Port-arm archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: BananaPi default login through ssh



Instead of two images, I would load (if it exists) an rc.conf from the /boot partition after it is mounted. With that, the user can easily enable sshd and set options as required (PermitRootLogin, PermitEmptyPasswords, etc) with sshd_flags. Maybe provide some examples in an rc.conf on the image itself, commented out by default.


On Thu, 28 Jan 2016, Martin Husemann wrote:

On Wed, Jan 27, 2016 at 07:09:17PM -0500, Greg Troxel wrote:
It is irregular to enable ssh at install time without the user
configuring it.  Someone may want to do that, and they can patch their
build.  But it's a security bug to have it on by default.

Another view is that machines should have a working  console, and
dealing with issues due to not having one is a workaround, not the main
path.

Or we could provide two images, the only difference being an additional
user (in group wheel) with documented password and predefined root password.

Of course name that image accordingly so noone installs it accidently and
document all this very clear (at the same wiki page where we hopefully soon
clearly document what arch and kernel to use for which arm board).

Martin




Home | Main Index | Thread Index | Old Index