From: Alexander Kanavin Date: Tue, 18 Nov 2025 16:58:43 +0000 (+0100) Subject: local.conf.sample: comment out the root-with-empty-password setting X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=babb02b5218ba0fe5c00745e115961eb15de674e;p=thirdparty%2Fopenembedded%2Fopenembedded-core-contrib.git local.conf.sample: comment out the root-with-empty-password setting This was not a good default; the autobuilder relied on it, but this has been fixed, there's now a separate fragment as well, and testimage has a check for the needed image features. Let's take this out and be more secure by default everywhere. Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie --- diff --git a/meta/conf/templates/default/local.conf.sample b/meta/conf/templates/default/local.conf.sample index 2639be3ddf1..fb6ed2c3bf2 100644 --- a/meta/conf/templates/default/local.conf.sample +++ b/meta/conf/templates/default/local.conf.sample @@ -122,8 +122,10 @@ MACHINE ??= "qemux86-64" # There are other features that can be used here too, see # meta/classes-recipe/image.bbclass and # meta/classes-recipe/core-image.bbclass for more details. -# We default to allowing root login without a password for convenience. -EXTRA_IMAGE_FEATURES ?= "allow-empty-password empty-root-password allow-root-login" +# +# The following will allow root login without a password for convenience. +# Use with care, and never in product builds. +#EXTRA_IMAGE_FEATURES ?= "allow-empty-password empty-root-password allow-root-login" # # Additional image features