 | done | ||
180 | |||
181 | if [ -e ${IMAGE_ROOTFS}${sbindir}/dropbear ] ; then | ||
182 | if grep -q DROPBEAR_EXTRA_ARGS ${IMAGE_ROOTFS}${sysconfdir}/default/dropbear 2>/dev/null ; then | ||
183 | sed -i '/^DROPBEAR_EXTRA_ARGS=/ s/-w//' ${IMAGE_ROOTFS}${sysconfdir}/default/dropbear | ||
184 | fi | ||
185 | fi | ||
186 | } | ||
187 | |||
169 | python sort_passwd () { | 188 | python sort_passwd () { |
170 | import rootfspostcommands | 189 | import rootfspostcommands |
171 | rootfspostcommands.sort_passwd(d.expand('${IMAGE_ROOTFS}${sysconfdir}')) | 190 | rootfspostcommands.sort_passwd(d.expand('${IMAGE_ROOTFS}${sysconfdir}')) |