diff options
| author | Richard Purdie <richard.purdie@linuxfoundation.org> | 2024-05-04 10:48:01 +0100 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2024-05-13 16:28:35 +0100 |
| commit | 29debb80ea5431dc86c4279118bae4e798242963 (patch) | |
| tree | 78e5852385bdcde20168d4c52cca3cb3cbc6dfb9 | |
| parent | cec77d941ebcd6d3c693f220bef4af411eab39cf (diff) | |
| download | poky-29debb80ea5431dc86c4279118bae4e798242963.tar.gz | |
ssh-pregen-hostkeys: Limit to qemu machines by default
There are potential security issues from using pre-generated host keys. We made
the recipe available for autobuilder testing purposes but concerns remain about
how easily this could end up in production.
I thought we'd already done this, but limit the recipe to qemu* machines,
which means any real hardware trying to use it will need to be a bit more
explicit about it and specifically enable it.
(From OE-Core rev: b0405972d4fd6fa12f90afea5ecb9a50c01c21c6)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
| -rw-r--r-- | meta/recipes-connectivity/ssh-pregen-hostkeys/ssh-pregen-hostkeys_1.0.bb | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/meta/recipes-connectivity/ssh-pregen-hostkeys/ssh-pregen-hostkeys_1.0.bb b/meta/recipes-connectivity/ssh-pregen-hostkeys/ssh-pregen-hostkeys_1.0.bb index ede18a0031..4a62ddacd5 100644 --- a/meta/recipes-connectivity/ssh-pregen-hostkeys/ssh-pregen-hostkeys_1.0.bb +++ b/meta/recipes-connectivity/ssh-pregen-hostkeys/ssh-pregen-hostkeys_1.0.bb | |||
| @@ -8,6 +8,8 @@ LIC_FILES_CHKSUM = "file://${COMMON_LICENSE_DIR}/MIT;md5=0835ade698e0bcf8506ecda | |||
| 8 | 8 | ||
| 9 | INHIBIT_DEFAULT_DEPS = "1" | 9 | INHIBIT_DEFAULT_DEPS = "1" |
| 10 | 10 | ||
| 11 | COMPATIBLE_MACHINE = "^qemu.*$" | ||
| 12 | |||
| 11 | do_install () { | 13 | do_install () { |
| 12 | install -d ${D}${sysconfdir}/dropbear | 14 | install -d ${D}${sysconfdir}/dropbear |
| 13 | install ${UNPACKDIR}/dropbear_rsa_host_key -m 0600 ${D}${sysconfdir}/dropbear/ | 15 | install ${UNPACKDIR}/dropbear_rsa_host_key -m 0600 ${D}${sysconfdir}/dropbear/ |
| @@ -16,4 +18,4 @@ do_install () { | |||
| 16 | install ${UNPACKDIR}/openssh/* ${D}${sysconfdir}/ssh/ | 18 | install ${UNPACKDIR}/openssh/* ${D}${sysconfdir}/ssh/ |
| 17 | chmod 0600 ${D}${sysconfdir}/ssh/* | 19 | chmod 0600 ${D}${sysconfdir}/ssh/* |
| 18 | chmod 0644 ${D}${sysconfdir}/ssh/*.pub | 20 | chmod 0644 ${D}${sysconfdir}/ssh/*.pub |
| 19 | } \ No newline at end of file | 21 | } |
